Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
File: s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer (raw, json)
Hash identifier: mIT4Twcw3Lddj35LUIrSCCyV9uO0C2MtEYWSXTorHAk=
Subject key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EA1D8EC9B704DEB5F6CC68E1FBEAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.212.140.0/24
IP: 2a12:3380::/29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:a1:d8:ec:9b:70:4d:eb:5f:6c:c6:8e:1f:be:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:99:80:b4:90:7b:41:bc:83:a4:2f:ef:77:
fe:8b:6f:81:e4:97:6d:09:a2:f2:d6:a4:4f:24:0b:
90:40:3f:77:d4:34:b6:46:29:9b:61:55:d0:bc:09:
72:21:58:5a:b0:bf:f9:49:ca:85:2b:ba:74:67:51:
b8:3a:5b:bc:12:b1:4d:1b:78:10:cc:3d:11:cf:ee:
fb:73:2b:92:43:84:48:c0:4d:31:95:57:fc:aa:59:
c3:1b:4b:7a:72:26:09:21:13:74:3c:59:33:7c:42:
eb:1d:e6:c8:16:c7:25:fa:b6:fb:4c:b5:ae:b9:98:
48:a1:77:69:70:6e:14:15:16:40:7c:2f:9b:0d:0a:
72:84:11:f0:3f:1a:96:a9:92:43:c2:cb:e2:99:2e:
0d:c9:45:f5:12:30:76:56:41:20:35:5b:ae:28:85:
05:70:2f:7d:e6:ee:75:cf:98:d1:b3:95:87:04:05:
8e:57:2e:95:80:46:18:02:09:07:89:40:7a:24:54:
8c:cc:b7:06:d9:7f:3d:60:0c:4a:3a:ac:03:17:08:
d6:a6:a2:d1:f8:79:e9:c7:fc:4b:10:6c:ff:08:69:
96:62:84:c7:83:d2:9f:bf:b3:a6:ba:88:49:22:8a:
cd:34:cd:7a:bf:5a:29:6a:20:a5:f2:8f:0f:78:1f:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.140.0/24
IPv6:
2a12:3380::/29
Signature Algorithm: sha256WithRSAEncryption
99:df:58:d9:78:ee:d6:4b:8d:38:b1:99:1b:6a:18:71:b5:a3:
58:9a:4e:52:e1:33:c9:fc:7f:c4:88:f9:f7:b8:67:e0:32:72:
42:05:ab:1c:9a:c3:4b:a6:ec:b9:7f:ea:f4:c9:21:d9:7f:9e:
bd:e9:64:9c:02:03:d1:1c:1d:52:cd:cf:ea:29:fc:a1:07:d0:
20:b6:0a:02:d7:96:9f:f9:cc:15:ad:aa:a9:00:f8:ae:d7:d8:
b3:42:04:06:f9:8b:0e:72:ed:54:15:fe:1d:06:b3:35:e6:84:
8c:43:53:cd:c4:e2:71:25:a7:31:7b:92:18:56:86:9b:b7:bf:
b5:85:9c:9d:9b:31:4a:ae:5d:0b:cf:93:8e:2b:60:bb:0b:e7:
fd:de:e8:e0:19:47:a3:67:67:1b:b9:56:43:64:fe:2e:d5:b3:
7d:2f:1e:94:f8:20:7f:3e:d6:bf:88:0a:a6:06:ba:07:dc:79:
c2:59:c0:27:48:d1:49:3c:c3:25:4a:83:eb:74:42:77:07:87:
3a:f3:5e:20:d8:b0:2b:ab:b1:36:e0:9d:91:af:c0:f6:da:dc:
60:c1:c9:91:31:14:53:0e:a8:5a:95:08:2b:6f:0d:d4:77:a9:
f7:76:e5:ae:b4:42:3f:76:d9:ac:3b:17:f9:63:df:bf:a7:78:
4d:7c:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:45 2024 by rpki-client on console.sobornost.net