Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer
File: 8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer (raw, json)
Hash identifier: HS/fUkdxBpBjxulGiXkkTZoOPVLzkntzZmuqmpqQ2bY=
Subject key identifier: F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D6A9ACC12972D172F3038E481F25C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.198.176.0/24
IP: 2a11:fdc0::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 10:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:6a:9a:cc:12:97:2d:17:2f:30:38:e4:81:f2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f288c5c7e8a267dec91664428fd14784bc861ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:9a:6a:fc:c8:03:ec:bc:f3:69:60:34:31:
bf:da:37:28:6f:89:a2:13:7a:3a:1e:57:7e:0b:71:
26:68:5d:93:31:60:23:a2:f1:41:6b:39:7c:02:3b:
46:6f:b8:bf:a4:35:02:9a:43:6b:0b:8e:eb:f4:43:
f1:9d:da:dc:8f:b2:cd:d2:10:99:ac:98:cf:53:d3:
8b:cb:e4:aa:08:9c:55:92:09:05:3e:42:a0:e3:19:
2b:3f:22:02:2c:91:3c:dd:dc:f2:8c:a8:fd:f2:a8:
76:27:3d:0e:d7:92:91:92:53:b6:8d:f8:8b:4d:7e:
02:b7:18:07:48:d3:71:a9:fb:61:d0:60:5c:d6:1b:
69:db:ca:11:de:0f:c8:3d:32:f4:9a:5f:97:5e:59:
0d:dc:cc:47:b2:3f:b4:db:a0:4d:42:a4:a8:a7:dd:
f4:b2:85:f8:7d:18:f0:98:d1:e9:71:20:42:56:af:
8d:5e:60:8f:5e:ca:f8:89:d5:a7:fa:9a:f2:1a:21:
06:d4:ae:b3:fe:75:0e:df:91:ec:4d:cc:89:c9:62:
58:51:29:b7:bc:df:05:6b:ba:f4:db:da:48:37:25:
d7:17:5a:11:c1:9b:5e:a1:b2:e9:19:b4:3f:1e:4d:
0f:86:c2:e1:cf:89:fc:ae:dd:83:e3:8a:ed:8a:b3:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.176.0/24
IPv6:
2a11:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
62:b8:ec:4e:e8:7e:aa:1a:64:b1:31:b0:44:d7:1d:c0:e2:a2:
ec:7a:6e:81:41:3f:fe:27:c6:f8:54:00:16:d4:a3:77:5d:8d:
5d:35:bd:1a:6d:19:67:17:63:b0:06:d5:8c:33:f3:92:d9:61:
c1:95:0c:47:c7:eb:2b:73:be:8a:d5:45:5f:e3:b8:1f:28:34:
5a:56:16:a5:7d:30:8d:6d:8e:55:42:a5:5e:18:62:eb:2b:76:
9d:36:14:40:c5:bb:23:60:3f:87:32:c7:63:73:f7:02:f7:f3:
95:1e:e8:fe:62:b0:9e:ee:de:10:87:6f:ee:c4:6a:d9:7d:e6:
3d:2a:24:2a:50:34:56:06:71:98:c4:22:7f:a2:d3:63:e3:4c:
a9:5a:ff:54:e8:72:95:93:b3:ea:1b:18:ae:56:4f:35:7f:ab:
f2:f8:43:d6:28:4b:f3:c9:eb:43:b9:ea:57:32:54:5e:72:f1:
54:14:19:9f:4b:17:6c:c3:02:eb:fd:db:9f:8e:c3:6f:11:ee:
8c:68:06:bf:8a:d2:aa:1f:ec:ac:4f:88:7c:a8:a2:7d:2f:5e:
1e:9b:9f:75:f9:09:e2:d2:95:2d:d5:71:02:b2:73:65:a0:da:
b7:f5:10:fd:03:37:d4:68:60:d1:76:47:0e:ce:96:37:05:cf:
11:b0:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:12 2024 by rpki-client on console-fra.rpki-client.org