Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1x7lMzeh0FuqR-AJy1up8sRXAUQ.cer
File: 1x7lMzeh0FuqR-AJy1up8sRXAUQ.cer (raw, json)
Hash identifier: sv41q5o5HhIhsmNvSvae/uM4kwnC7pyKZsCUD3pYVEo=
Subject key identifier: D7:1E:E5:33:37:A1:D0:5B:AA:47:E0:09:CB:5B:A9:F2:C4:57:01:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2BC01D4567F05F8876785BC2C9343F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:35:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.211.168.0/24
IP: 2a12:11c0::/29
Validation: Failed, certificate revoked on Tue 12 Mar 2024 10:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c0:1d:45:67:f0:5f:88:76:78:5b:c2:c9:34:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d71ee53337a1d05baa47e009cb5ba9f2c4570144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e4:27:8a:d5:12:78:b4:a3:5b:92:0c:d1:c4:
f5:c1:2f:df:c2:10:08:43:7e:40:ec:e9:78:ed:f0:
b0:20:67:62:ca:21:27:25:c0:57:58:d5:19:0b:72:
42:61:70:2c:4e:ce:55:91:c2:5e:46:80:e6:1c:aa:
19:e8:4e:da:99:d8:8b:80:65:ab:e8:da:85:d5:48:
58:fb:d7:a5:b5:82:8e:37:1f:c7:6c:63:3d:05:76:
15:5e:21:30:d2:9f:ea:db:2e:24:d7:94:90:ee:bd:
f1:e3:eb:eb:ba:f7:b9:e0:b7:81:82:0d:24:cd:fe:
d7:66:7f:2e:3e:f6:53:ce:c6:08:9d:3f:06:79:af:
8a:2c:03:b6:8c:56:2d:38:50:8b:93:0b:65:40:d5:
e9:dd:31:79:be:7f:a7:a1:e9:7c:6f:84:ad:de:1d:
ba:93:4d:04:83:fa:f1:e4:38:b8:ed:1a:fe:37:4c:
82:bb:fd:18:c9:ee:42:b7:54:95:64:15:7b:d5:48:
11:34:21:ef:1b:33:9c:a6:47:46:20:f4:08:7c:ea:
a6:30:78:c2:0f:42:b5:4e:c7:c5:1a:a3:21:5e:75:
36:b7:7e:cf:3e:e4:01:22:b6:fc:14:73:63:dc:1f:
b2:7c:dd:2c:4e:a9:b3:8e:2e:a6:8e:72:43:ef:04:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1E:E5:33:37:A1:D0:5B:AA:47:E0:09:CB:5B:A9:F2:C4:57:01:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0842ea-788a-495b-bd21-518015f59e47/1/1x7lMzeh0FuqR-AJy1up8sRXAUQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.168.0/24
IPv6:
2a12:11c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:0d:2b:f2:4c:2b:c7:38:a2:d3:31:3c:0a:92:dc:31:25:bf:
99:e3:53:1f:7d:11:4d:e8:d0:49:47:aa:90:37:5b:44:2a:24:
f2:b1:d8:f1:8d:19:08:ad:cf:ab:9c:1a:4b:3b:b7:fa:b8:dd:
53:ef:33:ae:64:d1:f8:c4:a2:01:f1:57:dd:1a:76:98:70:75:
7a:c4:7b:ce:55:79:5a:2b:d8:99:f7:67:ff:80:b0:1e:1c:54:
13:00:47:68:47:4f:be:8b:1b:bd:ec:f9:92:ff:ce:42:86:8b:
cf:43:cf:83:aa:62:d5:fc:1b:9b:4b:ba:04:d8:6f:69:89:c9:
4e:ed:07:1f:81:46:61:35:60:d4:9f:00:0b:8e:c4:88:a2:d0:
90:ec:f0:90:e8:c4:c4:f9:e9:5e:bd:ca:6f:9a:d7:73:bd:a8:
cb:0d:52:06:6c:72:68:86:ea:80:cf:74:68:97:79:56:db:b3:
10:c1:57:f6:90:e7:75:21:51:29:58:61:b7:9a:33:2b:a9:98:
3c:c0:30:ae:be:a1:53:75:5c:70:a5:24:a4:37:71:3e:25:27:
3d:ce:75:8b:2d:a9:ec:57:09:79:48:ee:35:e5:ca:b4:37:77:
94:c5:46:65:47:ea:39:81:1f:f0:cf:5a:df:6b:22:3e:fb:cd:
21:da:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 14:28:07 2024 by rpki-client on console-ams.rpki-client.org