Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
File: FHztiKQGEkyMTfFmxXQFCeZBXSo.cer (raw, json)
Hash identifier: lqrZ4pvlTmHzvE//S0cC2NnysATdLWgWoPhaRxifotw=
Subject key identifier: 14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B61CFCE9EB7DE7A97500F4E0987F49793
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Oct 2023 13:11:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.140.247.0/24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 09:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:cf:ce:9e:b7:de:7a:97:50:0f:4e:09:87:f4:97:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 13:11:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=147ced88a406124c8c4df166c5740509e6415d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3d:45:89:92:1a:34:8a:a8:ac:a4:42:72:33:
c3:6b:d4:6e:32:0a:dc:be:b6:fb:f8:25:63:6b:60:
99:06:f7:99:c9:44:e6:a0:f1:73:64:57:59:fc:66:
29:c7:78:41:56:79:f8:e5:54:4d:4b:99:30:69:06:
28:04:a4:1e:ba:5d:51:a1:03:7b:66:1a:96:bc:e7:
8c:a8:19:f9:79:60:d2:38:8e:c6:b8:df:88:af:bb:
95:6c:11:02:95:32:c3:f8:be:36:06:b7:1d:53:43:
ab:27:db:18:55:6c:d4:3a:c2:3a:aa:c8:8e:bd:db:
0e:62:0f:44:01:ec:b4:6a:eb:cc:f3:e5:c5:4b:c2:
5f:25:23:3a:4b:44:c4:ac:f7:e1:d4:b8:00:3d:3b:
d9:83:c6:eb:15:94:fd:0b:e6:b3:da:12:7c:51:8f:
f3:b3:32:d4:53:cc:c2:29:85:20:7e:87:c1:ce:d1:
3f:89:8f:ce:c4:e1:63:b8:51:6e:25:0f:18:18:3d:
76:1a:ff:f6:45:f3:30:1c:c6:40:24:5e:96:d6:d7:
bd:e1:0a:6d:dd:04:bc:50:39:19:1e:2a:67:7f:39:
19:a5:d1:75:1a:b2:b0:17:cf:4a:39:fb:64:78:1e:
6f:a7:7f:e7:75:11:b8:72:6a:b0:cf:b4:a2:04:4b:
b7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
65:1b:0c:8f:0a:21:00:50:10:27:bf:a5:10:64:2a:c5:bd:10:
1d:37:fc:16:83:df:67:88:5f:69:ae:dc:c0:2e:41:4d:39:90:
2b:38:f5:a1:09:a7:89:88:f4:70:8d:7e:b8:96:e1:47:72:70:
e6:cc:cc:28:ce:ae:cf:db:01:0b:b7:07:8b:1f:c9:a1:40:73:
21:1e:a5:55:fc:a0:7c:b1:d8:1e:f3:36:f0:53:57:41:8e:ea:
9d:9e:98:88:a0:a6:11:bf:23:be:1b:40:32:8f:69:9d:da:ab:
12:de:e1:44:32:f3:10:2a:1f:40:39:22:90:45:18:4f:6e:76:
8a:46:33:a2:b8:1a:e3:6f:29:fe:6f:5b:ed:a1:ef:9c:03:83:
6f:0d:9e:7f:7a:20:d5:27:c1:d2:4d:0b:f3:a3:dc:c0:2f:c4:
1a:d8:e5:68:d6:b1:37:3a:f2:45:e3:2c:70:5c:61:48:3a:b2:
03:15:1f:19:e9:06:50:7f:32:20:66:52:f2:63:8f:a7:cc:d8:
b9:5e:32:66:0f:d4:39:90:27:aa:3c:16:36:77:77:50:3f:96:
57:0d:c6:aa:5c:34:fb:36:ac:ae:c7:5f:20:8a:38:0b:9c:2f:
30:43:bd:06:15:6e:2e:46:7c:f6:a4:56:bf:a1:6a:5f:54:d4:
cb:16:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:34 2024 by rpki-client on console-fra.rpki-client.org