Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5FBgFJr_XE-Qj-6ptBI_z93wUTw.cer
File: 5FBgFJr_XE-Qj-6ptBI_z93wUTw.cer (raw, json)
Hash identifier: H8uFETUt7xUE5K3cSY4HpBJsY4t5bMy2liPeS20USAw=
Subject key identifier: E4:50:60:14:9A:FF:5C:4F:90:8F:EE:A9:B4:12:3F:CF:DD:F0:51:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC2F74B72168AD1996ADA56D6B7ED1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/5FBgFJr_XE-Qj-6ptBI_z93wUTw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.16.91.0/24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:2f:74:b7:21:68:ad:19:96:ad:a5:6d:6b:7e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e45060149aff5c4f908feea9b4123fcfddf0513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:78:d1:ba:25:68:f4:d1:67:ef:5b:88:70:
69:e3:73:01:9b:54:31:56:02:f9:02:ea:a3:3b:c5:
89:a4:83:9b:0e:d1:d1:c9:a8:d3:d3:47:8b:1d:5e:
d5:5e:b3:88:4d:d8:02:fd:e9:73:94:2c:91:9e:ac:
23:08:21:09:ff:e5:96:10:79:39:e7:46:78:23:58:
47:8f:eb:28:34:01:ba:90:5a:3e:c3:39:0b:25:e4:
2e:85:5b:70:31:cb:02:6d:95:5e:20:57:1c:89:7b:
05:36:f8:90:50:ae:01:a7:3c:35:6c:ba:2e:a8:45:
7f:d2:5d:68:d0:2f:d0:a2:73:c3:cd:95:b0:04:0a:
97:f2:1e:95:41:34:c6:1c:af:b6:58:4f:84:3a:8d:
f1:62:27:8c:98:34:e8:7f:94:5d:74:25:6c:dd:42:
dd:23:5f:02:fa:64:64:04:69:3e:7e:5f:6e:31:bc:
02:4c:6e:29:52:65:71:0f:c7:36:fc:cc:57:8e:79:
17:a7:d0:12:cf:48:5c:70:fc:5f:32:dc:65:18:bf:
80:4f:77:16:9b:91:6e:f3:0a:d5:8b:80:a0:40:91:
67:64:ec:a8:f4:3c:73:21:f2:11:c8:d5:d5:b1:fd:
78:d5:2e:33:fa:e3:b1:ec:6f:d1:b2:4f:3c:c6:1a:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:50:60:14:9A:FF:5C:4F:90:8F:EE:A9:B4:12:3F:CF:DD:F0:51:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb872a-1207-471c-b633-c34bdcb14d75/1/5FBgFJr_XE-Qj-6ptBI_z93wUTw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.91.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:08:85:a5:e1:a8:0f:c7:c3:d8:fa:97:57:ca:e3:fa:35:43:
f8:25:fd:99:06:24:58:5a:c8:b4:dd:60:ea:2b:8d:15:75:d3:
ab:17:70:e1:3b:6d:8a:7c:f2:25:51:6b:7f:a5:07:cb:80:1e:
a9:2c:ff:b9:b4:a2:74:6e:40:e8:37:fc:92:38:79:13:c4:9d:
68:fe:03:23:a7:9f:a9:6c:f4:53:a6:0c:21:e6:03:39:5a:f4:
82:59:7d:77:33:7a:52:2c:ab:97:35:54:36:b6:1c:d2:c9:31:
c8:10:f6:c3:79:f0:67:23:a9:5f:d0:13:1f:27:1b:22:f5:5e:
6e:64:04:d1:4e:88:0c:78:e6:40:d1:fe:84:e8:89:91:35:f8:
5d:c6:e1:e8:94:99:5e:44:24:6d:55:86:c9:ed:28:1c:f1:63:
b8:a4:41:ba:84:05:84:a6:5d:f8:db:84:ff:39:42:e2:06:90:
da:29:cb:74:bd:ac:e9:80:fe:f1:e5:a0:67:07:d1:0b:9b:52:
4d:d0:22:c2:32:1f:43:3c:44:cd:87:38:1a:4d:25:f6:7d:b5:
7d:25:41:80:f2:c4:31:9a:d9:18:28:15:b7:30:4a:f5:d6:3a:
46:c7:e8:50:01:f4:c1:b5:34:03:83:d3:62:f9:78:76:fa:a5:
1e:2d:c3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:04 2024 by rpki-client on console-ams.rpki-client.org