Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
File: AreYvxthGNs_OP5pudiqAnfASgs.cer (raw, json)
Hash identifier: NeogmXRpCxKHWzEPdi47HgxzGPlggnaFMAEdU2gk86E=
Subject key identifier: 02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F421B2146FE9D9968C5785ECE87598E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 88.151.9.0/24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 12:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:1b:21:46:fe:9d:99:68:c5:78:5e:ce:87:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:a3:5d:6a:c6:3b:2a:f6:a6:5d:b8:1b:81:
98:b4:be:c7:07:f4:dd:3d:98:18:0e:58:be:d4:de:
b7:25:bf:cf:f5:bb:61:41:29:2b:5d:17:39:4c:5e:
09:ef:35:1c:e3:44:e9:ec:d5:d8:82:5c:55:0d:03:
19:8b:83:ad:54:c6:02:d0:f4:fc:5c:91:97:a4:c2:
dd:f9:79:f2:79:ef:dd:79:6e:b4:3f:7a:50:27:58:
8c:c7:4e:ab:1f:cc:5e:2f:c7:e4:ad:38:f7:90:be:
21:c1:c5:15:0c:96:ff:7a:f7:e8:a4:19:64:be:5e:
03:2c:50:35:e0:7e:50:1d:8e:e2:d6:25:3b:f2:50:
82:37:9d:27:9c:44:38:79:25:b3:76:99:bc:80:a1:
44:5c:64:c4:8c:1a:b6:3d:1f:77:84:52:5b:e8:ea:
cf:89:c7:fa:1d:83:d9:d6:bb:b2:99:74:32:eb:dc:
cf:6d:d1:7b:6a:08:d4:98:b7:40:cd:0e:ca:3e:00:
06:39:b2:8f:f0:3b:ff:be:41:1e:8c:9a:e8:87:7e:
bf:ba:91:de:29:f7:20:ee:5f:b4:fa:f2:2b:92:6a:
aa:3f:da:85:a7:e6:7e:a8:08:5a:01:8a:e3:9d:54:
bd:d0:32:07:81:10:1e:03:a6:e3:37:dd:6b:e1:6f:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.9.0/24
Signature Algorithm: sha256WithRSAEncryption
56:7b:29:e0:b1:38:23:d5:20:17:be:d1:c9:17:d4:55:a3:f8:
56:9b:66:54:3e:91:fd:f4:6e:47:f4:3f:49:29:38:5e:f6:5c:
d5:6a:af:53:93:97:77:41:6c:88:b9:b8:48:f5:7b:77:4d:d4:
2d:14:e8:62:cd:90:97:39:fd:0d:7a:94:94:61:60:83:26:39:
e9:f9:44:57:fe:a0:bc:18:47:11:40:b0:55:0d:65:22:ea:0a:
93:c9:4c:15:e3:bb:e1:ca:8e:08:f4:91:d4:c4:37:46:b6:62:
6f:86:73:d5:64:cb:14:27:6e:7b:41:54:6d:43:05:31:2c:61:
07:21:52:d6:59:ef:73:cf:38:55:72:42:81:90:45:9b:b3:bb:
f9:41:2a:ed:a7:34:23:1c:34:fd:1e:63:ef:70:37:cc:8c:b4:
86:ee:62:67:30:ef:92:ac:a2:dc:14:9a:2a:67:04:c8:75:12:
f4:80:d0:52:ac:b9:e5:c7:b5:fa:ed:76:62:a4:08:2f:38:f7:
2f:ac:a9:10:9b:6b:c6:6a:c7:44:a5:d6:82:20:5f:96:ba:0f:
c4:bf:75:d6:5b:d1:0d:94:57:33:25:40:76:32:7c:11:70:40:
ed:a7:f6:99:15:50:44:d7:5a:69:c7:7f:e6:35:56:14:b0:1d:
19:bf:01:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:33 2024 by rpki-client on console-fra.rpki-client.org