Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
File: DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer (raw, json)
Hash identifier: fbQBIhW/6jjOdjoSGzx5xDNNRNlHL/JKQLXLt2MuR4A=
Subject key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB3224945865A3CE0C917DB447266A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.146.115.0/24
IP: 2a0e:b040::/29
Validation: Failed, certificate revoked on Thu 23 May 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:32:24:94:58:65:a3:ce:0c:91:7d:b4:47:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:47:4f:17:9e:25:29:38:ed:99:04:60:8e:
80:61:22:af:76:1b:bf:ea:98:42:25:c3:5b:6c:5f:
29:29:40:a3:21:a4:00:91:d8:35:a8:a0:1d:56:31:
42:9e:7a:28:0c:d0:5d:15:36:6d:59:45:ce:a0:7c:
9e:b8:97:b4:f7:a2:d9:d0:27:eb:56:c2:02:4c:7e:
41:24:18:b3:7a:32:91:a3:b6:22:71:f0:0d:95:c7:
17:3a:a6:88:a6:bb:59:61:1c:1c:89:df:42:fb:8e:
21:7e:ac:33:dd:1d:b3:96:e6:1c:ea:30:00:ed:bf:
b4:2f:6e:a2:00:f8:1b:5c:ef:64:04:70:e9:b7:6c:
b5:0e:f8:34:a4:c9:56:43:4d:57:c8:91:67:9e:a1:
10:53:f6:31:5e:78:a6:f1:be:96:a0:8d:e3:39:a8:
66:45:6a:1f:67:4e:78:ab:92:ec:52:a0:ac:97:a5:
1f:5a:ea:a5:a0:4c:c4:19:3f:90:a6:82:0c:3b:ff:
2c:77:b2:e9:c9:04:6f:b7:bd:18:6b:ae:e3:db:7a:
79:7c:f8:e2:0e:b9:dd:9c:63:a1:4a:f9:f3:27:41:
ff:bc:3d:0f:60:49:39:34:a9:38:2d:b3:75:96:60:
ab:dd:a1:57:f4:86:61:ea:6e:05:58:d1:d6:18:b0:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
IPv6:
2a0e:b040::/29
Signature Algorithm: sha256WithRSAEncryption
a2:18:15:ec:a7:4b:a7:a7:a0:6f:db:e6:46:3e:c2:28:b7:8f:
00:05:1b:9e:a2:8c:ef:59:23:93:28:80:14:03:27:2b:37:42:
c9:b1:93:ff:f2:cf:8a:46:02:91:28:d4:66:e3:a9:b3:59:e8:
d2:dd:96:78:64:f1:76:45:ca:29:3a:82:71:f0:99:0f:4d:0e:
61:95:ac:fc:96:b3:1e:4a:a5:f7:ac:7e:e9:2f:db:04:26:66:
a4:2f:5c:11:67:01:8c:45:ac:51:3a:df:53:af:51:e3:c6:14:
3c:a1:c1:4c:62:35:f4:d3:16:2f:6b:85:93:e3:16:21:1d:0c:
12:fc:1f:50:07:21:7e:c8:88:ec:fc:1c:f1:cf:48:30:60:14:
6b:40:d0:bc:54:0b:c7:49:ff:37:bf:b5:a7:32:4d:a8:c0:a5:
3e:a6:1c:c6:fb:ae:91:f0:a4:56:8f:8f:c3:d5:f8:7c:d7:e6:
0a:aa:27:25:cc:91:57:a6:2b:8a:67:a6:8e:6e:56:ec:c2:a1:
1f:b5:86:9f:0f:d0:bf:29:57:52:be:ed:9c:81:97:6c:1d:ff:
94:f5:67:fa:55:d7:de:79:05:5c:f5:f5:ad:45:1e:6d:80:f2:
ce:6b:c8:5d:54:a6:82:66:0e:76:d3:46:44:ab:ad:8f:e2:bc:
da:f7:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:12 2024 by rpki-client on console-fra.rpki-client.org