Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FoXNul19r23cz4Z1qQoltu1kRNc.cer
File: FoXNul19r23cz4Z1qQoltu1kRNc.cer (raw, json)
Hash identifier: ryDh5/2pTUwHe2Id3zjUCeykXEFCJhjB9Gej8zaEdL0=
Subject key identifier: 16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFE92B0BCB0C959C5067ECA3D4309
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/FoXNul19r23cz4Z1qQoltu1kRNc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.199.253.0/24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fe:92:b0:bc:b0:c9:59:c5:06:7e:ca:3d:43:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1685cdba5d7daf6ddccf8675a90a25b6ed6444d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:6e:e2:5b:1f:71:f7:e4:b2:f7:9a:fe:9d:
1f:85:e7:54:8d:43:f2:54:1a:25:04:71:ad:55:10:
25:71:40:bf:25:9d:a5:e3:80:cf:14:4f:c6:2a:99:
c1:24:4c:c4:1a:07:0b:27:e1:26:0d:0d:79:a3:5c:
a8:71:df:8d:55:fd:f3:77:6b:33:09:a3:1a:85:df:
b5:65:c4:93:96:14:f7:22:8d:a4:81:25:b0:31:b1:
95:a2:c0:68:79:b1:91:96:bd:cb:7f:ba:f5:e3:ea:
ce:4c:2d:06:65:7a:0c:51:ed:48:60:f9:3f:8e:28:
f2:0f:89:41:7c:c3:9c:94:68:4b:91:49:70:ec:aa:
6c:9b:62:30:23:b3:27:36:e3:72:08:46:cb:fa:a6:
db:bc:ef:99:92:1e:6c:f0:9c:1c:22:f5:9e:71:b4:
57:f9:63:59:48:8b:18:fe:cc:48:23:b9:b6:d5:cb:
ad:2b:c2:95:21:a7:4c:f1:da:c0:b5:c4:70:10:cd:
40:04:f1:c2:8e:f7:69:28:e6:98:36:09:97:ce:bc:
77:6f:23:66:c6:53:62:27:17:19:2d:98:7a:5c:0e:
eb:03:34:98:e5:0e:5c:af:89:40:c2:2c:66:15:53:
c5:03:1e:63:b5:f9:f8:71:05:65:d3:75:ea:74:1d:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:CD:BA:5D:7D:AF:6D:DC:CF:86:75:A9:0A:25:B6:ED:64:44:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c63652-d03e-4134-bfd3-e298a43b8930/1/FoXNul19r23cz4Z1qQoltu1kRNc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.253.0/24
Signature Algorithm: sha256WithRSAEncryption
88:74:43:f1:c8:0b:7f:6a:d5:44:f3:0c:92:2b:77:b1:eb:71:
ea:41:d0:ac:56:bc:b9:a7:f8:ca:14:22:5a:d7:d3:52:16:94:
42:53:64:9b:e0:56:42:f5:da:07:fc:61:56:72:02:ec:74:aa:
76:fc:f5:d0:58:03:1b:c9:b1:8e:fe:13:b4:3e:41:d4:c8:61:
1b:ed:39:0e:05:5b:fb:39:6f:a6:fe:b4:ea:3d:73:aa:5a:c4:
45:e6:f9:79:c1:78:4f:c4:e8:2e:18:0f:46:51:10:6a:c0:b4:
5f:4b:8b:30:18:7b:cc:38:1b:73:ed:44:48:f7:51:85:07:c4:
56:2d:7c:8c:bb:cb:cb:36:45:21:1f:b2:81:89:b2:75:ce:d1:
48:eb:6a:bf:da:8f:a6:f2:ad:c2:06:fa:65:f4:3a:77:e2:99:
c8:f4:17:fb:74:60:6d:fa:83:4a:47:8c:2d:74:d5:d9:51:89:
61:55:8a:32:a2:8c:cc:cc:15:a3:12:65:a9:46:5e:6e:77:fd:
b2:59:b2:25:42:24:44:cb:34:ff:0c:15:91:18:a2:20:76:f5:
9e:dd:e3:5b:8b:4c:f7:69:67:61:9e:6c:31:08:6d:72:cc:30:
4b:2e:c8:cb:82:8f:62:fe:a1:82:14:b9:71:04:21:2e:3e:f7:
66:13:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 19:43:30 2024 by rpki-client on console-fra.rpki-client.org