Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer
File: EM0IembnD-9CkWzZhnUBqh1Jwsw.cer (raw, json)
Hash identifier: ShtCfc9WJ56WVwTpdLAWmVDd5Vqr+xD0EvN8loB7zic=
Subject key identifier: 10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D8497AED2F985BC3ADAA84635C2F5A4B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 07 Feb 2024 17:22:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.14.136.0/22
IP: 2a0e:1180::/29
Validation: Failed, certificate revoked on Mon 18 Nov 2024 13:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:97:ae:d2:f9:85:bc:3a:da:a8:46:35:c2:f5:a4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 17:22:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:80:9f:ae:c3:47:2b:fa:59:c2:66:02:ea:
30:48:ad:15:82:73:6e:a0:45:e9:da:34:a9:0e:7d:
bb:37:08:fd:59:5f:84:db:e6:8b:c7:b2:50:34:24:
4d:fa:54:c9:4a:17:46:e3:bd:d2:64:07:e1:b5:0f:
28:14:25:02:15:8d:00:c1:33:40:e3:a5:a5:ab:41:
4d:69:a3:6a:af:83:86:c9:06:b4:8b:a3:fb:8d:38:
c3:ca:a5:5b:c3:22:7d:f2:c1:1a:2d:da:60:43:4b:
46:e2:e1:1f:cd:d4:0a:93:90:92:26:9e:37:9e:3d:
d7:d8:99:f3:0e:8e:e7:03:e7:8a:e1:4f:19:84:e8:
a6:c8:de:5f:93:f8:19:1d:a9:47:69:dd:3a:18:6c:
ac:75:23:07:b3:25:57:ac:80:c9:ac:75:da:3e:4b:
05:8e:de:1e:e6:33:97:e2:1a:7e:77:7b:f7:7c:8d:
9d:6f:05:bf:b4:af:1c:c9:5f:4b:57:31:8a:70:b3:
d8:a6:17:63:39:22:a8:22:50:d1:1d:6f:32:a1:00:
79:5f:99:b3:ea:12:eb:46:fb:cf:de:31:11:e0:78:
32:04:77:4d:02:31:47:c3:69:ff:0d:a2:cd:55:f1:
ee:1d:8f:c0:db:37:23:d3:10:82:0f:a6:ce:16:25:
51:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.136.0/22
IPv6:
2a0e:1180::/29
Signature Algorithm: sha256WithRSAEncryption
39:69:ac:8b:67:a2:09:2d:bc:5d:2f:00:ba:0c:48:00:9a:de:
0e:63:01:b1:2e:03:c5:0e:59:06:c2:49:4a:5b:dd:f5:13:6f:
45:9e:4c:5f:27:01:49:ec:7c:d2:11:5d:e6:e1:bc:f7:2d:8c:
5d:df:5d:76:0d:26:e2:42:3b:f4:08:20:4b:7f:cd:80:69:b7:
24:95:bc:b2:69:7c:9a:a3:49:3c:c8:c8:e8:44:95:73:95:f2:
12:de:8e:7c:7d:af:b2:16:40:31:05:e6:82:1b:b8:f1:c9:46:
ee:78:1b:c1:5d:8d:65:fa:e5:90:7f:e8:b9:18:99:74:ed:13:
ca:f1:70:57:3b:ac:60:7a:e0:2d:dc:26:9b:bc:db:61:c6:e4:
ad:a7:87:7e:97:92:ed:2f:df:7e:c1:8f:d9:d7:67:ed:b3:9e:
ad:de:c7:0d:c4:98:5d:bb:a5:58:fc:f5:14:e1:9f:1b:10:35:
39:c5:f8:aa:71:28:28:55:33:e1:d6:90:1e:63:5d:5f:0c:ce:
1f:10:b9:7e:4f:a7:2e:8e:37:d7:dc:6f:7d:ae:30:27:67:61:
d9:2a:fe:87:4b:1c:94:e1:44:0f:70:c5:62:9e:77:3b:87:d1:
fe:ad:eb:0c:12:aa:d9:46:ce:d2:28:5e:db:ba:91:d9:5c:b3:
4f:ca:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:45 2025 by rpki-client