Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1Ef6PBUxjlmNSmTiuvtpNPvgGg.cer
File: F1Ef6PBUxjlmNSmTiuvtpNPvgGg.cer (raw, json)
Hash identifier: KdB7cMxOGzL4xFPVbP8ElzKdchbfc4/X9Fd40LtZX3s=
Subject key identifier: 17:51:1F:E8:F0:54:C6:39:66:35:29:93:8A:EB:ED:A4:D3:EF:80:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E0EC30BDAB492B32878CDFC5B9E29EA16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/F1Ef6PBUxjlmNSmTiuvtpNPvgGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Mar 2024 13:17:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 210984
IP: 2a0d:b700::/29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:c3:0b:da:b4:92:b3:28:78:cd:fc:5b:9e:29:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 5 13:17:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17511fe8f054c639663529938aebeda4d3ef8068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:35:82:6c:b2:60:c4:f6:58:da:31:07:22:
1d:2c:78:27:7c:d4:84:9e:7e:eb:f3:26:a1:2a:7e:
cd:4f:7d:78:06:91:5b:88:a3:9d:ea:90:53:fc:96:
cc:b1:b8:49:23:7d:77:9b:0a:b1:51:cd:a3:db:1c:
bf:04:f3:9f:1d:47:cf:3d:9b:aa:60:f1:7e:52:89:
5f:78:46:39:bc:c2:a3:76:60:0b:74:2d:3b:1e:70:
3e:09:3a:57:95:be:aa:a9:21:f4:bd:bf:fd:ca:e7:
45:cf:03:2d:63:b3:e3:35:32:6e:12:27:22:13:ca:
2e:26:16:4a:9a:7d:6a:23:8c:1a:f5:69:c4:31:aa:
91:6b:66:50:60:b9:e0:cd:9f:56:3d:1b:04:b7:c1:
36:c3:e8:c1:90:76:84:6d:bd:5e:cd:e0:0b:30:54:
dd:81:0e:2c:d2:25:b4:66:b5:36:b5:11:47:39:df:
7e:ba:95:28:94:4f:b8:40:d1:3e:42:f1:a0:1d:1d:
6c:f2:76:cd:01:58:8c:2e:31:3d:be:9b:84:9e:37:
b4:d6:af:44:f7:76:a1:ee:b5:f4:d0:8d:d2:3e:58:
6d:c0:65:4b:e3:b9:09:77:bb:0f:c3:7a:1e:3c:8c:
ea:0a:bf:b4:11:66:1b:83:57:34:3e:f1:22:58:34:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:51:1F:E8:F0:54:C6:39:66:35:29:93:8A:EB:ED:A4:D3:EF:80:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/de2896-ef1b-4a3c-82c4-889ab1a0a47f/1/F1Ef6PBUxjlmNSmTiuvtpNPvgGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210984
Signature Algorithm: sha256WithRSAEncryption
4f:05:62:2a:70:53:ef:bb:f2:61:19:40:f5:9d:59:96:b3:44:
70:4c:b5:74:df:43:08:64:d9:37:08:6e:31:17:ec:a1:71:d9:
1d:75:57:26:92:25:de:5f:a6:4d:b3:36:08:26:5c:94:55:df:
b2:cd:d4:75:70:92:70:c6:2e:0c:f1:9a:7d:b8:64:a9:41:70:
24:81:b5:ca:96:c1:d9:4b:b5:ff:5e:7e:4a:c1:90:c6:07:6e:
46:07:26:5b:ff:12:2b:4f:d5:7f:ec:57:38:96:da:c1:46:a9:
2a:b7:f4:9f:d9:bc:ea:af:89:7a:91:7d:32:c9:2d:4c:83:4d:
9d:77:a8:d9:1f:de:38:7e:f4:cf:b3:fb:22:b0:57:78:32:f1:
ef:56:2d:00:82:ed:27:32:7b:be:b4:98:4c:8d:17:eb:24:00:
42:41:8a:82:74:89:ae:86:0b:bc:3e:9f:54:21:cd:9b:55:bf:
3f:6d:be:fa:34:9d:9d:0c:c1:71:4f:6d:cd:d5:11:64:f7:53:
e8:be:f8:35:3f:16:78:3b:00:1e:2f:2b:25:95:f0:02:5c:a3:
49:d1:d7:02:ae:a1:4c:2b:11:f3:12:c3:d7:73:0c:77:13:7d:
4f:36:af:ec:6d:92:07:27:10:ce:1e:fa:87:bb:e9:d3:c5:f8:
2a:2d:9d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 6 16:58:50 2024 by rpki-client on console-fra.rpki-client.org