Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer
File: I1IxmK43wCBh9Fxnna8-M3woVXM.cer (raw, json)
Hash identifier: sDp9gY5qn9oDqGsqJKTCdeqXu0MlYnXGk6SXjESnJ8Q=
Subject key identifier: 23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC795173DE79C2B7B4E7F1F3AEE9F6D15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:26 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.81.71.0/24
IP: 2a12:e580::/29
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:17:3d:e7:9c:2b:7b:4e:7f:1f:3a:ee:9f:6d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23523198ae37c02061f45c679daf3e337c285573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:58:09:15:e5:45:8d:85:57:58:dc:23:a6:d0:
b9:14:12:f5:d1:15:46:f4:96:48:af:f0:fc:51:4d:
9a:21:b4:35:a7:dd:67:f7:1f:d6:4d:6e:08:ac:b0:
2c:00:7f:5d:dc:6f:c0:75:46:42:a4:52:14:24:ee:
b9:b5:dd:91:fe:44:9a:68:1d:f1:86:2b:7e:26:25:
cf:90:bd:06:97:5d:12:86:fe:57:b4:28:db:77:91:
ee:2e:4d:5a:a5:52:1a:dc:c0:32:6b:0e:d3:fe:e8:
dc:4d:c9:e1:9d:c4:58:33:15:26:22:c0:9d:51:82:
b3:c2:fd:38:c1:b0:aa:7f:2a:e2:e4:b3:4d:63:c3:
d6:e7:34:6c:0f:59:39:e2:f6:da:bf:8e:87:4e:d6:
ac:3b:95:f2:c4:77:53:d3:9f:bf:b7:43:ee:01:04:
95:27:f8:3d:b0:23:1f:12:b3:99:d4:36:50:91:fb:
cc:7c:3c:8c:dd:d3:38:7a:18:e5:79:d3:02:c8:46:
39:0d:45:f9:4e:29:c3:58:9e:44:c6:57:56:9c:91:
a9:d0:72:8d:47:8e:57:46:f3:ff:fc:c7:0d:ab:87:
1a:a3:6b:a3:74:04:93:04:d4:e2:e0:53:2b:28:77:
de:06:5c:1e:09:7b:46:5e:60:1c:4d:f2:24:87:3c:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.71.0/24
IPv6:
2a12:e580::/29
Signature Algorithm: sha256WithRSAEncryption
9b:46:fe:86:62:85:2e:46:eb:f4:b3:32:0b:a2:fc:54:a8:cc:
13:5b:46:16:bb:4b:4a:fd:2e:4f:aa:57:67:db:81:d3:95:18:
3c:05:c5:4a:03:37:00:76:af:ce:a3:11:45:32:fc:19:50:bf:
a4:b4:f0:ea:d0:33:7e:e0:3b:c6:c8:a4:4c:8f:b9:18:e2:c0:
e5:dc:bb:37:50:af:74:cd:56:68:d8:ab:ac:19:d3:46:61:b0:
a8:7d:2d:05:33:c9:7b:bb:12:2c:73:d8:28:ef:0b:4e:01:6d:
43:f3:b5:a1:8b:9a:88:8a:bd:d8:e3:35:29:80:87:5d:10:cf:
37:3c:98:bb:0e:de:38:6a:e7:80:38:f0:4b:39:97:9c:dd:af:
c9:05:3a:dc:80:6d:3f:c8:0b:79:a2:2e:9e:56:60:0f:79:3c:
1b:1c:a3:3b:35:17:b4:f0:e9:6b:3a:2e:63:7d:46:cc:e0:17:
a2:05:c8:bd:e0:53:73:f0:98:3c:2d:b8:0c:37:1f:07:ef:9a:
7e:0a:c9:d3:9f:79:fc:c7:4d:d5:1f:89:48:c8:cb:e0:3d:ad:
31:cf:f5:72:33:1b:a5:a2:19:b7:63:95:7a:24:14:8d:a0:d7:
5a:04:7d:43:f4:12:0c:12:7c:d7:4e:30:0c:e0:52:b9:db:f7:
0d:92:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 19:05:36 2024 by rpki-client on console-ams.rpki-client.org