Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JMvXU3F9B0kaf3yrqhE-uqVo0t0.cer
File: JMvXU3F9B0kaf3yrqhE-uqVo0t0.cer (raw, json)
Hash identifier: g5GkDtbjw2aLmlXmieXRA0qo8ZSDm5HgxmKUNv3vYYg=
Subject key identifier: 24:CB:D7:53:71:7D:07:49:1A:7F:7C:AB:AA:11:3E:BA:A5:68:D2:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500F761265FA74FE46515AD67F5D190
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.24.81.0/24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 08:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:f7:61:26:5f:a7:4f:e4:65:15:ad:67:f5:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24cbd753717d07491a7f7cabaa113ebaa568d2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:82:6a:30:97:8f:df:b5:f0:ce:a3:31:12:
35:0e:43:5c:a4:5d:c6:f2:53:7c:24:0a:23:ff:fc:
99:ed:0c:40:5d:fe:9b:e8:b0:19:f8:f1:50:13:32:
76:e7:84:3c:c6:42:c0:f8:89:a6:bf:f1:f4:00:6c:
b4:f2:68:07:80:a2:ed:28:77:60:4b:db:88:0b:f0:
bd:25:03:16:4d:ad:bb:26:0e:52:d4:3e:c4:45:5d:
cb:70:e5:31:c3:50:33:f7:19:f5:78:b1:c3:2b:56:
b6:2e:11:d8:67:e8:8d:f4:0b:a2:59:d6:a5:01:a8:
ea:1c:cb:46:0e:16:e1:f9:a0:c9:33:61:6a:ce:0c:
06:0e:96:4e:0f:2a:17:af:47:58:6e:e9:7f:a6:f0:
49:e6:c1:bc:9b:bb:cb:7e:c4:82:fe:d3:3e:56:54:
3e:03:cc:30:45:19:0c:fd:45:2b:25:6e:ec:cc:00:
e9:b1:ab:10:5d:45:35:69:d4:1e:17:c5:9a:0a:44:
25:d4:d3:eb:53:30:a0:83:7a:43:d5:33:ba:9d:dc:
d6:2e:12:6f:22:91:e0:b4:d7:07:f7:5b:5e:48:71:
d4:47:cf:1c:94:67:5b:68:b6:d9:6b:f8:4b:ef:6d:
d3:10:2c:d5:ed:eb:c1:f1:b8:5a:d2:d1:b0:0c:53:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:D7:53:71:7D:07:49:1A:7F:7C:AB:AA:11:3E:BA:A5:68:D2:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7bd83a-fb25-47ee-b70d-48b446cd7940/1/JMvXU3F9B0kaf3yrqhE-uqVo0t0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.81.0/24
Signature Algorithm: sha256WithRSAEncryption
47:be:7d:be:55:93:53:08:eb:ab:17:c7:dd:ce:e2:d2:d6:a1:
7f:8a:dc:f0:5e:cb:f9:27:7d:2d:06:51:c7:be:c0:55:53:9f:
bf:38:bd:75:a0:ca:3e:51:ae:a5:d3:8b:23:3b:9f:d9:28:81:
6e:5a:71:ec:b2:39:b6:78:8c:a1:d3:92:b7:e7:9e:39:11:cc:
df:dc:bc:b9:b7:1c:40:82:de:90:0a:c3:67:e0:e9:63:d3:ea:
f0:9a:7e:1a:00:07:42:5d:cd:86:2f:ab:87:59:ad:6e:84:4a:
5b:b5:42:6b:c3:7f:a1:b3:b5:7c:ae:a1:f9:4f:9b:79:d7:89:
ef:82:52:f9:5c:69:0f:35:e3:7c:12:7d:70:51:bf:19:47:58:
a5:8e:a6:88:be:a5:6f:d0:fc:2d:2b:ca:89:9c:d9:74:2d:79:
86:07:28:99:34:c2:31:f5:eb:8b:45:37:9d:a9:1c:33:e6:0e:
33:26:f1:b8:04:ca:32:a5:ac:50:8b:97:cb:67:68:87:f0:32:
be:55:2d:49:34:fa:8a:af:78:0b:49:ef:8e:1a:77:a8:7f:9b:
31:26:3f:e1:31:89:ef:17:ae:32:93:dd:49:24:d7:4a:e2:59:
1f:51:73:28:b7:1d:86:47:56:d9:33:a6:26:5f:d7:0e:53:c2:
33:15:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:53 2025 by rpki-client