Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Kpe1ydqbGHNrz04d2rPnCSYFBU.cer
File: 7Kpe1ydqbGHNrz04d2rPnCSYFBU.cer (raw, json)
Hash identifier: 0tUto9dbUfSC06DAiW4salpbfMwPH6sr6x/mr3TgJbI=
Subject key identifier: EC:AA:5E:D7:27:6A:6C:61:CD:AF:3D:38:77:6A:CF:9C:24:98:14:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC87144F3268ABB07B5BE86E51E686BDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/aff364-9d53-44c7-ae8e-1a106213d444/1/7Kpe1ydqbGHNrz04d2rPnCSYFBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/aff364-9d53-44c7-ae8e-1a106213d444/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.43.134.0/24
IP: 2a12:3c0::/29
Validation: Failed, certificate revoked on Thu 07 Mar 2024 12:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:44:f3:26:8a:bb:07:b5:be:86:e5:1e:68:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecaa5ed7276a6c61cdaf3d38776acf9c24981415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:9a:a2:88:91:6e:a7:f9:33:2a:f6:59:59:
a0:f3:99:0e:da:e9:ac:89:f6:51:e7:db:f3:fa:64:
00:45:ff:94:45:49:b8:67:54:15:8e:bd:6e:8f:c6:
b1:14:91:ef:52:b7:f2:c0:63:97:5a:e4:4c:89:8f:
e2:d3:60:5c:a7:ba:07:e6:f9:1f:7c:48:d3:1c:0c:
12:af:fe:bb:1c:f3:ad:46:65:1d:ca:23:86:c3:48:
8e:a1:ae:66:2b:59:8c:f7:fd:8e:a1:1c:2d:b5:2c:
48:52:e9:57:fd:99:43:95:ad:51:69:66:9a:c5:a1:
f6:c8:c3:09:5b:63:6e:08:34:11:fa:2b:41:37:e1:
d3:4e:d6:99:5b:59:fb:0c:b1:e0:f4:29:3e:86:42:
88:d3:36:21:8b:1b:c1:0d:d9:f0:ce:17:a9:17:79:
43:94:1e:e8:30:69:5b:c1:c9:34:3b:97:7e:0a:b0:
13:78:f8:e0:ba:3e:1c:ed:f1:28:54:fe:05:3e:9b:
79:5a:96:e7:8a:ad:aa:0d:a3:05:a0:e7:32:58:2e:
9e:33:aa:7e:1a:d6:20:d4:e4:e6:13:50:c4:9e:16:
37:3c:64:6a:38:67:fa:06:2c:83:c0:bc:8d:60:fb:
68:4d:f3:0f:2c:2f:ce:18:8c:4a:60:d4:38:bd:7e:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AA:5E:D7:27:6A:6C:61:CD:AF:3D:38:77:6A:CF:9C:24:98:14:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aff364-9d53-44c7-ae8e-1a106213d444/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aff364-9d53-44c7-ae8e-1a106213d444/1/7Kpe1ydqbGHNrz04d2rPnCSYFBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.134.0/24
IPv6:
2a12:3c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:5c:8b:37:a1:67:f0:cf:ae:86:3e:97:27:13:e3:90:c0:41:
cb:83:84:eb:a7:bd:63:00:79:36:6e:37:f3:8d:cb:53:ff:53:
0e:2e:dc:23:da:bd:a1:b1:89:bd:d4:57:0f:32:e2:86:36:0b:
99:d2:18:15:3f:6a:4f:c8:8f:0b:24:b9:58:08:ca:1c:fb:ff:
45:a8:6c:38:73:02:7e:db:9d:4e:b0:11:31:ab:b7:dd:55:b8:
0f:d8:64:1c:2c:38:87:b0:81:8f:ca:3c:56:b4:93:4e:1c:e0:
93:16:b8:7b:52:fe:9b:ac:44:bb:9e:2c:3d:f0:79:47:f6:6a:
77:ec:29:28:98:0e:e6:c7:f5:fa:76:fa:03:79:32:5d:9f:1b:
98:09:f9:e8:48:41:6d:76:e5:93:97:41:ed:61:32:7e:06:6e:
f8:13:b7:2f:9d:1f:79:35:b6:a4:55:d8:b3:ef:5b:40:f9:de:
ef:b5:57:c1:37:b7:77:87:0e:87:d8:33:81:b2:bc:2a:ca:98:
cb:90:a3:cc:13:a4:a9:3a:20:16:bc:f0:39:b9:06:34:9d:09:
c4:9e:a3:1d:68:fd:14:75:5a:65:26:a8:a0:80:e0:41:24:05:
64:a6:92:45:61:3c:f0:71:1f:5e:ab:ba:95:b4:2c:07:85:a2:
ad:39:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 17:08:12 2024 by rpki-client on console-ams.rpki-client.org