Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IBfMWA0nPFS6MGTNLNavObgEuIc.cer
File: IBfMWA0nPFS6MGTNLNavObgEuIc.cer (raw, json)
Hash identifier: k39g8P3zk+9IA9VLavsbfZOh59T5VU0e4og4o32NDIM=
Subject key identifier: 20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC263B0D978716D05BB21072886437E5D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
caRepository: rsync://chloe.sobornost.net/rpki/uplift/
Notify URL: https://chloe.sobornost.net/rpki/news-public.xml
Certificate not before: Mon 01 Jan 2024 00:19:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2938::/48
Validation: Failed, certificate revoked on Sun 11 Feb 2024 12:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:63:b0:d9:78:71:6d:05:bb:21:07:28:86:43:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2017cc580d273c54ba3064cd2cd6af39b804b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:38:df:ee:41:95:30:7b:89:14:35:5b:8e:
1d:30:19:79:02:8a:78:23:75:be:52:89:78:0e:f8:
92:67:94:ea:2d:1e:92:e1:bc:ab:b2:ec:75:0e:88:
a3:1a:43:92:80:12:9f:1c:da:f7:d5:74:bb:ac:7a:
82:c1:c3:51:33:b6:db:df:04:bb:70:a0:12:01:95:
02:42:db:bd:7e:1c:15:37:64:2e:33:b0:96:7f:f7:
b1:7c:fa:0c:95:45:bb:21:ca:b3:45:50:28:de:dd:
7e:90:6c:dd:45:d1:1b:ca:5d:fd:a5:9b:e1:d5:ce:
f5:08:16:74:fe:41:34:67:94:20:e7:87:73:f0:4a:
98:7f:c6:3d:65:68:fb:95:ad:5d:eb:29:37:13:e7:
20:42:dc:5a:a3:5f:d4:bd:dc:05:be:98:21:6a:73:
2a:6d:f5:1a:3b:73:ea:58:e2:d9:60:54:99:26:b4:
ce:08:f3:d2:35:9f:32:9a:2c:c1:46:69:6c:dc:c1:
7d:1b:64:ba:77:6a:5e:df:f5:10:54:4a:6d:e7:bb:
ae:48:40:f9:8d:d6:57:c0:5a:74:a9:fe:79:ad:5e:
11:e8:11:d5:ca:a0:5c:b2:4a:d6:79:7e:55:d5:11:
3d:1e:d6:5c:ee:37:d4:c8:50:96:6d:ab:67:7b:55:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:17:CC:58:0D:27:3C:54:BA:30:64:CD:2C:D6:AF:39:B8:04:B8:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://chloe.sobornost.net/rpki/uplift/
RPKI Manifest - URI:rsync://chloe.sobornost.net/rpki/uplift/IBfMWA0nPFS6MGTNLNavObgEuIc.mft
RPKI Notify - URI:https://chloe.sobornost.net/rpki/news-public.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2938::/48
Signature Algorithm: sha256WithRSAEncryption
35:08:14:ef:b3:ef:8f:e5:66:97:f5:a2:5e:91:14:1d:20:87:
fc:3a:8a:04:8f:ed:74:13:ac:8e:25:e0:8b:97:59:18:8c:1a:
56:0f:32:88:22:54:63:ae:bc:c8:ed:9b:c9:bb:15:41:f7:63:
07:99:86:32:cb:40:58:68:36:57:6a:57:10:7d:46:4d:9f:17:
85:e1:ac:a9:a2:0e:d0:29:20:d1:47:e6:61:f5:97:41:c3:86:
aa:25:0f:93:8a:1a:65:8c:1a:d3:10:fe:53:ae:0f:aa:8f:c9:
b4:b4:98:6e:f0:30:f1:20:44:71:f5:0b:ff:bd:18:9c:c0:9e:
00:ec:67:33:80:63:38:82:e6:a8:80:0d:c9:26:c0:e9:66:86:
d9:99:97:a9:77:48:30:19:7f:b1:2a:2f:f7:33:74:a3:9b:83:
8e:13:6d:2b:20:3c:93:8f:28:73:2e:e7:a6:11:00:f0:17:f3:
a1:27:8e:ff:6e:25:7b:ad:f6:08:2f:5b:98:83:b7:03:c8:89:
1b:87:53:b8:c0:37:80:fb:bc:25:a7:df:d2:44:5a:be:12:28:
e1:2c:44:d7:94:54:a1:52:d3:6d:03:57:21:24:37:6b:55:31:
45:32:dc:81:ce:6f:89:04:e9:68:d3:b6:ef:eb:76:0f:91:2d:
a8:df:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 17:40:35 2024 by rpki-client on console-ams.rpki-client.org