Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
File: 03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer (raw, json)
Hash identifier: yM9mAlis+/1xixT0MY+I4P/ouytvFXncck73cdbk740=
Subject key identifier: D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E58DE48CE64649D681EC13824A23D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.187.16.0/24
IP: 2a12:7080::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 09:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:58:de:48:ce:64:64:9d:68:1e:c1:38:24:a2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:33:56:b4:c8:af:16:31:8f:5a:03:d1:66:
99:c2:9e:44:0a:a5:6d:13:08:3a:3a:d3:03:2f:78:
68:52:ed:9f:e6:7d:b6:8f:d8:41:bc:19:1b:1a:2b:
28:e0:20:f1:64:a9:22:bb:3f:89:7c:53:4c:57:e4:
a6:cf:f1:5d:d6:f1:b6:c9:a8:fb:2a:41:c1:02:48:
75:eb:ea:25:54:9d:58:be:33:d7:a5:18:48:d6:18:
b1:7c:85:44:b4:19:07:cb:a1:8b:24:2a:ee:bf:bf:
f1:0f:5b:83:12:0b:55:3e:90:26:7c:51:38:1a:7a:
7a:cc:0c:8b:dc:37:50:c4:5a:da:b8:64:2f:ca:28:
f3:b3:ab:bc:1c:6d:a9:76:be:c2:ce:55:00:e7:d5:
6a:2d:3f:83:47:af:22:71:92:83:bb:84:dd:66:00:
98:a4:eb:23:8d:f1:b5:c5:bf:f5:4d:52:51:db:a1:
87:6e:32:6d:b3:ba:fd:a8:7c:7e:96:bb:f0:b8:cf:
ba:e4:c4:3a:71:92:29:be:ca:d3:da:a3:dc:c6:c4:
7e:94:c0:a4:69:d9:b3:95:de:5d:5c:87:40:de:8c:
31:e8:7b:76:b8:2d:ba:f9:98:91:3a:e2:18:9a:b1:
92:f7:5e:31:8e:97:ab:21:28:00:ba:ae:97:19:3c:
96:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.16.0/24
IPv6:
2a12:7080::/29
Signature Algorithm: sha256WithRSAEncryption
42:29:f8:d7:50:81:a3:9e:92:59:36:36:82:6e:2c:b6:38:2a:
27:44:67:ec:74:8e:c5:3a:08:41:93:48:e4:a0:f4:f0:90:10:
15:f3:87:70:25:46:cc:44:cc:17:75:2e:0d:b3:fb:98:f0:55:
32:c9:a7:ef:95:bd:26:74:a6:b8:c9:0f:09:3a:c5:21:c1:fa:
2c:c1:8a:e3:f5:fa:dc:22:09:3d:a7:67:2f:4a:10:7c:fb:80:
43:18:46:d1:10:58:e1:61:61:9e:de:89:b1:2d:82:28:e9:80:
09:05:50:d8:a1:d6:36:0b:33:2b:8b:33:32:71:8a:33:e3:89:
90:8a:8e:47:e6:e8:05:2b:3b:08:87:4b:68:d7:bb:31:f6:67:
be:43:4d:23:af:a4:53:a7:a2:a6:65:a0:bc:dd:40:2f:d9:13:
c5:40:50:3d:01:94:ea:38:6f:29:81:9e:6b:75:d9:e4:a3:3f:
c9:fb:02:bf:14:dd:a8:49:e0:e5:ee:63:84:d6:e6:79:fb:5b:
9a:9c:c7:9e:cb:db:56:e9:96:8c:99:85:b7:c1:81:bd:aa:10:
15:be:de:73:87:87:e7:21:5a:41:b3:97:3e:09:2e:46:74:1d:
f8:60:24:aa:2c:de:00:98:c0:21:74:e7:d5:62:55:c4:72:2c:
3b:bb:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 13:51:10 2024 by rpki-client on console-fra.rpki-client.org