Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer
File: xvKrLdUVqj7CSomz3Vcz9ixCLRw.cer (raw, json)
Hash identifier: AcwP0XLzQqyEjAXGX6is5DLWB5HI1aQfy947qhDkeQc=
Subject key identifier: C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAEDDA92F813DE77BF8603B4E96929C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.136.0/24
IP: 2a11:cec0::/29
Validation: Failed, certificate revoked on Thu 26 Oct 2023 16:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:dd:a9:2f:81:3d:e7:7b:f8:60:3b:4e:96:92:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f2ab2dd515aa3ec24a89b3dd5733f62c422d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:dd:bc:51:a6:24:02:61:2e:8f:ec:f0:59:
d9:b5:6d:8a:d1:31:c1:3f:c6:dc:df:8e:19:b3:22:
51:67:71:a5:5d:a9:e0:5f:1c:d2:58:0f:9a:a5:df:
77:c1:9b:f9:64:d6:6c:99:30:29:f2:dc:66:90:f5:
4c:dc:33:d5:2b:4b:ad:09:ea:86:8b:7a:58:79:ca:
57:a7:38:13:5c:8e:8f:08:b8:3f:3f:f4:34:5a:7c:
2f:57:67:52:01:d8:b9:2b:e5:46:da:d6:a6:e7:ad:
37:46:3a:73:ea:72:90:e6:54:ef:67:9d:a4:e8:16:
34:7c:33:47:d0:1d:88:43:7c:50:80:1a:0a:58:72:
ee:43:25:1a:a1:67:3a:34:48:d7:fa:96:b0:8d:ab:
e6:4a:fa:64:08:e8:8b:77:56:dc:ea:8b:18:0b:41:
2f:8f:76:d5:0a:56:31:2b:b2:cc:ed:8e:c8:30:24:
1e:bd:5e:b9:ff:73:23:7a:df:d1:ed:44:59:b8:f8:
d2:ba:53:b2:3a:c3:72:1b:a6:05:3e:37:e5:bf:b8:
ac:ec:cb:ba:17:b3:6e:11:15:4f:6c:5d:0c:8f:a1:
c2:24:d5:52:88:c7:f4:74:c9:5b:74:a5:b4:dc:9d:
58:f5:74:30:83:77:db:4d:df:f6:a7:26:cf:e1:3a:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:AB:2D:D5:15:AA:3E:C2:4A:89:B3:DD:57:33:F6:2C:42:2D:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/78bf9c-a0dd-4d83-84b8-a9a61d1c573c/1/xvKrLdUVqj7CSomz3Vcz9ixCLRw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.136.0/24
IPv6:
2a11:cec0::/29
Signature Algorithm: sha256WithRSAEncryption
2d:9d:d9:33:ca:5e:73:f7:75:ab:24:1a:2b:95:68:bb:f3:1e:
3a:91:b9:5a:b6:da:74:7a:2a:9e:b6:b7:56:a9:5e:43:2b:42:
c5:b7:32:16:45:f1:03:d7:16:4b:56:c8:cf:d9:bd:06:5e:e9:
ee:75:da:24:f4:c3:a7:43:c2:52:5d:f8:7d:b6:ea:a9:92:cc:
c1:bf:fc:88:87:d5:bb:7a:16:49:4d:92:a9:44:ec:fe:40:24:
ee:be:e3:a7:a1:32:1d:92:26:0d:18:dc:23:c3:19:2c:6e:a8:
8c:c6:a8:c4:e4:9d:45:3e:13:a1:6f:9d:cf:12:37:f3:9e:0d:
e1:eb:a2:83:bf:5c:d4:9d:a4:51:9b:2a:56:fc:9d:55:4b:3d:
7f:88:7d:c5:ad:c9:e4:34:b1:c8:f1:1b:85:56:a9:01:fb:4a:
b4:92:5e:c8:87:f3:d5:d7:d7:73:bb:d9:a0:10:ca:b5:80:55:
51:d8:2d:1c:11:4e:e8:ee:0d:be:39:17:ca:04:ac:a0:c6:be:
c2:b4:96:d6:df:f5:6f:14:b7:8e:7c:91:b8:0d:a2:32:96:e7:
d6:1e:f6:73:90:e2:ec:4b:08:d1:72:85:c0:d1:ca:89:d2:1c:
e5:51:61:91:a0:0b:10:82:56:c3:fa:20:b9:e6:59:9c:47:70:
38:4c:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:17 2024 by rpki-client on console-ams.rpki-client.org