Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer
File: Fjekk7wgJb8IDAteJC5h5BdnDoY.cer (raw, json)
Hash identifier: JFMxtDHAxgIs+1asQmbPjpzZYWVX+bOboTi2d9fBLsE=
Subject key identifier: 16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4245B77E30251FE4B418523308522DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/Fjekk7wgJb8IDAteJC5h5BdnDoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.213.117.0/24
IP: 2a12:8d80::/29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5b:77:e3:02:51:fe:4b:41:85:23:30:85:22:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1637a493bc2025bf080c0b5e242e61e417670e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:db:72:7f:f3:92:3e:6c:46:c5:72:27:3c:
31:0f:0c:5c:fc:6e:89:a7:f4:bd:0c:a7:64:d3:cf:
38:25:91:ca:70:02:54:82:65:5f:ac:2d:1b:b5:66:
cb:b2:13:cd:64:2d:6d:8f:82:3b:9d:c0:8a:a9:f6:
d4:5b:af:71:bb:a5:3b:29:49:9a:3d:39:66:43:54:
fa:46:91:84:3c:b7:2d:d2:6b:de:ff:94:e2:87:6d:
42:f3:ae:c4:29:45:4c:d3:c4:c9:20:e9:69:bf:c7:
4c:36:cd:bb:5a:85:a5:18:b8:3a:73:04:65:ca:aa:
14:16:37:57:ff:46:60:ea:c6:c3:57:4c:fc:a6:1f:
de:2e:09:5e:ff:a2:51:38:e3:30:30:0f:c8:fb:b5:
33:42:0c:09:0b:1d:7c:7c:65:07:cc:a5:1d:82:64:
b7:73:b8:7d:2a:b3:b8:ce:08:9d:fa:d6:50:e8:d5:
54:58:a5:31:96:a7:54:c7:f3:c9:b0:92:41:92:49:
9b:8d:7d:ec:63:5b:c0:13:e9:ab:8f:a6:76:84:3f:
69:19:63:f0:f7:02:ea:3c:e5:d0:09:fc:43:53:3f:
5d:f5:58:11:d4:e0:ac:d4:c5:5a:0e:4c:f9:7f:2d:
00:05:ad:da:e2:6e:4f:78:9f:e4:43:e4:d8:48:70:
db:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/Fjekk7wgJb8IDAteJC5h5BdnDoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.117.0/24
IPv6:
2a12:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:1c:d4:b0:9a:e6:45:8d:b3:b5:f4:b4:00:be:b0:2e:fa:f5:
f0:ed:2e:ac:57:57:e1:3e:66:3b:5b:2a:2b:64:8e:c0:b0:1c:
63:df:69:9c:c8:04:a4:63:d6:8d:91:18:9e:af:5c:fc:ad:73:
91:80:da:2e:8a:fe:6e:b4:06:42:25:8f:78:d5:dd:0f:c5:af:
cd:d7:a6:b7:02:3c:35:54:11:77:07:39:2f:fa:b5:a9:0b:bf:
25:6e:bf:18:e2:d5:1d:87:25:e9:1a:90:55:01:e0:67:39:99:
f0:26:04:95:0f:7c:d5:b6:ef:01:b8:5d:0c:c4:24:ad:1c:ad:
15:aa:a6:5c:8e:6e:54:c7:0d:0a:69:5e:de:80:19:9c:32:82:
8f:1a:b8:5f:ca:88:f3:8c:1f:ea:7f:67:04:16:88:5e:17:91:
a6:f6:2c:56:e9:9a:1c:c0:9e:58:61:f4:7f:d2:f8:59:4d:aa:
cb:04:42:c8:ff:a9:e2:3b:37:0a:7a:2c:89:43:d3:3c:42:17:
8e:de:17:db:ef:ed:d8:2d:fa:ad:db:73:c3:b5:9c:81:0f:b5:
38:22:22:b8:24:f5:25:ae:1b:1b:76:a1:2d:d6:b4:8e:d3:c3:
76:4c:a2:5e:3b:b4:c4:e8:23:eb:a3:37:4b:be:b0:0a:46:b5:
82:a9:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 18:09:36 2024 by rpki-client on console-ams.rpki-client.org