Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer
File: 1-bEIeM4wGibH-EFyPr6XPdWpH6k.cer (raw, json)
Hash identifier: aG0vw8FjDGqPW3rMVWPcSsWQczHcYgTJ6hnlF0iFLwg=
Subject key identifier: F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFB5C15F7EFA6AF7AA529CAB204F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1-bEIeM4wGibH-EFyPr6XPdWpH6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 58281
IP: 91.240.69.0/24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 09:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fb:5c:15:f7:ef:a6:af:7a:a5:29:ca:b2:04:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9b10878ce301a26c7f841723ebe973dd5a91fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:51:7a:a2:98:f9:9b:9e:1e:ae:96:01:7f:
c8:9a:ec:16:4d:54:eb:7d:98:d1:61:6d:9f:22:65:
91:35:e0:7b:08:5c:5b:2b:e1:58:59:39:4b:34:69:
b5:b7:09:15:1b:26:b0:17:c2:54:55:2f:76:fe:d3:
19:92:a0:6c:64:1d:ef:1d:cb:6f:6f:e3:f9:b2:89:
dc:5a:f5:12:5b:3b:9b:39:6d:b3:9a:10:32:d1:ea:
28:a0:b8:b5:b0:3e:a3:1f:e9:37:af:0b:a0:ef:90:
3a:26:b2:7e:d1:1f:ff:a5:8e:18:17:b2:a1:67:de:
26:16:5f:9c:77:59:95:ff:48:90:56:96:88:da:fd:
94:8e:e9:b3:77:5d:a9:e4:7e:c6:c8:d2:67:7f:69:
da:b8:a8:98:c4:d1:d9:2b:2b:f3:04:39:30:d1:47:
60:ba:a4:c7:d0:2e:68:2c:d3:bd:a8:76:13:3e:c9:
40:71:04:c9:a8:40:1d:2f:1f:21:3c:86:b0:9c:fd:
95:e2:b4:68:ba:44:f2:5e:25:29:2a:b6:c3:6c:ab:
95:83:4f:40:1c:ba:18:f6:9f:c2:95:06:3c:9c:29:
b7:38:8e:eb:c7:26:91:e5:d1:46:b9:5f:c2:29:7a:
41:8e:6c:b1:d5:7c:4d:e0:6e:c3:39:a5:f6:20:ab:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:08:78:CE:30:1A:26:C7:F8:41:72:3E:BE:97:3D:D5:A9:1F:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4e8c8f-61e8-4739-b282-c57ac3c017ec/1/1-bEIeM4wGibH-EFyPr6XPdWpH6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.69.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58281
Signature Algorithm: sha256WithRSAEncryption
64:94:a8:b9:dc:57:8d:ea:5b:de:d6:cf:76:8e:1d:d1:20:42:
86:63:f2:10:96:8a:ea:27:03:2e:81:0a:ae:e6:8b:0e:b5:72:
91:8e:54:0c:9d:a5:0b:b4:91:54:01:01:1d:a5:51:38:4e:08:
36:71:9e:ac:af:a2:dd:a9:a7:92:73:80:e4:f4:e6:93:a7:39:
8d:7a:b4:0f:b6:7c:98:94:58:ee:f2:c3:a1:46:3e:63:95:ec:
67:1d:67:02:8e:09:a5:5a:2d:10:da:94:2c:fe:46:39:fe:02:
eb:0c:9e:8d:4b:0d:3f:bf:2c:ec:12:3e:dc:62:78:fa:77:32:
98:af:21:56:9a:b4:d4:d3:e1:11:0d:7b:c1:e7:10:0a:56:40:
d2:3b:d7:81:19:b5:28:9c:cf:b1:b1:77:41:3e:3b:11:4b:b2:
c9:a4:f7:09:42:ed:ed:e0:48:e4:bf:d1:ee:8f:53:63:0e:43:
57:ea:ed:7b:0e:53:ac:43:3b:a7:0c:35:13:ed:1b:11:b1:45:
bb:ca:97:5c:bc:30:9d:a3:3f:15:d5:c0:30:5d:ad:41:e4:fd:
c2:05:38:5c:86:52:20:8d:e4:6c:d0:8c:c0:b0:56:66:8e:86:
be:6c:3c:f7:eb:7a:e8:77:e0:10:15:c7:1f:dd:ef:8f:9a:b5:
9d:99:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:05:34 2025 by rpki-client