Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/806kLhvHWA1ErisZyovnI7b5CyU.cer
File: 806kLhvHWA1ErisZyovnI7b5CyU.cer (raw, json)
Hash identifier: rjqbLylboWuNdhDdI+Nx0rtqd3mzGJ2Ku1el/fEO42s=
Subject key identifier: F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A3473572A6A139916AEC8368ACE0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.127.0/24
IP: 2a0e:7300::/29
Validation: Failed, certificate revoked on Fri 02 Feb 2024 16:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:34:73:57:2a:6a:13:99:16:ae:c8:36:8a:ce:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f34ea42e1bc7580d44ae2b19ca8be723b6f90b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:9e:5a:8f:0a:1c:87:3a:c9:9d:6a:c2:e7:
39:d1:02:f0:b1:19:66:84:18:c7:c2:76:3a:66:b1:
3b:9e:bd:ce:43:5c:f3:00:bb:d5:36:a5:7c:08:01:
0a:7f:19:3d:5a:f8:5f:f7:ae:5e:fe:80:ec:72:88:
14:57:1f:dd:25:11:31:94:6f:84:58:19:6e:3a:87:
ed:ed:04:cf:cd:69:17:6e:b6:6f:21:83:cc:a1:c4:
bb:fa:9d:35:ac:e6:16:5e:7b:ed:e2:e6:23:eb:e2:
7b:f4:82:c1:72:6e:76:58:d4:be:ac:d1:80:57:2b:
0f:1f:b8:d4:80:ff:e4:f6:c3:d8:01:f9:e5:8c:71:
aa:6a:ca:9a:c9:38:ef:be:c8:fa:c4:00:ba:a7:5e:
30:cf:fa:76:ab:f9:f3:28:f7:ff:2f:40:ab:46:70:
ed:6b:55:3e:e3:0a:dc:9e:71:8e:6e:3e:27:66:01:
b2:4e:71:45:c7:e9:0f:30:ba:37:b6:2f:7c:20:a8:
76:c8:d6:b1:26:3b:69:53:31:fe:79:9e:08:a6:df:
ba:75:9e:51:4f:ac:c9:59:e9:17:bd:ab:60:d8:6a:
fc:c7:db:16:1f:6b:e8:ca:3d:a1:35:af:f2:80:b4:
0b:97:7b:96:f7:2f:f3:a8:8b:20:0a:05:cd:cc:36:
ad:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:A4:2E:1B:C7:58:0D:44:AE:2B:19:CA:8B:E7:23:B6:F9:0B:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ff963-3a0b-42a8-90b8-2eb015402a04/1/806kLhvHWA1ErisZyovnI7b5CyU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.127.0/24
IPv6:
2a0e:7300::/29
Signature Algorithm: sha256WithRSAEncryption
5f:d2:e2:05:73:eb:f4:15:cd:1d:65:9f:e7:4a:16:aa:c3:ce:
fb:bd:61:61:c2:de:6c:ee:df:47:14:65:a7:cc:52:fd:e0:17:
7b:2b:74:b6:73:32:1e:dd:03:c0:49:a0:c1:f5:e6:20:59:a0:
f0:24:42:cd:1c:83:e3:66:5f:b9:62:cc:3a:1e:6d:72:92:97:
91:e7:f9:3e:96:8d:5a:7f:a2:08:55:0a:51:4b:af:32:cc:92:
4e:4c:b0:d3:34:f9:a4:c9:f4:e3:8c:a0:68:3b:10:01:96:db:
d3:d1:f0:83:e2:f0:c8:a7:56:0a:8b:41:a4:03:6c:03:77:92:
31:df:25:9b:1a:02:03:89:73:44:e9:ed:65:cb:76:a0:28:ca:
41:17:b6:c7:e4:e0:0d:78:44:f9:64:ee:1a:68:58:e7:bc:11:
14:da:d7:76:75:70:7c:12:8e:62:0f:bd:98:2d:f3:2f:b5:ed:
45:6b:4e:a0:f0:a4:c6:c9:57:a0:55:22:b4:9e:8e:a7:71:7b:
64:15:52:e5:39:dc:9c:84:11:4d:be:f8:fc:e0:45:56:ac:10:
32:be:1e:a9:53:fd:3f:4f:ff:25:7f:a5:27:1c:67:7b:bd:83:
f0:34:4c:c9:82:62:ac:dc:e7:c2:67:76:f9:82:41:57:3b:7c:
24:8b:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:39 2024 by rpki-client on console-ams.rpki-client.org