Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
File: 7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer (raw, json)
Hash identifier: pBvExZ52pi5jfzZuWSqes7/QA3sR0gjWlj5bWvPedOA=
Subject key identifier: EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB5F7512817C22F25C5B6A1E2CAC08
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 146.19.14.0/24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5f:75:12:81:7c:22:f2:5c:5b:6a:1e:2c:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:a4:d1:89:d5:cd:9a:fc:d1:e2:bc:c8:64:
92:bd:5c:9f:a9:6e:ad:33:fc:51:4a:1a:4e:cc:40:
2b:d4:67:b0:ac:ab:e9:d0:da:87:30:8a:12:bb:a0:
09:9c:4e:75:8e:6a:df:d9:db:ef:66:a6:1c:7b:c7:
cc:b0:51:6e:8a:1e:33:28:b2:57:8c:af:64:b7:13:
1c:09:f0:e6:e7:ba:15:7c:39:25:18:cd:50:38:de:
f8:b8:1a:ba:de:84:2f:a6:f1:9b:54:62:a2:44:be:
3b:57:e4:e5:4b:b4:58:e0:80:26:10:3c:31:42:d9:
ea:13:0c:3d:eb:b9:21:f3:cc:74:4e:32:74:68:e8:
4d:a6:e5:84:78:4a:a0:0b:88:c2:20:ee:4d:4e:e3:
ee:45:6d:cb:e0:d2:3a:1e:5a:fb:92:64:12:3d:61:
a6:ff:57:05:35:0e:3a:97:ae:37:fc:14:ea:44:a1:
99:75:e1:55:f3:a6:b1:f9:68:d8:a8:76:58:c5:2e:
94:32:bf:8b:e8:32:0b:7f:d9:ba:5d:48:70:3e:d8:
22:37:62:b7:aa:96:da:fa:ee:98:b6:15:5e:de:72:
e9:93:ff:8f:ee:26:1c:20:ac:69:fb:8e:d9:01:94:
fd:99:f2:18:89:7c:41:6f:04:78:7a:fd:25:e5:22:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.14.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ee:37:a9:5a:40:25:15:4b:38:b4:30:a9:28:0d:f8:45:f6:
2d:32:96:e7:00:4a:35:0c:4e:a4:46:3b:90:66:a0:51:6a:c7:
ed:c8:4c:16:37:48:92:69:67:ae:f9:b4:40:ce:30:64:f0:e9:
55:f8:ab:51:26:8d:9e:85:83:80:b3:ba:0f:94:25:af:fb:4f:
b0:1b:13:d1:69:56:f5:a7:a1:2e:36:92:87:2a:4b:ef:ea:5e:
3c:d6:95:6d:1d:60:92:0f:a0:ac:10:0f:b6:d8:27:52:1d:53:
8f:fe:82:c1:fa:0f:b6:8b:07:5f:ef:1c:2c:74:f3:9d:2c:74:
86:4a:8d:da:c7:c1:e3:94:6a:f9:63:44:1d:fb:38:66:ce:60:
af:bc:e2:3d:1b:fe:a5:a4:1d:6e:4b:cb:8c:fb:b7:a6:90:8f:
78:0c:57:45:91:bf:4d:ac:40:1d:55:6e:01:82:ce:86:4b:d2:
df:e6:a8:72:7d:bc:59:5f:03:84:e6:e5:33:fc:0b:0a:78:13:
37:cc:c8:2f:0e:cd:30:53:50:91:8c:45:09:22:d9:6c:89:c0:
7b:84:56:cb:57:88:ac:4c:60:44:03:a3:45:58:f7:cc:a8:bb:
67:ff:21:76:6e:5e:b0:02:23:91:39:f8:f3:88:b6:02:0f:bc:
39:6a:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:46:20 2024 by rpki-client on console-fra.rpki-client.org