Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F23tgE11EbRyjKPMixy3NScRq-Y.cer
File: F23tgE11EbRyjKPMixy3NScRq-Y.cer (raw, json)
Hash identifier: bkKco/qsLXvB+0LfoMXT/Suuerf16dSv7zJjKC+AZpY=
Subject key identifier: 17:6D:ED:80:4D:75:11:B4:72:8C:A3:CC:8B:1C:B7:35:27:11:AB:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64AFB2F9E6B31F604737A2C98503946
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/F23tgE11EbRyjKPMixy3NScRq-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.128.224.0/24
IP: 2a11:ff40::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fb:2f:9e:6b:31:f6:04:73:7a:2c:98:50:39:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=176ded804d7511b4728ca3cc8b1cb7352711abe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:52:77:21:95:32:70:c2:d5:9d:cc:b3:4f:
01:b1:92:1b:c7:a0:ad:5c:75:2b:d9:9c:aa:6b:8b:
26:18:ef:0a:a6:38:2c:fd:60:48:84:f2:0d:bb:2e:
72:94:40:fb:41:22:30:0f:db:a7:68:7d:ac:ab:79:
71:f4:4d:1f:0a:1f:df:1a:b8:3f:ac:c3:09:23:e0:
8c:7f:6f:b5:77:cd:11:e0:c0:6a:6e:28:03:58:7e:
71:3f:e9:9f:6d:ef:79:91:74:70:74:2e:8c:29:d4:
91:c1:dd:c0:07:96:b1:da:97:36:2a:74:d0:86:60:
70:1e:e1:b8:90:ac:94:71:60:80:ec:9a:f0:ee:ce:
69:d8:4a:9b:6e:33:44:e8:a8:92:96:a4:b8:4d:8a:
6e:5c:46:e1:aa:82:92:d0:b8:4c:30:aa:50:00:e6:
45:1a:df:ac:44:14:43:84:12:9d:99:6a:99:d9:f3:
4f:13:0c:47:57:68:b1:78:98:ca:0f:aa:3e:62:34:
14:fe:58:d6:4c:67:d3:4a:46:82:9c:c8:26:d3:70:
7c:e4:ea:ed:88:49:bc:6b:a2:75:10:7e:05:3b:ff:
9d:98:8b:0b:8d:81:ce:fe:d1:ed:24:e5:6d:09:60:
e9:ef:f9:b5:fe:d6:26:98:d8:fa:0d:20:1f:e9:34:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:ED:80:4D:75:11:B4:72:8C:A3:CC:8B:1C:B7:35:27:11:AB:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1087d0-04ab-4b65-b786-8fcb2ce7d6b9/1/F23tgE11EbRyjKPMixy3NScRq-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.224.0/24
IPv6:
2a11:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
96:f4:03:0b:d1:a5:7f:1d:ff:14:d8:d8:a4:6c:eb:d4:94:84:
d3:b1:b3:6e:c3:dc:86:b4:16:1b:a5:12:48:af:78:37:02:a1:
5e:b1:a1:ce:64:6d:77:98:fd:cc:2a:8e:a5:37:bb:80:65:c0:
ee:95:60:36:54:e1:cf:f2:a9:00:1a:bf:c7:b3:c8:fe:66:5f:
a7:1b:34:46:75:de:76:63:08:c5:bd:63:0b:e9:9d:37:45:22:
e0:4f:bd:3a:1c:c4:5d:fb:99:8e:d0:e4:ff:dc:c1:4a:c9:f9:
96:ab:2e:72:1d:10:3d:be:d6:f8:73:ab:7b:17:15:c7:97:6f:
dc:d7:01:1d:12:a7:08:06:04:c1:75:99:73:62:22:cd:b5:2a:
3d:eb:83:04:76:1e:5f:fc:ff:76:b8:44:45:58:c3:58:50:9f:
9e:35:15:0a:76:2d:1c:68:92:98:cb:89:61:a0:7d:6e:a3:1e:
23:4d:e9:43:6f:07:5b:a3:d4:fb:c7:cf:bd:bd:e1:44:2b:2c:
9a:5f:78:63:29:a5:fa:b9:c6:65:ac:54:64:bc:e3:59:66:de:
79:cd:6f:38:50:43:ea:27:34:6e:96:90:21:ca:0f:af:c3:bf:
76:52:1f:97:d2:be:0d:a0:bb:bc:e2:6d:42:b6:dc:50:4d:da:
74:a3:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 15:35:13 2024 by rpki-client on console-fra.rpki-client.org