Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Ue8jTxvp3xdoUZXkKxxJXpNQyY.cer
File: 6Ue8jTxvp3xdoUZXkKxxJXpNQyY.cer (raw, json)
Hash identifier: YG4z4j8Tuj0Ed+I8RxzU3EcUF4e9T+3RMfi3mhSdj3w=
Subject key identifier: E9:47:BC:8D:3C:6F:A7:7C:5D:A1:46:57:90:AC:71:25:7A:4D:43:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018572F61FF7C0A36F6424220F3EF84D3C5B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/6Ue8jTxvp3xdoUZXkKxxJXpNQyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 14:50:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.140.251.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f6:1f:f7:c0:a3:6f:64:24:22:0f:3e:f8:4d:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:50:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e947bc8d3c6fa77c5da1465790ac71257a4d4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:c2:6b:48:f1:72:76:7f:90:1d:41:0e:5d:
92:be:97:4d:bb:94:14:9d:06:db:be:d4:7f:c6:bc:
19:cb:67:8f:05:09:8d:2c:93:a7:53:52:20:23:34:
ac:62:72:a3:15:90:06:b1:e9:34:92:df:12:84:99:
ce:d1:56:3a:02:b9:3c:77:a9:cc:bf:a9:56:ef:16:
9c:e0:e4:d7:66:a0:50:1e:3a:a7:d9:7d:69:7f:f1:
88:bf:38:62:ce:c6:73:e9:96:33:5f:f5:11:81:30:
c2:cc:f4:87:79:ff:b8:ff:a9:8a:2f:79:f1:ef:a6:
30:21:c9:1f:84:34:fe:da:87:f6:dd:e1:b7:4b:98:
df:85:fd:ce:f8:d3:23:c4:e0:14:a5:18:69:b2:dc:
50:4f:a9:da:28:dc:b5:3e:67:fc:40:b0:a3:fd:71:
90:ba:cf:a2:eb:c1:d7:ac:a7:36:e9:0a:68:57:b0:
3a:bd:86:cb:36:f4:7b:81:c2:c7:46:8c:28:f4:d3:
1d:c9:c7:2e:b7:15:71:7e:48:c5:b1:42:37:03:00:
23:12:f6:63:5b:d2:77:06:f7:53:f6:6c:b1:db:cc:
7b:4f:a8:47:38:69:5f:bb:4e:0d:24:dd:d7:02:eb:
71:9d:7e:ff:f2:ff:5d:cb:60:3c:37:98:f1:6e:5d:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:47:BC:8D:3C:6F:A7:7C:5D:A1:46:57:90:AC:71:25:7A:4D:43:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/86596f-b096-496d-b252-de688e712f5c/1/6Ue8jTxvp3xdoUZXkKxxJXpNQyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.251.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c7:5a:a8:8f:f7:e4:bd:84:75:2a:6b:2f:55:e3:21:b8:9f:
2c:89:1c:1c:a8:26:03:c9:bf:23:7c:11:e0:b5:15:c1:74:cc:
e9:6c:80:37:b7:56:9a:5d:bf:0e:90:7d:1c:a9:83:d9:0e:fc:
69:e6:a8:9d:b2:96:84:24:a4:ae:61:06:65:0d:c0:0e:65:5a:
d3:fb:39:48:98:59:2d:06:3e:8a:9c:d3:71:8d:4f:43:4a:ca:
e8:3b:a9:3d:b8:d2:c8:12:d3:5c:85:0c:e2:3a:27:34:1c:a8:
90:fc:01:ea:44:3c:06:8b:fe:6f:26:82:3b:4d:f1:cb:49:a0:
ad:1f:96:22:67:c8:26:de:ff:54:42:ea:ab:4e:50:23:77:7f:
ec:46:b6:eb:93:a5:1a:59:56:99:d0:7b:12:9e:80:a2:19:e0:
f1:98:f8:6c:bf:5c:f5:f7:4f:60:d0:bc:24:54:8d:d2:43:3a:
c9:09:31:61:83:ad:dc:7c:04:42:4a:50:fe:b3:74:e8:23:1d:
76:b9:b5:30:45:92:17:1f:11:e1:a1:6b:0b:d3:40:69:32:d5:
a3:d4:9b:5b:b1:45:1d:4c:0c:8f:20:e6:18:ad:cd:fd:50:59:
fc:01:96:53:b7:f4:69:e4:d7:f8:f3:2d:d1:4e:19:fd:d7:b1:
06:a1:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:03 2024 by rpki-client on console-ams.rpki-client.org