Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EBYKo3ghd7E45rAFRDmKcB-0xRQ.cer
File: EBYKo3ghd7E45rAFRDmKcB-0xRQ.cer (raw, json)
Hash identifier: 94PjYdsUZkbdyXMf5rKtNpeaCMRUXFIC8F1xqGL6NiI=
Subject key identifier: 10:16:0A:A3:78:21:77:B1:38:E6:B0:05:44:39:8A:70:1F:B4:C5:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC26AB01476905CB2D201AC31C74BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/EBYKo3ghd7E45rAFRDmKcB-0xRQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.28.141.0/24
IP: 2a12:24c0::/29
Validation: Failed, certificate revoked on Tue 16 Apr 2024 12:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:26:ab:01:47:69:05:cb:2d:20:1a:c3:1c:74:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10160aa3782177b138e6b00544398a701fb4c514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:fc:a2:3f:20:da:bb:13:b2:c5:18:da:19:
f0:b9:26:c9:3e:4f:bf:7d:aa:65:d4:25:1b:e9:6d:
21:5e:d4:95:9a:b0:54:b1:66:53:61:2d:9b:04:ef:
73:63:cd:6a:15:42:97:36:e5:7f:df:e4:bc:5c:15:
52:3f:25:40:e2:ba:3c:7e:b6:b6:51:88:85:ac:eb:
72:e9:4c:1a:1f:ea:cc:fe:b6:de:84:dd:49:6c:ee:
e0:01:c2:0c:9e:0e:9c:44:f5:9d:cb:2b:be:c9:3f:
46:20:16:43:36:2b:f9:c9:bc:d5:b0:25:bb:51:34:
d8:20:70:39:78:1c:1a:1e:08:4a:ca:6e:f2:fb:5c:
94:24:23:07:fb:15:b7:a0:11:03:de:7b:eb:90:1e:
7b:d9:10:18:e4:93:7d:6f:f3:1d:f5:e4:07:b5:de:
63:46:97:65:23:d2:8c:1d:74:4f:f2:a4:bf:a5:a0:
53:82:5d:98:42:62:fb:b3:ec:39:b1:7f:77:61:91:
17:a1:ed:a3:bc:ca:3c:5d:73:42:65:dd:64:22:d5:
49:bb:eb:07:65:2a:c0:91:8b:59:fb:24:d5:a2:34:
a4:eb:53:83:43:d3:b9:33:19:15:d2:79:18:cb:2f:
81:51:9e:2d:ff:1c:9d:b7:96:d0:ba:48:69:d3:a8:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:16:0A:A3:78:21:77:B1:38:E6:B0:05:44:39:8A:70:1F:B4:C5:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/61e583-4c07-43db-b23c-2b12a005d5fe/1/EBYKo3ghd7E45rAFRDmKcB-0xRQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.141.0/24
IPv6:
2a12:24c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:e8:2e:89:e3:cf:bb:6e:20:21:4c:f0:8e:8f:1d:e3:cd:81:
d9:92:c6:cf:c9:be:13:b0:b7:e5:25:c7:f4:fc:3f:19:98:52:
15:13:82:92:4b:2c:eb:de:21:e1:5f:e7:07:6c:3e:16:15:e8:
66:c0:8e:19:4f:1f:a5:c5:d4:ba:21:71:d4:e2:93:87:b0:0f:
9d:d3:d7:0f:cc:d7:73:c9:d5:9d:9a:ff:bb:6c:40:fe:3d:3e:
a2:7a:39:cb:99:83:08:65:62:71:58:37:14:8a:9c:a7:75:ef:
b8:86:d8:bb:1a:a2:31:ab:68:76:3c:77:cd:35:b2:c7:c8:ad:
a8:0f:20:aa:55:23:50:04:d5:3c:7e:49:1f:01:c6:f7:75:2c:
a9:cd:90:1d:31:b2:45:9a:45:45:15:f2:21:91:09:c7:53:0d:
59:d2:14:ca:8d:40:0e:7e:a9:cc:25:af:05:61:a1:46:69:a9:
99:87:66:ba:cc:a5:15:e2:a7:32:96:4b:b6:98:40:a3:db:91:
aa:3d:43:69:00:18:26:a8:f1:e6:a5:50:46:49:b1:8d:43:59:
9d:e0:14:ce:f4:1c:fe:62:b7:48:8c:01:69:c4:a9:40:6a:68:
5e:4a:3b:15:80:20:71:63:c1:60:c7:57:d3:d5:bc:ee:d7:31:
de:75:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 15:47:08 2024 by rpki-client on console-fra.rpki-client.org