Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
File: y2shj2088NsAUcoWoeUtUMbLKxg.cer (raw, json)
Hash identifier: AYQQyV0Q01BQ7R4kbjCvHlHyr9uW3uXqC1AFsGb/dl0=
Subject key identifier: CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAE69BCFB2E34C18FEC8A38DF39A47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/y2shj2088NsAUcoWoeUtUMbLKxg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.142.0/24
IP: 2a11:d040::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 09:22:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:e6:9b:cf:b2:e3:4c:18:fe:c8:a3:8d:f3:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:24:60:6a:de:21:0c:ed:f0:39:75:52:4b:
3c:bc:5a:81:d9:16:45:27:50:69:40:9d:c3:fa:8f:
fe:49:a3:85:ef:87:51:40:3f:3b:f8:37:7f:1c:a3:
4b:64:e9:a8:75:f3:04:d1:36:8c:ee:70:88:e7:49:
03:99:c0:12:9b:03:b2:2b:74:88:32:0c:89:8a:17:
4c:17:7d:25:04:da:90:fc:74:70:dc:ec:a9:6c:ed:
84:d3:92:92:2a:77:d6:c6:f5:64:b6:5c:36:7f:a1:
b2:7d:d3:f7:ee:4c:55:f9:73:11:a3:73:ef:bd:e1:
15:b1:83:4b:05:eb:f1:bf:d4:67:9d:99:f7:e6:56:
9e:d2:34:a4:ba:4c:1e:3d:99:5f:e7:7a:62:2f:50:
9f:31:4a:c0:8a:09:af:db:15:c8:1e:9f:68:d6:76:
8f:35:fd:b3:c9:43:fb:57:89:ea:81:70:aa:6b:15:
8b:04:de:39:3e:06:ad:22:90:f4:8e:4a:c4:dc:47:
3b:ef:fe:45:5e:59:94:a9:54:30:83:7d:4f:18:b2:
da:ed:62:c5:bd:b1:0e:75:29:b8:07:19:9f:67:7d:
03:3d:d0:56:79:a3:f0:aa:14:b7:42:64:56:81:27:
30:f3:49:a6:6a:48:e7:67:a3:3f:1d:6e:a5:cc:8c:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/y2shj2088NsAUcoWoeUtUMbLKxg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.142.0/24
IPv6:
2a11:d040::/29
Signature Algorithm: sha256WithRSAEncryption
79:9e:cf:1e:12:59:76:f6:2b:dc:ac:96:3e:85:c9:6a:b4:e0:
71:54:32:01:66:b3:f9:ef:2d:a9:b4:a9:60:d1:1f:c5:7d:37:
c1:b2:d7:65:d4:ec:72:7a:7e:d6:e9:4d:82:db:c7:89:db:9a:
e4:28:d3:6a:64:3a:e4:df:02:91:aa:08:08:97:e9:5f:3d:39:
7c:14:dd:56:a6:06:97:d9:22:8e:03:07:00:88:2e:97:29:28:
bc:dc:8a:f3:5a:cb:cd:60:d8:8e:4d:92:54:59:e7:ce:72:f8:
7f:e6:f0:e8:fc:f6:ca:cd:6b:5b:5d:a6:a0:70:c5:30:c4:0c:
64:49:df:f1:26:8e:b5:f1:fc:41:b9:c9:df:3e:a0:ad:3e:2e:
ab:c0:89:98:ec:e2:7c:c4:25:1e:c8:ff:77:2c:2a:32:5f:8e:
82:52:e6:d4:d5:1a:2c:b9:34:ba:12:41:f7:66:97:55:c2:3f:
46:33:fe:d0:f6:1d:38:0d:42:57:dd:14:e8:52:1a:49:a4:fb:
f7:b7:40:9b:0f:a9:ca:5a:d1:4b:75:a4:f3:a7:3b:8a:33:5a:
14:cf:d9:d4:2b:9d:f9:c4:57:7a:ef:25:02:87:91:a4:e7:2d:
56:0f:c0:7a:29:8c:b7:d7:f7:00:db:35:8d:d4:1f:74:43:aa:
55:c9:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:20 2024 by rpki-client on console-ams.rpki-client.org