Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7ILHSXMflUOummJC683psPGDyn8.cer
File: 7ILHSXMflUOummJC683psPGDyn8.cer (raw, json)
Hash identifier: UWJ05fZM0KBzwVVoRN8zMHURTigyXH/oKDhM37XHmyA=
Subject key identifier: EC:82:C7:49:73:1F:95:43:AE:9A:62:42:EB:CD:E9:B0:F1:83:CA:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF52165149E5A9518B5B84444ABE6DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/7ILHSXMflUOummJC683psPGDyn8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.255.29.0/24
IP: 2a13:56c0::/29
Validation: Failed, certificate revoked on Thu 06 Apr 2023 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:21:65:14:9e:5a:95:18:b5:b8:44:44:ab:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec82c749731f9543ae9a6242ebcde9b0f183ca7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:59:ca:8f:78:13:68:5a:cd:9e:4c:3c:ba:
a8:a2:03:18:0c:b9:18:01:29:8b:aa:aa:8b:79:70:
8e:e0:1a:df:fe:bd:0c:a7:43:ff:d6:eb:f6:f8:32:
88:10:2d:10:3c:1b:d6:2d:53:37:1f:ab:6b:35:7f:
98:1f:18:3e:ea:92:fd:dd:6b:ca:22:74:87:e8:8a:
a0:3c:5a:f5:bf:8a:ed:61:5b:22:fc:23:fe:1f:f1:
19:64:8b:7b:1e:49:3e:83:3f:b8:c2:94:5f:ff:4a:
36:22:92:38:55:18:3c:9f:d1:e6:16:98:f6:15:b8:
f8:16:84:a6:84:20:64:ee:3d:71:e2:89:a4:fc:a9:
a5:a0:d3:76:dc:3e:1b:61:8e:e9:38:e6:ed:94:e7:
67:f3:fc:05:f5:c0:6d:19:41:89:a8:86:72:ff:c5:
7a:12:be:6a:b4:7f:74:63:d1:38:61:ca:bb:47:59:
6b:b2:7c:fc:21:d1:7f:bc:2c:5a:a7:ed:28:9f:c8:
af:d3:11:ac:17:e2:fb:0c:e1:05:8a:ec:2b:55:3e:
ee:d4:c3:32:83:d5:17:b1:aa:ee:6a:f8:7f:a4:b1:
74:bc:b7:bc:88:14:37:a0:8e:af:bb:07:63:80:6e:
89:9f:33:76:99:b1:28:19:7f:cc:bd:8b:9c:40:a9:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:82:C7:49:73:1F:95:43:AE:9A:62:42:EB:CD:E9:B0:F1:83:CA:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/15d6f2-1151-4777-903a-712725f5f1b5/1/7ILHSXMflUOummJC683psPGDyn8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.29.0/24
IPv6:
2a13:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:a2:ad:c5:21:4e:5f:67:4e:53:eb:fa:99:63:8d:35:82:1a:
ab:fe:44:ad:ba:0c:7f:11:ec:8a:21:2a:8b:3d:67:ed:d6:7c:
01:c1:84:c3:d7:0d:cf:0c:b6:77:eb:1d:c2:de:9a:6f:54:f8:
86:98:87:11:a9:27:16:8c:63:5c:ce:54:6f:03:5a:6d:83:91:
98:c4:0c:32:f4:d7:64:4c:aa:0b:cf:77:75:da:41:e1:cf:cd:
f2:83:f8:fe:8a:af:c6:9f:5b:4b:27:67:9a:c2:e0:22:ce:fd:
47:da:78:ba:0e:cf:5e:35:84:8c:94:4a:1b:e6:dc:d6:fe:9f:
f5:83:8a:90:43:98:fa:b1:0f:74:d6:36:a5:48:4d:f6:c5:02:
c0:33:dc:b9:c4:46:1e:9b:10:02:4b:88:e4:bf:21:3d:85:65:
5f:55:fe:54:d9:95:ff:75:2f:76:fd:f7:8d:80:a2:a9:df:b8:
ff:6f:6a:bd:b9:81:8c:e6:da:9f:19:f9:da:13:b1:1d:2c:7f:
62:8d:f8:47:17:61:e1:c5:08:ad:80:cd:0a:4c:57:48:26:db:
c2:46:fd:9c:57:e2:c1:c1:9a:18:20:08:7d:8b:32:af:d4:4f:
f7:41:3a:c6:b0:95:5e:63:d8:83:b0:c2:a4:b7:76:c2:9f:ae:
6a:89:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:52 2024 by rpki-client on console-fra.rpki-client.org