Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-2pm68OE1id664aH78A9_zmas3A.cer
File: 1-2pm68OE1id664aH78A9_zmas3A.cer (raw, json)
Hash identifier: Mm+2fY/POusWjLMEO0RoYML0pGrLq+2agzO2GVNwlVI=
Subject key identifier: FB:6A:66:EB:C3:84:D6:27:7A:EB:86:87:EF:C0:3D:FF:39:9A:B3:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E06248B67D595D67E88819A3704C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/1-2pm68OE1id664aH78A9_zmas3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.17.88.0/24
IP: 2a11:1840::/29
Validation: Failed, certificate revoked on Thu 14 Sep 2023 13:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:06:24:8b:67:d5:95:d6:7e:88:81:9a:37:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb6a66ebc384d6277aeb8687efc03dff399ab370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:0f:d6:40:3e:0f:56:d2:5b:42:fe:49:4c:
e3:84:f7:cf:04:13:3e:04:9d:b8:20:28:de:28:46:
5d:a4:94:67:cb:a5:5d:7c:8e:6c:cf:95:59:b2:83:
d2:bd:2c:62:aa:a2:72:4a:14:22:2a:14:6f:97:b3:
31:2c:b3:b2:f8:55:8a:5e:0e:d9:64:03:60:00:d3:
7d:da:9f:6a:69:e9:73:09:ad:cd:84:26:d4:0e:6d:
b5:87:e6:c3:9d:a0:4b:53:ca:ba:48:18:d7:cd:b7:
96:9b:bb:83:ac:16:f2:0d:ae:8a:22:99:e3:3b:42:
d9:72:65:8b:86:10:5c:31:8b:da:ab:a5:23:33:f4:
3e:42:5a:77:5a:b4:9f:bd:44:cc:6b:9d:a0:19:21:
3b:95:6a:43:01:fb:9c:43:c3:96:2b:08:f0:28:c1:
da:bb:bf:5e:01:ef:64:9e:f7:15:47:62:82:70:24:
1e:8c:8d:9f:8d:bb:fa:84:8e:d7:72:80:7b:46:16:
4e:26:ef:af:7a:9c:7f:6c:a2:32:7d:cb:56:c5:75:
c9:0d:5d:2a:c7:a6:00:b3:72:88:e3:9a:ec:99:e0:
6b:cc:30:ad:e9:dd:e3:2c:86:c5:fb:1c:f4:34:4d:
57:e5:c7:ac:21:da:f1:c6:3b:f8:9a:b3:41:e4:08:
0d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6A:66:EB:C3:84:D6:27:7A:EB:86:87:EF:C0:3D:FF:39:9A:B3:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e14aad-600d-472c-8259-67503ff7bb4d/1/1-2pm68OE1id664aH78A9_zmas3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.88.0/24
IPv6:
2a11:1840::/29
Signature Algorithm: sha256WithRSAEncryption
51:1d:d9:7d:29:f5:b6:d8:f5:28:fe:46:10:d5:ea:00:79:43:
ed:fa:fe:1b:b2:ec:89:9a:d1:f1:a8:bd:ad:f5:39:0c:94:19:
15:40:d9:be:5f:72:44:26:ec:a7:f5:7b:d0:a2:bc:a9:97:3f:
0c:49:4e:88:5c:8a:e7:d9:85:ff:57:53:73:6b:9d:57:69:1a:
d9:c5:81:8b:ed:2e:ad:f1:c9:30:1d:8a:3d:27:81:95:e0:80:
9b:98:7a:b2:1b:77:77:82:2a:3a:f7:e1:82:71:0e:67:23:c1:
24:e3:2c:9b:41:82:21:a7:9e:c5:18:5d:ce:b6:31:5e:90:a5:
c1:90:86:7d:13:60:ab:3f:89:9d:39:a9:c0:c0:76:56:97:29:
9f:2d:cc:e8:af:8e:49:14:93:00:b1:9a:9e:55:47:85:3b:af:
9f:5d:d9:9b:54:87:d5:c8:82:77:34:46:ac:14:6b:c1:a9:43:
ca:a0:32:91:87:60:60:37:14:bb:c3:a3:44:c8:bf:b2:2a:14:
e9:7c:0a:2f:c6:a0:19:ae:44:96:62:69:70:4b:1f:44:47:1d:
94:36:b4:ee:a2:5f:1e:c6:49:4d:76:cb:b7:77:4f:0a:d2:83:
df:da:09:60:00:c6:82:62:57:f5:f2:2d:82:ea:d9:48:0e:4d:
76:44:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:13 2024 by rpki-client on console-fra.rpki-client.org