Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
File: 9FSFHSYn3IHIlMVPRuIzok-tFgA.cer (raw, json)
Hash identifier: PlQpkkdEC4jLbChiznxL3F7P+2uxnVKTb00Z28dP0p4=
Subject key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56EBAA4DA823A73EEA62A178C8CE97B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:17 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.46.36.0/24
IP: 2a12:640::/29
Validation: Failed, certificate revoked on Thu 29 Feb 2024 08:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ba:a4:da:82:3a:73:ee:a6:2a:17:8c:8c:e9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f454851d2627dc81c894c54f46e233a24fad1600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e4:b6:a7:c4:c6:c1:d0:36:71:d1:52:4b:88:
f5:8f:4f:59:ac:cb:df:a1:53:39:29:4a:8e:22:ed:
2a:22:bf:21:82:7e:ed:e2:5e:f2:0e:30:5f:7e:21:
16:99:76:1e:d6:e2:49:69:62:ec:dd:c3:96:cf:22:
ac:d3:c0:68:9e:25:7a:ec:20:48:66:de:c6:c9:ab:
84:67:80:06:3e:cc:7e:8e:b2:7b:86:f6:c6:e6:68:
a0:8d:92:9e:25:69:7a:76:83:71:12:18:fd:2d:7e:
d3:2d:4c:c8:a8:48:cd:65:4b:96:15:6f:6d:94:d3:
c9:05:1a:3d:68:d6:ca:82:60:5a:b6:c3:b9:f2:94:
28:1a:df:d3:84:8b:4d:a1:cc:f5:18:b8:7b:48:ce:
35:81:db:e2:22:c8:1c:cb:89:91:c4:82:49:a9:66:
cc:33:04:ad:ba:cd:d5:25:66:7e:4b:39:e8:52:17:
e1:b5:2a:75:93:f0:59:83:f4:46:f0:a6:3a:a5:9d:
6f:bf:c4:50:d2:7d:d4:7c:44:cd:24:ed:8e:98:f3:
4f:fd:45:2b:a3:50:de:b8:e4:19:bb:26:e8:5c:d1:
68:48:02:33:a6:24:d4:51:6c:be:9e:07:16:62:43:
fc:9d:81:03:d8:f9:f0:dd:fb:fa:72:40:8a:9d:21:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.36.0/24
IPv6:
2a12:640::/29
Signature Algorithm: sha256WithRSAEncryption
1f:73:e8:98:f4:54:15:f5:1c:56:43:4a:fb:da:0b:56:0b:1a:
54:4e:e9:87:3b:be:c4:65:f7:c6:40:45:5d:7f:e0:9b:07:0f:
49:a3:e1:e1:ea:80:6e:46:b4:e3:d0:03:b1:5f:e4:76:69:8c:
20:ee:19:6b:d1:2a:26:8c:3c:84:5c:e3:03:5f:21:3b:92:aa:
81:15:8d:46:b5:e4:52:83:a9:ea:53:92:60:b1:26:f5:c3:26:
37:a8:2d:6c:26:4a:6e:e5:86:b4:6b:4e:6c:4f:90:29:5e:6c:
d5:28:96:3c:0a:ef:50:83:97:20:c0:de:f8:39:04:2f:58:eb:
f9:24:9a:19:cb:6a:57:84:9b:06:14:b0:ce:37:7f:7c:aa:b8:
56:d8:72:26:50:fe:e9:6c:74:6f:a0:61:11:71:22:00:8d:85:
38:0c:be:fd:c8:42:ad:02:bb:66:c8:e4:83:80:f9:94:af:fe:
45:19:5e:1f:36:de:16:cb:5c:63:35:c3:c2:ad:cb:f5:71:61:
ab:dc:8d:95:83:d5:f9:28:cc:2e:55:e6:92:46:89:4d:b5:99:
eb:0b:be:44:b4:99:bc:c5:cf:fc:51:43:26:12:d5:29:fd:e9:
de:8c:54:38:c0:a0:2c:5e:57:90:ef:9d:c9:b1:b7:a6:f9:d4:
78:84:ce:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 11:29:13 2024 by rpki-client on console-ams.rpki-client.org