Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer
File: 1-ynPI_yc5uK4w5Mj0nDOUuiThwI.cer (raw, json)
Hash identifier: AvAtW4Z7ordMAwI/gBpIqZ8mOCO0jNEoZyIuFdknsds=
Subject key identifier: FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D8E0CB12BE6931A39EB54E12410B2F7E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 Feb 2024 13:26:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.28.130.0/24
IP: 2a13:5040::/29
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:0c:b1:2b:e6:93:1a:39:eb:54:e1:24:10:b2:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 9 13:26:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb29cf23fc9ce6e2b8c39323d270ce52e8938702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:33:8c:3d:b8:35:99:45:1b:f8:0d:ea:30:
be:98:b0:7f:de:09:9d:26:c0:ed:42:87:7c:97:b8:
a3:14:64:de:2d:bf:e9:f0:62:94:a0:8b:9c:99:aa:
13:66:be:0f:8c:4e:f5:01:04:3c:69:43:3c:cb:2b:
1a:e7:c7:a0:be:ab:11:96:11:f8:7f:7f:17:75:94:
b6:da:63:80:55:f5:10:4b:6a:cb:5e:c4:ce:a5:84:
0f:c9:55:b4:68:22:ad:f0:b5:91:37:0d:22:2e:53:
50:e2:31:9f:5a:06:fa:3a:f5:92:9f:65:43:5d:a2:
87:33:63:2e:43:1a:31:ee:86:b5:e0:4a:5e:14:5c:
80:c3:eb:31:cc:62:49:d5:f4:c8:c6:66:57:1a:2e:
46:bf:cc:43:74:46:1e:7e:7c:76:e3:9e:61:db:a5:
b8:12:94:8a:7c:e0:1c:2c:ac:aa:ea:46:2b:57:53:
13:d0:e0:a6:68:8a:00:0c:69:73:b9:20:c0:a7:f7:
3a:d3:dd:81:16:a5:48:7f:97:85:26:60:c7:c7:84:
67:2f:a4:ed:18:d3:f0:8c:14:5f:de:6e:64:71:b8:
01:4e:22:af:64:bc:cc:f3:ac:d7:7b:79:09:f9:3a:
5f:d2:0d:dd:82:e7:7b:32:80:08:c5:6e:08:6c:1d:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:CF:23:FC:9C:E6:E2:B8:C3:93:23:D2:70:CE:52:E8:93:87:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9fd003-06f7-45d8-a5dd-076bf02dcdd9/1/1-ynPI_yc5uK4w5Mj0nDOUuiThwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.130.0/24
IPv6:
2a13:5040::/29
Signature Algorithm: sha256WithRSAEncryption
30:e2:d0:ef:96:a3:16:8d:59:3e:a6:d3:5b:39:68:13:88:1c:
60:2b:b4:56:80:f5:2c:2f:1b:e1:19:ab:65:45:6b:ec:15:a7:
5e:5e:b0:fc:0d:34:eb:68:48:3f:e8:44:e3:d3:89:49:c6:64:
b6:23:41:c1:fb:a8:62:80:d5:a8:fe:b7:d6:64:5e:54:62:ee:
1f:3f:00:a7:c5:35:9a:7f:20:21:72:a4:52:50:a4:ae:9f:b5:
d3:0e:94:74:51:91:8a:88:b5:a6:29:6f:9a:12:ae:54:5d:e6:
f7:6b:48:85:0d:59:22:05:fa:66:a0:63:49:97:50:50:1f:ac:
0d:c2:86:dc:f5:63:19:53:ce:69:c0:0a:d5:a5:0a:ff:61:68:
ad:7c:cf:ea:d9:40:0a:af:a8:ee:a7:92:82:3f:69:9f:af:36:
17:54:6c:24:1f:21:98:a8:04:2d:45:0c:ad:7c:aa:51:75:17:
b5:57:8d:10:fb:d2:49:ff:98:44:49:d5:16:04:6c:e6:cf:cb:
dc:66:51:9d:4f:f1:66:6f:d6:04:2e:72:1f:e9:58:d7:52:5a:
2f:84:b6:d0:d2:d7:3e:b2:f9:ec:ce:f2:56:e6:17:b9:b3:1a:
2c:e0:b4:2e:d8:a1:10:8b:a5:f7:34:c3:1f:46:2c:88:2f:ee:
87:c8:19:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 11:56:41 2024 by rpki-client on console-fra.rpki-client.org