Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9bda1WCc7xEleb0Bk4xscyZ__wc.cer
File: 9bda1WCc7xEleb0Bk4xscyZ__wc.cer (raw, json)
Hash identifier: TpL3PhCCzwZOUroaqR/5Wm9XPzQC/W9NGlIl0QEyQBs=
Subject key identifier: F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500962F9A8A4EF1B9B2F892746A7EE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.201.28.0/24
IP: 2a12:8880::/29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:96:2f:9a:8a:4e:f1:b9:b2:f8:92:74:6a:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5b75ad5609cef112579bd01938c6c73267fff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:55:9f:45:b3:91:ef:b6:d7:d6:0c:60:6f:af:
fc:26:be:71:e2:32:29:4e:80:20:f7:33:df:93:07:
a8:0d:bd:c5:13:dd:64:9e:23:93:8d:3a:bb:3a:95:
92:4f:0b:b1:34:a3:2e:12:37:a2:3f:9d:87:45:0c:
ae:8e:18:81:7b:68:bf:70:2d:cd:c5:f7:23:de:ad:
8f:01:09:0a:66:96:00:d3:37:35:fc:d8:9b:02:ee:
2a:14:3e:c4:b9:8b:f7:25:b6:c7:45:fc:bc:b1:15:
c9:5f:fd:2d:18:41:f9:a0:c1:d8:99:30:2f:f0:be:
90:5f:41:69:ed:e6:d8:c0:5a:18:21:b0:09:21:ec:
2c:86:20:56:90:6a:2e:f6:59:d5:97:10:07:0f:7c:
d0:a2:b1:86:e2:43:c1:38:6d:14:82:b2:87:2d:ae:
61:2a:99:c5:09:14:6c:38:d5:71:fa:48:44:8a:25:
a5:48:60:31:f8:fa:3f:0b:1b:da:ac:4a:91:34:5c:
cb:4b:3d:5f:74:4d:43:7b:0d:04:07:39:df:f3:fd:
78:3b:30:67:df:dd:f4:65:45:18:a1:24:fc:0b:49:
9f:28:53:fd:5a:03:4b:93:0f:2b:dc:2d:14:ec:6e:
9b:22:4f:5e:83:1e:37:e7:70:05:72:cd:88:93:bc:
e8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B7:5A:D5:60:9C:EF:11:25:79:BD:01:93:8C:6C:73:26:7F:FF:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6ad54c-7564-489f-8f84-592c8bceb0d5/1/9bda1WCc7xEleb0Bk4xscyZ__wc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.28.0/24
IPv6:
2a12:8880::/29
Signature Algorithm: sha256WithRSAEncryption
89:f9:99:c9:a9:5e:9c:62:fb:09:6f:f8:23:71:51:c4:f0:5e:
83:14:25:f6:34:6b:f6:47:d7:d6:88:a0:aa:87:dd:0d:56:88:
63:5d:96:4d:0b:dc:17:62:97:07:69:83:d6:4e:12:c1:79:e9:
dd:1a:e1:07:d0:66:4f:52:6a:00:71:a8:c2:f4:46:f6:ea:81:
2d:87:64:67:60:4f:91:ba:2a:64:a3:e9:a4:3e:a6:7b:51:bc:
9c:d2:eb:4a:1a:3b:27:dc:5f:be:52:a7:45:41:62:61:7b:34:
e4:7c:69:3c:0d:31:78:64:62:3f:f5:49:aa:db:af:b4:7a:1d:
f9:1c:09:cb:3d:99:96:8a:d1:dc:59:75:19:fc:2d:91:21:c7:
46:b4:2c:0e:a4:5b:d4:a0:25:f0:90:eb:32:34:bf:23:5a:de:
9d:4c:a7:36:2d:ec:ea:52:de:31:c4:8b:8c:95:72:81:78:d8:
d4:b4:b2:a3:03:0a:ea:f6:66:d3:ec:aa:d3:19:85:0c:7c:58:
05:fb:8e:5c:70:33:e5:34:74:75:1c:7b:f7:e0:63:ef:50:b5:
6e:71:24:cd:b1:a5:4e:8c:9a:0e:de:eb:e8:f5:e2:5a:56:71:
e8:50:7f:de:d5:52:44:e1:5a:a9:6b:63:ba:78:a9:32:eb:6b:
83:58:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:11:03 2024 by rpki-client on console-fra.rpki-client.org