Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f898ZItKZXIK3wBmZBrDD18HpRI.cer
File: f898ZItKZXIK3wBmZBrDD18HpRI.cer (raw, json)
Hash identifier: q3zLTJ3PvFhb2+nEG1x3Gl1p/b/9d8DPtmI4RlaW2/g=
Subject key identifier: 7F:CF:7C:64:8B:4A:65:72:0A:DF:00:66:64:1A:C3:0F:5F:07:A5:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7B3A6DE979F73D3097A43017AF4A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.190.121.0/24
IP: 2a11:7480::/29
Validation: Failed, certificate revoked on Wed 30 Aug 2023 07:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:b3:a6:de:97:9f:73:d3:09:7a:43:01:7a:f4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fcf7c648b4a65720adf0066641ac30f5f07a512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:30:0e:65:29:27:40:11:82:62:fd:50:67:
5c:fa:1a:eb:5b:19:2f:8b:28:84:d3:54:80:e3:05:
08:96:5b:d6:8c:6a:4f:1d:01:7e:f2:44:51:d2:7d:
70:d6:18:f6:5f:60:4c:25:a2:44:9f:68:ca:ec:f9:
47:a3:42:58:b4:1e:14:b9:19:60:4e:30:d2:5a:8b:
54:c9:41:88:ea:2d:58:87:79:f9:47:1d:06:fd:4c:
58:01:09:b4:8e:20:8e:e6:3d:d1:ab:5c:5f:fd:d6:
23:c6:d7:08:70:15:8c:0e:12:29:5f:d2:70:13:ed:
b7:e8:90:f4:bf:73:22:75:93:b7:9a:72:8d:d5:98:
8c:c3:92:19:3c:18:d2:12:42:9e:f9:e7:cf:47:9d:
17:7c:02:c4:14:8a:8a:68:88:f2:8d:88:16:fe:f2:
91:0a:23:3c:2b:43:40:b6:d6:0b:76:23:47:11:c2:
bf:f5:40:ab:80:53:f3:e7:a6:6c:16:19:64:80:4c:
37:8d:fb:d5:d9:80:f9:5e:43:bc:78:8a:b2:d1:4f:
a1:5c:5c:c3:e2:4c:5b:51:23:30:84:d3:b1:e2:b6:
5f:f4:4f:2b:38:33:60:35:04:63:41:88:56:8e:96:
bf:eb:1c:ca:d3:08:30:18:70:1c:39:e8:db:22:db:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CF:7C:64:8B:4A:65:72:0A:DF:00:66:64:1A:C3:0F:5F:07:A5:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.121.0/24
IPv6:
2a11:7480::/29
Signature Algorithm: sha256WithRSAEncryption
3b:ce:eb:08:e2:cb:f2:9f:38:71:ed:ee:73:de:69:72:7c:87:
5f:a6:53:5f:e9:e0:d5:20:00:13:8a:09:49:6b:30:17:14:f7:
fe:9f:16:3c:63:92:08:06:d0:0f:5c:39:b7:ed:6e:c6:9b:af:
5c:92:d2:c8:00:73:0a:72:6b:b6:c9:32:b2:81:03:ca:2d:2a:
5a:d5:9e:8e:af:bc:07:40:8b:9c:22:1b:e4:16:ac:f1:74:76:
b3:5d:7d:7f:6e:08:b1:7a:f1:de:c9:ed:c4:3a:ed:bf:56:d6:
49:ea:8c:54:0c:1f:f8:1a:15:71:90:22:c6:dc:66:e4:51:cc:
50:81:77:71:0c:c0:13:83:aa:63:84:dc:34:c3:59:40:04:43:
66:a9:1e:1e:c6:4e:e3:1f:f1:de:8e:74:56:95:22:50:0e:5b:
b0:92:c2:a1:3d:7d:c3:c0:1d:1b:8f:0a:e5:4f:01:93:f6:9e:
25:db:43:8d:fb:41:59:90:08:e1:83:18:29:dd:58:67:41:7d:
4c:c5:71:8b:3b:51:75:f1:36:d9:47:fc:80:14:1a:32:0a:7e:
50:30:73:2c:a1:b0:82:81:e7:a5:f8:f7:f3:2e:52:5d:20:c5:
4a:51:d2:dd:f3:ae:b7:6f:85:f7:84:af:ec:6c:55:8b:70:ba:
d9:15:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:17 2024 by rpki-client on console-fra.rpki-client.org