Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer
File: xJy1uF98Xal-tHQaa7dZl4EZBAU.cer (raw, json)
Hash identifier: 2OJNYHxZrqj5lnHoW9vn9l4t9J4fP+mFIJU4gALZcuM=
Subject key identifier: C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708B14602B731D8632D952A00EC05D5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 81.27.224.0/22
IP: 2a07:f340::/32
Validation: Failed, certificate revoked on Tue 29 Aug 2023 06:54:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:14:60:2b:73:1d:86:32:d9:52:a0:0e:c0:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:19:c8:6b:a4:89:e5:8d:a2:cb:81:e5:d5:99:
9e:3d:b7:ee:4c:34:68:90:a9:c0:22:2d:27:fd:42:
f2:bd:92:03:6e:3b:33:e9:fa:ee:32:03:c9:be:51:
48:c6:c8:f8:4e:0e:21:6c:0a:46:80:49:c6:92:98:
9f:7c:45:89:e7:b4:3f:c4:44:3e:b1:59:a2:db:bd:
88:09:72:b8:fa:e1:fb:ff:f2:7d:62:28:88:33:90:
c9:f8:94:db:df:2b:dd:16:9a:ff:24:0c:c4:cf:24:
39:e0:44:35:3a:5a:89:d2:00:2e:c1:3d:2d:11:cf:
7e:c6:fb:c4:25:55:7b:c1:ec:b8:88:46:46:86:21:
b4:d4:a7:62:8e:76:f1:db:00:25:f1:54:7d:82:23:
4a:83:0c:db:88:43:15:ea:05:97:62:81:db:80:d7:
db:f6:fe:f9:d7:17:2b:f5:ef:b3:0a:55:da:e2:e8:
fc:c2:53:3c:9d:8f:d8:c5:9d:86:65:d3:fa:ed:09:
1e:7a:3c:af:6d:e8:52:0b:d0:b7:6d:e8:c4:53:f9:
41:3e:31:f7:eb:37:c1:ab:90:ad:3e:a8:23:5e:3a:
59:30:d2:f7:19:e4:dc:89:39:aa:29:a4:04:ae:81:
c2:8b:f1:c2:c2:82:03:5a:3a:ef:c8:56:dd:db:6c:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.224.0/22
IPv6:
2a07:f340::/32
Signature Algorithm: sha256WithRSAEncryption
14:ba:ad:9e:d1:e8:f5:d6:81:48:80:6d:63:de:cd:61:77:ef:
af:45:9b:60:97:8d:09:59:bb:20:92:94:9c:60:a7:eb:3d:e7:
7d:99:65:be:ef:65:82:2c:6c:0b:95:56:50:61:98:72:6a:69:
20:47:8e:4d:e0:45:94:04:54:41:c2:cf:ec:58:b3:a3:e2:e5:
c1:a8:a0:fd:e8:64:47:b4:e6:43:59:64:da:7f:86:4f:93:e8:
a5:2c:a4:b8:13:0e:b2:b1:19:c1:60:b7:ab:4c:c3:b6:18:61:
58:d0:30:6f:00:12:8b:c5:90:c4:69:05:71:9a:29:f1:c5:f3:
73:5f:b1:db:87:be:5a:00:19:71:f8:6c:11:0e:c9:9f:1e:aa:
26:51:41:e4:3f:5d:ce:05:d8:60:93:c2:22:55:8d:8d:7f:ce:
0d:c5:6b:08:25:5f:da:54:34:4b:26:82:42:1a:83:87:2d:ba:
30:a9:f1:e8:42:9f:f3:fe:21:8e:f7:ea:aa:5a:9c:9b:c3:9e:
8d:13:b2:72:a7:2c:b1:2f:c9:ae:9b:0a:fb:80:40:18:43:4b:
a2:85:da:bf:34:e0:7f:98:d0:d2:ef:b5:11:fe:56:8f:f3:d4:
c2:61:89:3f:b2:27:e9:da:4e:5b:73:84:0b:1f:e0:a9:24:43:
7f:60:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:04 2024 by rpki-client on console-ams.rpki-client.org