Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D9UYacB45koKqEyeoLSgBR6MmGs.cer
File: D9UYacB45koKqEyeoLSgBR6MmGs.cer (raw, json)
Hash identifier: NO64KHyqURwqk1Htznpbga0mQY3rW/prA15LEnzVjfk=
Subject key identifier: 0F:D5:18:69:C0:78:E6:4A:0A:A8:4C:9E:A0:B4:A0:05:1E:8C:98:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D69FCDD0AA309142DDFAD5558BAA5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/228f35-73e9-4685-8c0a-6478fc1c4d60/1/D9UYacB45koKqEyeoLSgBR6MmGs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/228f35-73e9-4685-8c0a-6478fc1c4d60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.249.252.0/24
IP: 2a11:2f40::/32
Validation: Failed, certificate revoked on Wed 12 Jul 2023 14:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:9f:cd:d0:aa:30:91:42:dd:fa:d5:55:8b:aa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fd51869c078e64a0aa84c9ea0b4a0051e8c986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:a4:d2:12:88:b5:cf:78:2b:49:1d:1e:48:
3e:26:97:93:63:34:d2:12:ae:52:35:fc:d6:bb:af:
d8:3d:15:7f:30:2e:4c:1c:45:71:06:e0:23:41:f4:
0f:31:ce:b4:50:59:70:c9:09:01:f5:f5:1b:f0:09:
08:20:04:11:6e:60:0c:e9:fe:ac:3e:4d:8f:c6:2d:
ee:02:ba:0b:48:8f:e3:2a:c2:fa:ab:eb:22:a7:db:
20:99:fe:66:0f:5c:e3:91:7c:58:a4:02:e4:3e:da:
55:22:46:ef:2b:a3:96:98:c2:c8:06:08:a5:c0:86:
5e:9c:8f:ae:38:6e:18:9a:76:5b:38:ba:a4:36:e2:
c2:66:68:05:fc:54:69:84:45:46:d3:54:9a:9f:98:
20:31:25:ff:85:97:5a:8e:e6:1c:e7:8e:cd:1e:67:
82:82:e3:ad:29:28:51:2f:36:b6:3a:0b:41:44:82:
86:d2:33:26:72:46:33:60:68:ac:f2:d9:36:1c:9c:
bb:8d:1f:99:88:2c:d0:14:29:00:be:ec:ac:c8:fd:
f8:31:55:58:f0:85:b5:ae:fe:ff:df:db:07:8a:5f:
28:bd:6d:d0:ca:3e:d3:58:61:51:a1:93:04:5c:2a:
60:c8:8a:7e:cd:7c:2c:95:32:8c:60:64:2e:80:d8:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D5:18:69:C0:78:E6:4A:0A:A8:4C:9E:A0:B4:A0:05:1E:8C:98:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/228f35-73e9-4685-8c0a-6478fc1c4d60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/228f35-73e9-4685-8c0a-6478fc1c4d60/1/D9UYacB45koKqEyeoLSgBR6MmGs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.252.0/24
IPv6:
2a11:2f40::/32
Signature Algorithm: sha256WithRSAEncryption
6e:f6:94:0a:eb:26:7a:0f:78:47:32:ba:19:eb:0b:be:5d:4c:
f0:c6:c9:81:63:ce:c7:e9:73:b3:ee:96:1b:f7:9f:3a:a7:20:
6a:4e:70:8a:cf:a5:91:f5:59:65:75:60:95:79:3d:b3:95:92:
f2:2c:02:89:5e:10:8d:6c:ec:0d:42:a8:69:2a:8c:10:be:a6:
c4:f8:89:6f:95:32:88:31:c2:1c:8c:20:37:68:f6:ab:c9:35:
17:b8:7e:f3:d8:4d:59:f1:db:50:5e:63:b5:92:24:18:f4:96:
ca:1f:f7:08:a9:1c:df:01:cc:9c:e7:38:0c:16:0f:53:94:53:
2f:8d:e5:7a:b0:e3:4e:bf:b4:d0:9b:fd:92:2a:81:40:4e:c4:
35:e8:17:11:aa:fe:b4:92:a5:13:f7:cc:67:f3:84:d1:86:b6:
02:2b:ff:6a:d0:15:38:f5:b5:98:39:fd:80:83:6d:95:2a:09:
07:71:59:08:3d:a8:b7:fe:42:d5:40:e2:f8:f7:4e:15:17:e6:
fe:5f:94:35:7a:e1:6e:79:63:2e:12:78:51:2a:67:37:60:95:
a8:31:8e:40:e1:43:dc:9a:54:59:d8:1d:5e:f7:ec:42:37:e5:
ee:db:3d:49:bb:9f:48:da:c8:6a:be:82:3a:5f:54:f3:6f:cd:
c1:e4:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-fra.rpki-client.org