Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
File: D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer (raw, json)
Hash identifier: k9EfFigc9Im+xPYkbODfZJt5CET6XGD7tVS8kI7Xc5g=
Subject key identifier: 0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E59C3E7A7C7685D73F6A068D9A9F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.80.160.0/22
Validation: Failed, certificate revoked on Fri 25 Oct 2024 08:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:59:c3:e7:a7:c7:68:5d:73:f6:a0:68:d9:a9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:64:f7:eb:a1:8f:03:ca:1d:f5:ca:ee:11:
80:14:7a:4e:e9:08:91:f0:b1:6a:1b:ac:51:d9:cf:
c7:a5:e3:5e:78:7d:33:c5:68:e2:f1:e6:9e:2f:d9:
cd:e9:e2:30:89:9a:a3:d8:c0:10:b8:e1:14:f2:fe:
05:64:c5:68:5a:a1:c0:a8:fd:9c:a3:86:9e:e9:11:
6e:fc:6a:e1:ef:87:a5:39:ff:59:ef:a4:87:77:b7:
b0:9a:35:d7:fd:f9:5c:2a:f1:13:a2:9c:56:03:6b:
33:f6:06:6b:ad:4a:8d:73:49:7e:9e:e3:04:d1:70:
bd:de:86:8b:e4:76:a9:31:52:9e:7f:79:94:da:1f:
e9:09:16:1f:15:c0:a2:dc:bb:ba:99:43:d8:37:2d:
25:f9:94:73:ca:35:72:45:41:55:68:69:ca:dd:9d:
0f:1d:98:3c:bf:51:20:c5:85:b4:c1:7a:45:51:a5:
01:9c:4f:44:78:55:9f:20:cb:ad:c0:18:60:3d:55:
78:ca:02:33:cc:df:fb:3d:e6:f3:c5:eb:06:a1:e1:
90:96:ec:39:1f:8b:95:45:ec:98:b9:c3:30:77:ea:
be:dd:2c:45:52:f7:31:04:73:c9:2f:9e:37:08:51:
f8:20:e5:38:dc:2a:d1:26:9e:81:5d:fc:15:37:cb:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.160.0/22
Signature Algorithm: sha256WithRSAEncryption
49:3a:af:73:5d:01:c7:54:80:8e:d9:13:ac:3a:5b:7c:f6:17:
76:02:5e:b6:91:dc:d9:28:8e:7d:b6:93:ce:ce:12:1f:62:c8:
06:bd:20:82:07:cb:aa:ff:bd:97:e7:73:02:98:21:c5:a3:60:
a6:4f:99:1b:b1:51:d6:16:2b:99:b5:c7:0b:0b:e3:40:1f:86:
96:aa:b0:84:b8:62:a2:5a:56:c2:23:79:d8:10:65:60:a0:60:
9d:33:92:42:62:dd:58:59:fd:a0:bb:9a:d8:60:c8:bb:01:3b:
4b:ca:a2:e5:aa:32:52:6d:07:83:17:ef:d8:8e:64:25:57:20:
17:8f:91:58:de:3a:5d:bf:6c:4d:c6:fc:de:04:77:3f:9d:c1:
07:e3:f2:9a:03:86:2c:81:e8:fe:00:83:68:cf:07:9f:ad:00:
34:38:8e:95:65:55:6a:ef:63:0b:12:c6:1f:95:c0:ce:a8:2e:
b9:49:f0:2a:88:24:01:58:fa:a3:f2:d8:01:9e:0b:6c:1e:6a:
a5:15:72:b1:a8:94:75:8e:b7:23:ab:0a:a8:22:d2:70:19:a6:
30:b5:9a:99:14:f0:19:ba:a0:78:42:a8:0f:d5:1d:46:2e:9f:
87:fd:d5:d6:88:ec:b2:7e:46:f9:d7:7f:be:37:a9:95:33:e8:
4c:ec:87:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 12:38:02 2024 by rpki-client on console-ams.rpki-client.org