Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer
File: IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.cer (raw, json)
Hash identifier: vJlEzJFJkR3J/5bZVn+0ilRPfJxYmdHhL+iWQg53Sh0=
Subject key identifier: 21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49299A3998EE0DED9A77FE39A0F3BD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 162.38.0.0/16
Validation: Failed, certificate revoked on Wed 21 Feb 2024 10:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:99:a3:99:8e:e0:de:d9:a7:7f:e3:9a:0f:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=213f21d1551d2775e7b064382b8122ad4fc585f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:8d:64:43:76:fc:42:20:22:b1:34:63:e6:
98:7a:87:1f:ba:1a:2a:db:8f:95:e4:fc:dc:0e:ee:
c2:41:ee:74:7b:89:a7:b8:46:7a:61:cd:47:43:8f:
e8:de:0c:a7:74:4f:0c:5e:ae:31:5d:cc:8b:38:d8:
1a:b0:48:ef:a7:1e:70:4a:80:67:89:fc:01:a0:2d:
04:3f:65:27:39:3f:7d:29:4a:eb:39:91:78:b1:60:
14:3a:11:33:8a:62:b9:96:b0:6b:17:8a:0e:10:e7:
a9:e9:11:1d:97:1c:41:d3:9c:74:e6:ce:40:9c:59:
f6:df:cd:e5:d0:61:01:19:be:43:50:c4:7d:cb:58:
83:ec:13:b2:1f:6e:35:0c:4d:58:a8:09:b7:d0:6f:
e4:c5:67:dd:e7:f8:b6:9b:17:03:49:af:d8:3d:d9:
71:9f:a1:a8:27:bd:58:ff:ab:c9:bb:cb:c9:10:5e:
97:27:70:55:ac:f0:25:3f:f7:2a:1a:83:ff:8e:11:
0c:18:1d:fa:14:2c:87:e3:e8:0b:c6:60:a9:60:dd:
2a:bc:94:6c:46:eb:ef:d1:ab:b9:17:a5:6a:cf:dc:
87:6e:46:52:5b:8a:75:e3:7e:bd:02:32:f0:37:8a:
e2:ce:c0:24:d3:50:db:14:cc:e5:e9:d3:15:04:b9:
79:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:21:D1:55:1D:27:75:E7:B0:64:38:2B:81:22:AD:4F:C5:85:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8a0db8-6ad9-48cc-9871-d0b7eedeb7e9/1/IT8h0VUdJ3XnsGQ4K4EirU_Fhfc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:1f:6e:54:eb:d0:d4:a0:e2:aa:c0:9a:7d:a4:99:b7:8c:1a:
02:c4:ba:46:e2:be:a4:78:0d:df:40:14:6c:e3:af:9f:c8:70:
ef:e9:05:f0:85:45:ce:a7:2a:c8:23:12:6f:a6:9a:5f:5b:86:
4d:e9:1a:20:07:32:f2:24:7c:72:c2:20:83:c6:fb:af:27:68:
7f:17:dc:ce:89:ab:24:79:00:92:99:d8:b7:88:43:dc:09:18:
00:d1:81:e4:22:f3:bd:bb:8f:12:1b:26:b5:66:91:e1:7b:4f:
24:15:eb:93:70:33:04:e0:40:65:9c:8e:bd:7d:6d:f9:0e:be:
82:7a:ce:1b:49:ed:bf:bd:1f:e9:1a:17:90:50:a1:8d:29:73:
dd:85:af:c9:26:93:07:26:fb:33:66:af:b4:92:f6:9f:91:93:
f7:0f:0c:2d:af:df:68:ba:7c:c9:b3:45:8a:96:76:46:68:0e:
6b:6d:01:97:26:fb:db:ae:06:0d:30:de:f8:e0:d1:52:99:79:
60:ce:c6:b5:86:05:0e:21:0e:70:e1:fc:30:5a:8b:6a:8d:54:
8f:aa:a3:0b:c2:e1:ee:54:01:fb:d5:6e:c3:f3:4b:96:02:b3:
32:95:fa:6a:ef:a8:85:6e:1a:52:5e:d0:e4:b9:76:3f:d3:6d:
c9:f5:a3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 13:56:38 2024 by rpki-client on console-fra.rpki-client.org