Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E0e_j7cBKGRjv6uMKZ6RNQUEq0g.cer
File: E0e_j7cBKGRjv6uMKZ6RNQUEq0g.cer (raw, json)
Hash identifier: UhHkRqKo0WOngH1vAOUi1EvNXwTHbtDgsaQEdpZX2CA=
Subject key identifier: 13:47:BF:8F:B7:01:28:64:63:BF:AB:8C:29:9E:91:35:05:04:AB:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB6CD2CAC581147E5A57C3058C9DE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/E0e_j7cBKGRjv6uMKZ6RNQUEq0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.86.0/24
Validation: Failed, certificate revoked on Mon 08 May 2023 11:14:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:6c:d2:ca:c5:81:14:7e:5a:57:c3:05:8c:9d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1347bf8fb701286463bfab8c299e91350504ab48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:0a:64:17:3d:cc:1c:a4:e6:b0:07:5b:c2:
d7:47:dd:b2:6c:e4:6c:c4:24:31:4a:d3:0c:43:8f:
be:d6:00:c1:e2:45:5d:1a:b5:94:8b:11:38:6b:6c:
f2:20:65:fc:fe:48:c1:16:bf:76:a6:2f:00:d9:84:
9e:cb:6f:dc:06:06:63:34:2a:77:f0:46:27:11:6c:
f1:2a:ac:dd:db:8d:47:05:74:d1:d4:03:88:07:f3:
65:d5:db:ba:e9:b3:78:29:6c:55:81:9e:46:87:2d:
8d:2c:af:8b:73:ee:9a:60:69:82:df:29:43:1c:e3:
0f:61:12:4e:f3:c1:6b:06:cf:cd:a6:12:1b:7f:1a:
3d:e6:71:f7:8e:23:1e:af:37:b1:e8:49:88:b1:d7:
5d:68:14:5c:9a:02:aa:2d:68:47:1a:63:3a:8e:95:
ed:ba:5a:b6:5f:7c:7d:24:8b:84:1f:1f:40:3c:2b:
39:14:b2:75:83:bf:a3:a1:8c:9c:67:1d:44:3e:ff:
96:2f:95:b9:24:5a:1a:a9:bd:8b:f3:7a:f4:25:b5:
8d:7a:a3:3f:2a:48:7a:3f:51:50:05:1f:86:ac:87:
39:62:ab:14:0c:9a:25:51:59:a1:2b:34:27:79:20:
6b:f8:fe:3e:d7:e1:67:7c:bd:52:fc:e6:4e:e6:bc:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:47:BF:8F:B7:01:28:64:63:BF:AB:8C:29:9E:91:35:05:04:AB:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ce87af-4afd-4537-ac00-ba5c6c38a1d6/1/E0e_j7cBKGRjv6uMKZ6RNQUEq0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:84:cc:92:f3:7a:0b:b9:19:ce:93:d7:4c:42:b8:91:a5:b1:
5b:f5:0e:48:bb:9d:db:a0:fe:95:6a:56:b1:77:ab:0e:97:b8:
c3:83:63:fe:45:a7:77:6b:c0:c5:49:a0:b7:1f:0a:a3:88:8a:
c6:09:69:9a:0a:6e:fb:13:a8:16:58:aa:e3:cc:6a:fc:39:99:
d2:6a:9f:7c:07:c6:1b:44:ee:1f:4d:4b:0c:2f:dc:86:4b:07:
39:8d:39:01:bc:c2:e4:58:05:ea:d8:03:ff:b0:c4:be:fb:35:
d5:27:25:1c:d4:64:ef:86:52:f1:4a:f7:a4:ab:aa:a6:fa:98:
4a:f5:c7:d9:07:68:67:17:8e:98:99:cf:79:01:ec:40:23:a1:
a2:df:31:78:c4:6f:e3:2d:af:89:6c:6d:55:80:03:07:67:80:
59:a1:07:de:ae:59:42:a3:87:cd:e3:3c:cd:0d:62:fb:69:e0:
00:22:1f:c9:31:47:69:22:68:b3:22:80:13:26:1c:e4:fd:79:
ce:f1:27:91:ac:9f:56:87:a2:07:1a:0e:9d:06:86:f1:83:ed:
97:47:53:03:e0:d5:d4:94:d8:c3:23:70:eb:b4:5a:26:c6:7d:
7f:8b:b2:33:b8:79:75:28:15:92:2a:d9:be:69:bb:a6:a0:66:
62:dd:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:09 2024 by rpki-client on console-ams.rpki-client.org