Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
File: 9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer (raw, json)
Hash identifier: yJCdkgt92yRde6+519m+Qj8P9ax5roEpg/qTZUBf96E=
Subject key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0193DE269253622C23E48A40E8ED660C4F7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Dec 2024 09:01:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.209.73.0/24
IP: 192.144.29.0 -- 192.144.31.255
Validation: Failed, certificate revoked on Fri 20 Dec 2024 15:55:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:de:26:92:53:62:2c:23:e4:8a:40:e8:ed:66:0c:4f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 19 09:01:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:b9:37:15:b1:46:ea:bc:89:dd:2e:9a:03:
14:97:26:f2:cb:e7:3f:23:d3:20:b7:a6:f7:4a:ab:
e1:eb:13:6f:0c:03:06:2b:81:4a:ee:4b:bf:6a:82:
e6:9d:42:af:e5:6a:47:bd:22:a5:93:7b:a0:98:a7:
70:34:60:33:bf:81:32:d8:48:7e:b3:ef:3b:fb:78:
4f:c2:c3:d4:9e:4a:b1:b3:6e:e8:5e:4c:a4:24:2f:
ab:fe:c2:5f:e6:0f:a7:65:b2:eb:ee:87:64:40:60:
cd:da:b6:62:e3:29:a8:79:3b:04:39:a9:b4:d0:58:
f9:c4:e1:4b:ef:c7:21:93:13:33:62:de:03:82:43:
a0:37:7e:fa:3a:cc:7c:26:43:6a:03:64:55:ee:af:
c0:e3:94:d3:14:40:46:d7:a6:fe:08:18:14:7a:58:
07:2f:44:57:3a:aa:a3:64:b9:7e:98:f6:9e:30:86:
c3:08:22:37:c1:59:a3:3a:57:64:b9:a7:c1:df:e4:
9e:7c:39:94:ed:40:d4:eb:dd:e3:8c:36:f6:da:7e:
84:89:f6:56:64:90:5e:9b:bc:68:6f:59:fb:a1:ef:
49:63:3f:6c:01:e3:a2:3e:45:24:f1:65:98:62:a6:
32:03:9a:86:a9:ce:7d:00:dc:5f:92:99:d1:75:0d:
96:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.73.0/24
192.144.29.0-192.144.31.255
Signature Algorithm: sha256WithRSAEncryption
7d:4e:78:b3:bb:46:08:38:b7:bf:32:47:98:6f:42:4f:20:ef:
2d:48:90:fa:7a:dc:c5:71:33:35:3e:03:24:96:fa:0d:18:8e:
09:ea:1a:f5:c0:6e:3b:92:a8:37:0f:b3:80:2e:56:ed:44:1e:
e0:60:9c:49:f7:b2:93:af:87:a1:2b:23:a9:5c:de:f7:15:8e:
85:e0:f4:fe:89:4f:b0:3d:71:70:f5:f8:31:79:8a:79:66:d9:
09:e3:d6:4c:b3:20:4e:e4:77:4b:a9:95:d7:34:fb:c1:37:87:
34:88:96:e8:c0:e0:96:a9:94:85:f6:7a:3b:c7:be:ca:7f:19:
22:5a:c7:44:8f:e1:29:68:42:99:a7:8d:c3:0b:1d:2c:78:c7:
8b:d3:ba:4a:0b:7d:31:1f:f5:14:b5:7e:79:71:5f:9d:43:26:
4e:74:54:c7:6b:b0:94:51:7f:e7:1c:aa:81:01:4e:b5:61:23:
c0:04:3f:2e:fd:b0:1a:b0:6a:cc:9d:e9:7f:38:78:ac:5d:a6:
51:98:ab:25:52:7b:09:ed:17:2e:d1:f6:b8:f6:66:61:7f:5a:
e9:d6:b1:57:e3:07:c2:f6:99:16:55:46:a4:55:ca:3b:f8:1d:
ef:35:1b:f8:4f:fe:aa:43:74:ea:e9:a6:76:0a:2f:11:b6:e2:
70:fb:cb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:23 2025 by rpki-client