Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
File: 9Lp8FFiYuK49KzocccUKsZqT9kc.cer (raw, json)
Hash identifier: ZlVixp+hNc4yeu9tvJW/s57M9/29WNp/8kCczuMQnGc=
Subject key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29DA8AC7E1D9074F47DCCB59205BA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:09 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.94.64.0/24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:da:8a:c7:e1:d9:07:4f:47:dc:cb:59:20:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:d9:da:83:a9:ec:7b:6f:dd:a8:77:a6:c1:
af:17:c6:14:6d:cd:9b:6a:82:24:98:14:92:d5:b1:
04:bd:3c:88:aa:56:62:20:92:c3:5c:bc:5b:2f:39:
1f:da:c0:19:6a:7a:38:8d:fb:85:54:92:45:63:34:
e6:2a:5d:77:ef:24:4e:d2:72:e1:b0:2c:2e:44:97:
e5:d4:f3:42:6c:4e:25:c8:dc:f5:0e:7a:86:26:56:
7b:59:de:5d:70:03:fa:68:1a:04:84:2f:1a:09:3b:
bb:3e:1c:b7:79:04:92:1a:78:c5:a1:11:66:0c:98:
5b:92:97:0f:9f:7e:69:6a:af:0c:7c:35:7e:0e:79:
99:03:d1:8a:22:79:4f:1d:ee:c0:77:56:47:44:33:
e2:f5:21:a7:a7:c0:b8:3f:c2:40:29:0d:ec:60:49:
1f:9f:ab:31:24:28:3e:bd:ba:9d:f9:0a:91:f0:5d:
91:b4:42:e3:ab:f3:f4:68:36:1b:2d:43:43:81:c3:
00:cd:60:de:08:a9:ce:04:be:5a:99:89:e0:b1:71:
37:3e:8b:85:4f:9e:22:43:24:82:1c:7e:98:e4:9e:
61:7b:5c:42:c3:18:d6:30:28:9a:1a:b1:de:18:5b:
00:d4:30:dd:84:02:9f:be:aa:94:22:7a:7f:77:0d:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0d:07:27:b1:6d:3a:1a:05:67:4f:a0:08:5a:61:d9:59:57:
a3:ad:51:68:83:53:86:d9:62:b3:d8:83:03:e5:62:4b:fc:89:
39:c5:02:8d:3b:ba:8e:ad:ed:73:c2:1b:27:9d:e0:69:80:ef:
51:bd:0e:d4:59:91:8f:a2:e4:c8:5e:fc:1d:54:ab:b8:c6:5d:
b9:ff:c1:4a:d5:07:28:67:61:be:3e:e1:ba:ba:ab:e8:8c:3c:
20:1f:f9:8f:da:63:b3:d7:82:3a:8d:90:93:50:47:8d:cd:4b:
29:48:1e:e0:69:12:2a:8d:cf:9f:9e:f3:65:87:39:f6:1c:0b:
52:db:eb:f8:69:38:cc:66:7d:52:b0:44:ff:62:06:23:52:c4:
5b:4f:35:f8:af:3a:03:3e:8c:05:c9:74:2d:e5:7b:b2:2b:0a:
8e:65:85:85:2a:be:14:3e:e4:30:78:c1:96:f9:5d:bb:b1:be:
3e:f2:89:a5:d7:81:3c:67:3b:91:d5:fd:b1:75:40:17:02:34:
1b:1e:9d:36:32:ff:23:8f:ea:69:10:56:9a:d4:64:02:b0:9e:
05:5b:0b:3e:5f:b6:e9:e6:a0:a8:c0:dc:9e:7f:f3:f2:d5:aa:
ce:9b:84:63:8d:29:4d:68:b6:26:51:ff:b4:82:b6:df:5f:2f:
e2:55:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 09:59:45 2024 by rpki-client on console-fra.rpki-client.org