Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YxJxtcTIiRYPq80iuQcUOYdn0U.cer
File: 0YxJxtcTIiRYPq80iuQcUOYdn0U.cer (raw, json)
Hash identifier: jVMm9jfou7jL7Gm6AH0Ntq3XXq+ITHvi6JtVCz2YZwM=
Subject key identifier: D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42480B25B0C5F900766D6407B6A0935
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.91.220.0/24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 13:41:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:80:b2:5b:0c:5f:90:07:66:d6:40:7b:6a:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d18c49c6d7132224583eaf348ae41c50e61d9f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:8e:e0:41:39:78:03:db:8b:bc:e0:da:2e:
ea:7e:28:a0:75:d8:e3:c6:7a:32:a4:5b:bf:19:a5:
ca:dc:12:8c:f0:fb:f4:2f:09:6b:6f:75:62:57:60:
60:31:99:b9:50:ac:69:12:02:05:6d:9f:d3:0a:0a:
a6:50:8d:e8:e3:a5:f7:ed:e3:7b:98:b0:6a:8a:fb:
88:01:fa:0a:2e:f5:c0:9f:3b:2d:34:3e:02:96:b7:
21:b9:f6:9e:52:b4:bc:dc:82:78:c9:63:4d:af:6e:
29:71:69:ac:7d:f1:e4:d3:85:ee:7f:14:0b:87:0e:
62:70:40:88:c0:dc:8a:5c:ea:41:ce:7f:ee:cd:41:
39:07:8e:53:97:31:e7:f1:14:a1:60:71:73:b1:1d:
06:69:c0:57:32:c7:2c:19:1b:63:95:42:0f:87:77:
7c:3a:ef:c1:07:50:94:d9:de:0e:a3:3f:27:8a:3f:
8b:3a:29:0a:ed:aa:2d:70:f9:ad:9b:be:33:3e:ee:
ce:26:cd:85:a3:f7:fb:e1:66:f5:bc:5d:05:9a:88:
e5:5f:c2:fb:af:a9:b1:9e:ab:fc:0c:cf:7f:af:7b:
11:b6:a6:48:fe:61:f4:06:03:fc:0f:82:c5:18:f6:
c7:89:e2:ba:83:ae:46:19:bd:89:b8:07:fb:7a:3e:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8C:49:C6:D7:13:22:24:58:3E:AF:34:8A:E4:1C:50:E6:1D:9F:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1fef82-0ae8-48c6-9868-4a16ff9c795b/1/0YxJxtcTIiRYPq80iuQcUOYdn0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.220.0/24
Signature Algorithm: sha256WithRSAEncryption
64:29:79:6e:c0:b5:db:27:b0:00:8c:b2:96:dc:f7:15:39:0e:
78:c9:fb:c6:d0:14:8a:d6:87:0d:08:22:b3:51:63:c1:73:3d:
5b:10:27:2a:3d:19:3f:d5:4f:4c:10:65:92:6f:72:5e:56:da:
63:37:c3:a8:26:26:eb:ed:81:17:e9:3a:9a:45:01:27:41:71:
57:74:a4:94:0f:af:49:e5:4c:21:fc:05:14:6a:a8:e3:38:18:
04:13:b7:bc:7f:99:97:a0:20:74:d0:00:7a:d5:8d:c6:ae:53:
55:bf:36:a1:06:72:fa:15:c7:67:ff:00:e4:19:8a:54:89:92:
e2:32:51:35:ec:23:04:59:03:4e:09:ca:8a:1e:bc:4e:4f:57:
45:59:a8:df:e0:3a:9e:8a:e6:e1:63:c9:02:4f:17:d3:0b:dc:
6d:7f:c4:55:97:4c:86:17:24:41:ad:89:82:e7:1b:ca:0e:39:
b5:4c:06:13:14:d8:7c:af:87:64:b1:2c:fb:61:4b:71:4a:af:
3a:94:50:20:05:8d:dc:07:4e:c4:23:33:95:bb:61:da:97:57:
29:cd:55:bd:81:2e:39:e7:e3:2c:ac:45:73:cd:e1:a8:67:1d:
fc:7d:f8:c0:b6:a5:d5:ec:22:13:e4:4e:45:82:a7:9f:49:b0:
07:bd:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:12 2024 by rpki-client on console-ams.rpki-client.org