Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XFxbAmKoG9HAxVLmKsAIotbfYk.cer
File: 9XFxbAmKoG9HAxVLmKsAIotbfYk.cer (raw, json)
Hash identifier: G1rUikjBo7JscAueaa5LOjoaCTXYt3pmwWrhjePX7pg=
Subject key identifier: F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B7244187B6ADD9345E3AB22E7F7EC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/9XFxbAmKoG9HAxVLmKsAIotbfYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.92.209.0/24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:24:41:87:b6:ad:d9:34:5e:3a:b2:2e:7f:7e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f571716c098aa06f4703154b98ab00228b5b7d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:30:e2:94:4d:77:bc:00:e2:62:e5:ec:01:
e9:f1:fb:15:15:c8:d5:5c:73:6d:69:0a:67:93:1a:
37:35:6b:5b:a4:ab:07:67:36:6a:1f:aa:75:bc:df:
e4:1a:72:65:d2:0f:43:da:0d:11:87:44:cb:f6:b9:
62:94:32:5b:9a:91:65:52:62:a8:d4:fb:d1:3e:a3:
d9:d9:36:94:7a:26:94:e7:25:8b:83:73:49:7e:a8:
b8:04:28:f8:84:91:59:df:a3:38:09:99:38:c2:55:
50:bc:c7:a4:64:98:06:8d:85:49:78:a0:41:70:8f:
5b:2e:32:cc:59:00:de:fd:73:ab:c5:6c:b0:22:83:
8f:b5:87:25:9d:e3:54:de:61:45:d8:a2:69:f8:94:
e5:31:3f:85:c4:67:5d:03:f8:d0:f8:4b:82:a0:f1:
56:f6:ac:4f:ae:7f:ec:93:3a:67:8b:ac:4c:30:31:
20:70:7c:ba:90:05:2d:47:90:2e:af:b8:d6:81:9e:
f1:6f:58:b3:85:c2:8b:1c:cc:e8:03:36:e5:4f:08:
c7:0a:8a:5d:92:30:a9:10:15:99:2b:68:c9:43:8b:
ce:20:92:66:0b:b1:ae:c2:ad:e1:b2:8e:6b:ca:93:
fb:5f:bd:d1:5d:c0:ff:69:47:45:33:4b:2e:af:f4:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:71:6C:09:8A:A0:6F:47:03:15:4B:98:AB:00:22:8B:5B:7D:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5db01f-3f20-49f9-a7de-41400df54b37/1/9XFxbAmKoG9HAxVLmKsAIotbfYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ce:d5:6f:36:02:05:db:cc:8c:8d:94:04:74:49:51:2e:dd:
44:4a:0a:db:41:59:99:54:fa:88:0b:4d:da:1c:38:74:2d:0e:
c8:59:78:00:ff:24:ec:ce:d2:53:e5:17:ef:b8:83:43:29:12:
10:9b:0b:52:36:37:a4:85:32:c9:84:35:bd:37:43:ba:23:94:
9b:a3:30:e1:d3:07:45:c1:1e:19:a4:cd:60:24:6c:d7:76:e5:
ce:14:0f:00:ff:4e:2b:c6:da:ce:5e:58:35:4c:13:39:fe:2a:
bf:7c:e2:41:39:1f:ce:6d:e0:e1:33:cc:4c:b0:eb:c5:f7:58:
26:c6:f1:4b:54:86:94:c5:d6:48:7e:3b:43:6c:cf:44:fd:83:
b1:68:7d:a2:4d:eb:86:8f:08:b1:68:a1:04:e2:cc:5f:46:32:
42:54:9d:5f:ed:9a:8b:81:d6:62:7a:a7:a1:3b:4e:9e:ef:17:
6f:68:ed:c1:c6:5c:55:36:43:a8:40:7c:30:bb:db:9f:14:f1:
ce:74:ac:a5:21:88:1c:a1:26:30:be:0b:bf:a3:2f:f9:82:28:
2c:dd:2b:46:4a:4f:63:4a:85:5b:df:8b:45:c2:0e:7f:ac:42:
1e:99:6a:e1:a0:73:4e:8e:60:77:67:e0:5f:cc:3a:d6:b7:e5:
f2:c2:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 11:29:12 2024 by rpki-client on console-ams.rpki-client.org