Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_E0WjPn6ZtSiySHcK1Sjx3777WE.cer
File: _E0WjPn6ZtSiySHcK1Sjx3777WE.cer (raw, json)
Hash identifier: PeR7uRHXmnybRWzgzBqaUwnFESF3rQuhdRC5cFF4vDU=
Subject key identifier: FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49374F2A086A38D0CAC8B8FB1BF8BB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/_E0WjPn6ZtSiySHcK1Sjx3777WE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.211.159.0/24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 13:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:74:f2:a0:86:a3:8d:0c:ac:8b:8f:b1:bf:8b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc4d168cf9fa66d4a2c921dc2b54a3c77efbed61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4e:bd:64:82:1a:4c:09:f7:7f:29:fc:f3:9c:
21:02:99:9f:c4:ad:6e:a6:f6:11:7a:01:2f:ec:f0:
bb:95:11:a2:12:53:02:49:38:be:9f:f8:d0:45:15:
2e:16:ac:2c:43:2f:a3:47:3a:45:5c:40:3b:fd:38:
aa:bb:01:a0:4a:98:ba:d2:37:93:e0:2f:f2:08:cd:
e4:fb:8a:3e:f0:b7:59:98:25:05:62:2f:a4:2f:cc:
34:6e:0d:de:ad:fb:05:be:dd:98:89:28:40:20:d9:
ef:c8:7e:b4:14:7c:fc:2d:71:29:43:45:53:5b:4c:
ff:84:a3:2d:da:76:6a:1c:75:45:7e:f7:45:18:d9:
b0:13:79:26:4e:ad:80:12:35:59:50:14:e8:89:82:
01:18:99:26:c3:c9:82:2a:71:54:47:36:41:a5:65:
dd:88:33:7e:cb:53:31:36:c4:da:3f:1b:8c:ec:33:
47:d4:a8:93:85:2a:9a:25:b9:f3:7b:6e:e1:17:ba:
c9:81:09:d8:da:24:77:a0:97:da:57:b9:d4:37:3c:
4a:50:a6:6d:39:6b:4b:eb:b8:f4:76:db:db:1b:a2:
9f:5e:78:90:97:e2:e6:c7:ca:47:96:6d:0b:be:fa:
6c:d2:79:3c:95:7c:f6:56:9d:c1:2a:87:d3:a2:f7:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:16:8C:F9:FA:66:D4:A2:C9:21:DC:2B:54:A3:C7:7E:FB:ED:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/806ccc-d932-4ebc-bec3-dd1c4c0cf005/1/_E0WjPn6ZtSiySHcK1Sjx3777WE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:90:95:01:c8:92:ec:0d:48:5c:f8:de:74:3f:14:0c:b1:2a:
72:b4:dd:fe:9a:80:e3:a5:97:8d:a5:0d:9c:23:0b:97:c6:0c:
60:38:50:f6:f8:2e:7f:8d:17:61:61:4b:d9:53:52:60:48:21:
7f:88:42:56:48:9d:e7:30:14:4e:3f:70:d0:9c:63:08:ec:bd:
46:14:8c:3a:aa:30:b8:4d:f9:d4:f4:f9:b8:36:5b:92:f5:4e:
3e:b8:ff:1d:0c:29:71:5c:0b:36:a9:44:91:da:1e:bf:9e:cf:
90:d6:59:2f:d4:b1:e9:8d:3e:c8:be:15:86:44:91:14:52:03:
67:86:3c:a8:8a:a6:bc:7b:11:4a:bc:00:16:f0:ac:1d:98:20:
68:0d:f4:7e:8d:a6:3a:7e:a6:dd:7d:76:36:93:6c:4b:6f:85:
e5:9c:e8:5e:ec:18:20:dd:96:0a:39:64:c5:34:0a:64:fc:08:
90:70:5e:99:31:74:e1:fc:7a:3a:b3:99:fb:a7:dc:e2:03:11:
d3:0d:95:ce:26:f9:23:0b:92:dc:56:92:8f:06:5d:d3:97:6e:
ca:09:f0:1a:86:41:e7:56:38:7f:ba:bc:38:3e:a9:c4:20:5e:
cc:17:bc:ee:f6:a9:8b:c3:79:a0:80:02:a7:37:71:21:6d:21:
17:84:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 16:40:19 2024 by rpki-client on console-ams.rpki-client.org