Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wNGzKHudnbGvcFnaELRrYRh5acQ.cer
File: wNGzKHudnbGvcFnaELRrYRh5acQ.cer (raw, json)
Hash identifier: EHzlJqqnF531FjJ7lzl/Kq8O5x5W12MgxnTyUgfQsjo=
Subject key identifier: C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD7EB1CBDDEEF1FD687AD7D0069644
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.182.44.0/22
IP: 85.208.252.0/22
Validation: Failed, certificate revoked on Thu 14 Sep 2023 12:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:7e:b1:cb:dd:ee:f1:fd:68:7a:d7:d0:06:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0d1b3287b9d9db1af7059da10b46b61187969c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c6:7a:15:68:d4:a3:4d:a4:5c:72:42:43:93:
e9:61:05:9b:27:e2:2f:86:87:dd:d6:e3:c0:b7:fc:
9b:62:2e:08:2b:d6:a8:cc:bb:5d:19:75:da:8c:f9:
5b:70:9b:4e:a6:85:36:50:d4:76:e9:20:87:b1:41:
72:b4:d9:79:a8:d0:ad:f5:61:e2:6a:ac:24:f2:08:
7c:e7:fb:19:c9:57:8b:e3:49:f6:0b:f6:ac:12:4c:
64:e1:e7:90:0f:8d:57:f6:27:e3:4d:ed:a5:fc:bf:
78:f9:00:5a:d1:73:e7:6a:80:d9:fa:c9:4d:b8:96:
67:ab:29:b1:51:50:28:75:f9:83:eb:fa:6d:43:70:
00:ed:76:40:ec:13:c4:ec:75:49:e4:cb:f0:5d:47:
b4:8c:c4:0c:78:12:43:c1:bf:a0:6e:7b:62:09:79:
62:32:cf:6e:1f:7a:3f:9e:16:61:54:a9:08:9f:9a:
6f:d8:53:8b:1d:05:84:bb:60:6a:d4:a8:1f:bd:84:
c3:f9:70:68:99:04:47:78:be:a1:0d:b4:f2:84:0e:
ee:12:5a:5e:f0:c0:5e:a3:33:d1:59:0c:0b:8c:d2:
68:e4:65:98:bb:8b:88:2c:2d:74:88:24:d3:f9:77:
3d:d3:b6:8a:01:27:b1:41:62:64:2d:9a:f9:94:b9:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D1:B3:28:7B:9D:9D:B1:AF:70:59:DA:10:B4:6B:61:18:79:69:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4dc07a-da6d-49fb-be8e-8eb02c23f7e5/1/wNGzKHudnbGvcFnaELRrYRh5acQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.44.0/22
85.208.252.0/22
Signature Algorithm: sha256WithRSAEncryption
37:9d:37:a9:ac:f9:bb:63:43:39:00:8e:d8:a0:7e:6e:04:ff:
6b:4c:9b:77:0c:1c:d5:7b:26:ed:01:a9:eb:2f:a1:a0:a8:a7:
b4:c5:4d:0d:ea:8c:c6:c0:93:23:13:60:52:fb:70:ba:d0:4f:
a0:b2:96:42:ab:9e:d0:7b:8b:74:8b:3f:6d:01:cc:9a:2f:84:
01:6b:b9:ac:f5:e0:5a:f7:f0:7d:b5:1c:5f:f6:1a:99:80:67:
8b:e9:84:62:aa:77:68:60:60:52:9f:59:c6:22:53:4e:cb:83:
42:b3:d2:78:c2:18:e2:ec:34:e7:67:be:a7:82:3c:ec:72:e9:
19:02:b1:78:ef:32:24:7f:89:da:13:81:fc:f4:e9:34:46:11:
9e:db:c6:cd:35:65:74:11:b6:72:ce:78:6f:76:71:9c:1e:54:
99:20:55:d3:dc:f4:6f:4b:a6:53:53:3c:a4:c7:ea:61:95:2d:
06:ab:19:24:90:d0:25:53:6f:d9:78:39:55:80:27:cd:dd:d5:
a0:60:4a:ac:93:e9:5d:68:7c:93:08:86:76:b9:a6:f3:69:09:
46:34:d6:41:dd:c5:e0:bd:00:0f:e2:ee:72:23:89:82:58:36:
0b:27:70:cc:06:3d:5a:18:b5:7f:30:d9:7a:46:34:65:f4:cb:
f4:48:2f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:44 2024 by rpki-client on console-ams.rpki-client.org