Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7Xe6TzLyQmFwr8niWRTBNJD_XbY.cer
File: 7Xe6TzLyQmFwr8niWRTBNJD_XbY.cer (raw, json)
Hash identifier: CxdQXv/bR84kEJrw/u0vzDRYjwhafqId/F453SgWep0=
Subject key identifier: ED:77:BA:4F:32:F2:42:61:70:AF:C9:E2:59:14:C1:34:90:FF:5D:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50008BA51721853F73A31EA64EE14BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.124.0/24
IP: 2a14:3300::/29
Validation: Failed, certificate revoked on Mon 29 Apr 2024 09:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:08:ba:51:72:18:53:f7:3a:31:ea:64:ee:14:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed77ba4f32f2426170afc9e25914c13490ff5db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:ae:c8:33:f7:37:5f:24:b8:91:73:c0:c1:
84:f6:6b:c8:b7:41:b5:ff:cb:e7:20:bf:62:a3:32:
22:d3:ca:7b:a9:93:27:0c:7d:cc:f7:4b:f7:24:8d:
db:ca:e2:67:0f:9b:d4:6d:6c:ea:8e:d6:39:b6:bf:
37:c4:11:75:3f:1b:98:15:74:8a:33:71:f4:ca:b4:
c2:46:be:1d:f3:31:01:c3:aa:91:8a:13:2d:1a:8c:
30:bc:38:c0:3d:9f:0e:ad:d7:27:32:a1:00:2e:61:
b9:46:fb:94:51:7a:35:c4:f6:b5:36:e1:90:e7:a3:
3f:22:17:41:a7:0c:30:b9:2e:a4:c7:f9:5b:3a:97:
da:c7:1e:eb:35:a7:d7:88:95:6f:70:f0:b7:42:08:
60:31:cc:91:72:d4:89:6b:cc:84:fd:e4:53:8d:c8:
81:3e:80:54:67:80:ff:90:c6:af:a3:19:53:c9:54:
8e:fd:8f:31:2b:be:25:17:dc:bc:f3:92:c1:86:50:
38:89:72:4f:d1:26:fe:4b:0f:c3:3c:cb:88:bc:1a:
28:c8:05:3e:40:14:dd:6d:38:92:d7:59:4d:18:b9:
7b:ec:2a:34:55:71:00:f2:1d:5c:cd:b6:6d:78:fd:
8d:d1:5d:b7:c7:6f:7a:31:af:52:8a:35:b2:b5:df:
f2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:BA:4F:32:F2:42:61:70:AF:C9:E2:59:14:C1:34:90:FF:5D:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/68707f-f2a8-4f53-ba5c-31dfbbb914ed/1/7Xe6TzLyQmFwr8niWRTBNJD_XbY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.124.0/24
IPv6:
2a14:3300::/29
Signature Algorithm: sha256WithRSAEncryption
69:5e:80:68:e9:cc:37:e3:f3:32:be:fc:59:d8:90:f5:bd:92:
f9:3f:b4:64:a9:b7:32:d1:58:a8:60:82:c7:a2:0f:15:ef:e4:
f2:99:a5:3d:f2:fe:83:cf:ee:26:94:f8:90:53:e9:f4:63:7c:
c0:2a:c6:79:4f:58:f4:8f:b4:4d:a6:8c:5f:7b:fa:20:12:54:
5a:66:c3:74:fe:24:88:c1:95:5d:13:d3:10:0c:d9:5d:49:77:
1c:09:b4:11:32:38:46:bc:ca:78:3c:0f:b9:56:a9:c3:aa:81:
d2:8d:1c:4c:08:db:fd:ed:52:f6:50:76:8a:ed:1d:ed:5d:e9:
f4:24:53:02:44:69:a1:d3:91:64:5c:7f:25:fa:8b:9a:31:e0:
d6:49:1d:92:91:7d:d1:c9:c8:fd:7a:03:dc:3b:0f:72:3a:fc:
da:72:f6:5c:1c:ec:f7:08:d6:41:71:b6:cc:46:e0:fd:35:d5:
ad:3d:6d:41:4c:cd:95:64:77:88:34:1e:37:d2:1d:dc:fe:11:
58:13:48:75:5c:05:65:39:fc:01:e7:39:33:05:0b:86:4e:31:
c4:3a:42:c8:33:d0:5f:7d:7c:56:74:33:c6:a9:8c:90:4a:25:
5a:2f:ce:9e:d5:36:39:1b:6a:20:8e:f5:55:cf:97:be:fd:35:
38:80:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:11 2024 by rpki-client on console-ams.rpki-client.org