Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3djV07KQmbJpJh7icU2h6VSMRjI.cer
File: 3djV07KQmbJpJh7icU2h6VSMRjI.cer (raw, json)
Hash identifier: ooilTF3MHmk0KIzDEI3pdINpqKX7b9lmIAlAk/1X3f4=
Subject key identifier: DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED40B682D8FCF0A93A06370BE07CFEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.104.233.0/24
IP: 2a11:6640::/29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 11:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:0b:68:2d:8f:cf:0a:93:a0:63:70:be:07:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd8d5d3b29099b269261ee2714da1e9548c4632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:55:49:51:39:de:e9:af:bd:ac:bd:57:a4:
6a:14:6d:f0:36:e8:24:54:ea:b2:70:25:fa:93:2a:
ff:17:b9:96:14:dd:c2:99:b0:80:31:60:1b:38:8f:
61:25:e9:62:47:2e:09:58:67:32:54:d7:19:14:f1:
6e:c8:da:d6:1e:ec:0d:95:b8:f2:f5:ab:90:0c:25:
bc:92:52:f5:0a:07:60:06:dc:49:0c:d5:fb:cc:43:
2a:02:6a:02:68:67:66:03:c2:ab:02:12:04:d6:60:
00:23:da:a0:12:f3:50:c6:11:32:c2:c9:d5:51:6a:
33:13:53:f8:fc:9d:80:db:58:89:25:c2:1b:08:88:
c6:a6:17:79:c7:f0:38:dc:67:09:27:6f:40:29:c2:
b3:7f:3b:15:30:29:b7:9c:3a:8f:4a:96:cd:68:13:
4c:99:18:7c:35:bf:af:4a:b4:a6:3f:d9:0c:8c:b3:
81:65:e8:db:77:e1:7a:c7:38:89:73:6f:aa:c8:da:
24:14:ab:20:04:22:5f:69:1a:ea:12:f7:22:a9:b3:
3c:46:63:d7:09:00:6a:58:54:df:c5:b4:6c:5b:ae:
4c:1b:f4:e9:d0:bb:19:26:d5:f3:b5:89:bd:fa:d0:
dd:0e:57:24:b3:9a:fd:85:d9:2a:e6:08:9a:9c:0d:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:D5:D3:B2:90:99:B2:69:26:1E:E2:71:4D:A1:E9:54:8C:46:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/e913c7-8320-434c-a70f-f936783fabdb/1/3djV07KQmbJpJh7icU2h6VSMRjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.233.0/24
IPv6:
2a11:6640::/29
Signature Algorithm: sha256WithRSAEncryption
33:3d:b1:e7:ee:b3:38:b4:61:df:a0:1d:d2:fa:b2:b6:ec:6e:
4c:e1:cc:d3:2b:52:a8:d5:bd:6e:4e:57:35:fe:a7:a3:90:54:
a1:8f:11:c3:c4:61:f9:a0:ba:dc:5f:fd:3a:c1:95:78:42:ee:
5f:19:2a:97:58:08:97:29:1b:1b:c2:2a:c9:b0:4e:a0:db:20:
d0:91:f8:f2:c4:d4:c0:dd:28:59:89:f7:f3:5f:70:5e:89:c3:
eb:7b:59:d3:4d:bd:79:d9:a8:fb:ec:fe:58:aa:94:be:e7:be:
58:8a:f4:48:fe:6c:23:7a:93:46:24:da:73:ce:76:66:0c:cf:
79:45:0e:44:25:50:87:d2:44:6b:3c:67:e6:17:7f:4c:a0:f1:
d2:2a:56:aa:c4:1b:87:39:84:d8:67:4f:1a:c2:d5:64:45:ef:
8a:5c:82:cf:ec:38:79:94:ce:0f:47:8a:00:d4:cb:b3:c4:08:
aa:62:fc:61:c1:0d:83:78:91:e6:8b:75:40:e5:36:1c:9c:39:
83:43:12:e2:2b:c1:fb:38:61:ba:c5:71:fd:02:25:ad:4f:8d:
77:86:c1:86:d2:2a:2a:dd:c2:07:73:8b:fb:e5:c2:18:41:a8:
83:a6:89:f5:d2:63:d4:0a:2b:0a:53:d2:7d:23:67:8b:7d:c3:
89:57:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org