Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4ihyc-IcMGgqejIUPVcYApqXaCA.cer
File: 4ihyc-IcMGgqejIUPVcYApqXaCA.cer (raw, json)
Hash identifier: hNRysaivj/pjfUBJe5tfgmAYiXjwd4O9wyJ4OYtGsp4=
Subject key identifier: E2:28:72:73:E2:1C:30:68:2A:7A:32:14:3D:57:18:02:9A:97:68:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B632EE60556AC49B2302A2D1B60FE3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/2812b8-a2ab-4f73-b8d7-0a5cee43e454/1/4ihyc-IcMGgqejIUPVcYApqXaCA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/2812b8-a2ab-4f73-b8d7-0a5cee43e454/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.225.96.0/24
IP: 2a11:f200::/29
Validation: Failed, certificate revoked on Thu 03 Aug 2023 08:20:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:2e:e6:05:56:ac:49:b2:30:2a:2d:1b:60:fe:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2287273e21c30682a7a32143d5718029a976820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:a6:19:5c:fd:b6:56:13:38:d2:41:61:20:
01:c4:77:bf:b3:2e:3c:e2:29:96:82:f8:b1:52:c7:
2c:0d:c7:a1:16:19:45:54:a8:50:b0:d3:d8:d6:8d:
d1:5b:ac:aa:d0:70:5e:59:4d:ee:c7:9c:b7:c7:36:
d8:ca:5a:44:ca:d2:8c:90:08:5d:e3:2b:18:03:f8:
81:0f:1f:9c:bf:97:13:fd:3a:19:52:03:74:be:b8:
15:d0:df:47:0c:a9:3f:0d:ea:7d:7d:ae:b9:46:9f:
9e:54:e4:63:3d:39:49:1f:16:6d:d0:6e:b7:30:9a:
ef:85:5c:08:4e:73:7f:a3:90:5f:98:b9:60:2d:ea:
e3:7a:da:d4:ae:ce:24:5f:87:6b:25:c8:a8:28:f2:
ab:02:b2:28:38:c2:86:d5:51:7c:9e:02:f3:53:12:
24:58:ff:d3:45:ff:1d:8d:d4:1c:e7:a2:6b:14:52:
1e:8b:39:be:d2:3d:1a:5b:37:3b:16:1d:7e:7f:94:
75:e7:f7:72:fd:f7:c9:ec:4c:8b:db:51:33:c2:8b:
40:3b:e2:ac:24:de:dd:70:54:52:dc:24:a2:41:63:
08:4d:8f:7f:8e:f6:31:42:5c:a7:9f:1e:f0:91:92:
1c:e0:89:8e:54:14:17:0f:1e:a5:ef:5d:f2:88:df:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:28:72:73:E2:1C:30:68:2A:7A:32:14:3D:57:18:02:9A:97:68:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2812b8-a2ab-4f73-b8d7-0a5cee43e454/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2812b8-a2ab-4f73-b8d7-0a5cee43e454/1/4ihyc-IcMGgqejIUPVcYApqXaCA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.96.0/24
IPv6:
2a11:f200::/29
Signature Algorithm: sha256WithRSAEncryption
57:0b:73:41:f6:9e:0e:42:1b:8c:7e:58:db:f8:9d:d3:0b:74:
22:27:ec:3b:3b:d6:60:6e:23:49:4d:91:a6:36:38:12:dd:b5:
68:0e:2f:22:30:d0:04:ed:ff:77:20:6a:d0:b3:c4:10:a7:1c:
c6:67:93:48:0f:81:36:6b:2c:7a:5d:ac:b5:22:8e:78:9c:7f:
5f:c2:95:0a:d0:9c:3c:29:5d:1a:0f:b4:93:9d:9b:c2:50:d8:
d6:11:35:7f:ee:d5:c5:b8:7a:6c:03:a0:89:f6:ed:39:42:d8:
cf:30:58:67:9b:45:fd:03:55:76:5b:5b:16:93:e9:be:0d:27:
f3:e9:5a:60:cc:36:cf:1f:ee:bb:03:49:73:5b:6b:17:5e:13:
27:a9:37:87:a3:34:a8:72:bc:7f:af:cf:82:5a:22:6c:e0:76:
3f:8b:59:12:37:16:4b:e6:c9:4a:94:0d:70:66:11:f1:53:b0:
3a:0a:70:86:e6:92:e1:68:3b:87:ef:6b:4f:45:5d:4e:95:4e:
54:15:94:74:02:78:49:43:1d:91:ce:f9:55:70:c1:0d:5e:92:
e7:cb:9d:be:77:8f:2b:d7:f5:95:6d:98:74:ad:01:7d:df:76:
65:6b:17:de:e9:0e:eb:07:5e:b6:18:c9:61:2c:04:68:c4:16:
60:84:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:32 2024 by rpki-client on console-ams.rpki-client.org