Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9gJQ3GYh9pdk-ntfOZy6gsNEUHI.cer
File: 9gJQ3GYh9pdk-ntfOZy6gsNEUHI.cer (raw, json)
Hash identifier: gyIZd1EEHDRN/167a/OPcqX9p6PMkfzs3KwSwOrknn0=
Subject key identifier: F6:02:50:DC:66:21:F6:97:64:FA:7B:5F:39:9C:BA:82:C3:44:50:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B8A07F255A6DB6F237F5805FD080CDC95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/9gJQ3GYh9pdk-ntfOZy6gsNEUHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Nov 2023 08:37:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.83.144.0/20
IP: 83.217.96.0/19
IP: 217.150.96.0/19
Validation: Failed, certificate revoked on Fri 10 Nov 2023 10:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:07:f2:55:a6:db:6f:23:7f:58:05:fd:08:0c:dc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 1 08:37:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f60250dc6621f69764fa7b5f399cba82c3445072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:6c:7d:85:b5:7e:8b:42:d5:e0:50:5e:6a:
a6:ed:37:56:cc:a7:6d:cb:49:cb:a4:eb:03:87:92:
01:3c:16:04:44:14:bc:e6:f8:b9:ae:c2:33:3f:be:
ae:74:4a:61:48:7f:b7:3e:81:1f:11:88:20:9b:97:
fa:c8:81:59:24:c6:5f:22:aa:56:a2:d1:6c:4a:1d:
e6:a9:fc:e1:44:ca:18:1a:29:d8:f1:48:b7:31:c4:
1a:f3:79:0c:6d:3d:7b:ad:5b:0f:b0:e2:5e:ad:15:
17:ab:22:37:b6:7b:e3:eb:b4:b6:88:b3:e7:4f:ce:
96:12:43:dd:80:73:07:ac:28:e1:21:2a:96:7d:10:
38:5c:6e:a5:a5:18:c6:e6:b5:10:70:c6:1f:56:f1:
73:39:25:90:5a:d7:1f:5a:0b:c1:93:d1:0b:75:52:
9f:97:81:bc:f7:56:76:1e:94:6d:d0:de:18:de:93:
61:4e:a8:44:e0:0e:a6:83:9d:e7:07:1d:07:7f:a6:
83:69:61:50:7a:2e:17:1b:3f:7f:3c:ad:a5:a9:2e:
ab:9a:a1:0a:00:5e:d7:c6:e3:e6:e8:2a:df:ba:91:
4b:a5:2a:dc:8d:12:34:99:9f:1d:26:7b:ed:7c:c0:
00:a0:14:d0:85:2b:1c:0c:28:2b:91:1a:5f:be:4f:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:02:50:DC:66:21:F6:97:64:FA:7B:5F:39:9C:BA:82:C3:44:50:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/415945-5dce-40d7-b800-9072411e2498/1/9gJQ3GYh9pdk-ntfOZy6gsNEUHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.144.0/20
83.217.96.0/19
217.150.96.0/19
Signature Algorithm: sha256WithRSAEncryption
17:6d:11:44:e1:6c:94:e8:75:d8:55:4a:ee:ca:3a:1f:b5:7c:
c3:42:17:5b:2e:35:77:ee:22:ac:48:cb:ec:05:2c:30:25:66:
88:db:fc:4c:84:9f:fa:18:15:9b:8b:41:6b:25:16:c9:9e:3e:
38:e9:90:66:8a:95:33:bb:b3:0a:80:cf:73:ba:14:e2:33:a0:
5a:c7:d1:a1:19:7d:a4:b3:45:48:33:e1:52:cb:50:69:2b:dd:
8d:68:e7:dc:9e:44:8c:a9:5c:5b:c4:17:7b:f1:40:e2:0c:96:
14:35:58:9b:61:6e:b6:85:1f:f7:1e:9c:84:61:58:bd:bf:86:
aa:3b:c1:dc:6f:ac:d1:a3:76:f8:fc:73:06:65:27:cd:a1:d8:
9b:7d:b7:d4:7d:f5:6f:5b:09:83:9e:5f:9f:1f:35:d2:ae:78:
98:e1:f9:71:d8:cc:46:5e:af:b0:f9:ee:ea:aa:3e:cc:16:96:
4a:07:fe:40:e5:42:95:a6:4a:bf:46:6b:a3:73:7f:c7:58:df:
6e:df:e6:e3:c0:f5:4b:c8:24:69:f0:00:03:28:6d:d7:18:97:
30:64:8d:1c:60:10:eb:e5:78:55:e6:99:82:43:66:4c:e6:82:
af:fa:0f:86:4c:58:06:de:14:a5:8c:d9:9e:ba:f9:23:51:f8:
31:10:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:41 2024 by rpki-client on console-ams.rpki-client.org