Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JXeLID17zGSpYNx9FsghEodAFlI.cer
File: JXeLID17zGSpYNx9FsghEodAFlI.cer (raw, json)
Hash identifier: fUEXzPPNTahirShedH4ZLy+QNpWZ04ej+QNvfxQdifU=
Subject key identifier: 25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801830C2CF2AB3E7D7526EC8F16636F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 88.151.117.0/24
IP: 2a12:2740::/29
Validation: Failed, certificate revoked on Mon 29 Apr 2024 10:37:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:83:0c:2c:f2:ab:3e:7d:75:26:ec:8f:16:63:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25778b203d7bcc64a960dc7d16c8211287401652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:10:dc:82:09:fc:6e:70:aa:4a:a7:4e:63:76:
c9:0c:bc:0e:fa:2d:2e:3f:df:44:84:0d:3d:f1:0f:
23:2f:be:2f:d2:06:8f:86:0b:fa:a3:c3:be:c7:99:
f1:88:18:33:29:f7:47:90:b1:ed:aa:cd:02:6b:ad:
83:32:66:07:4a:3a:f9:96:a8:99:d6:57:e5:0b:f7:
7b:7c:53:f8:fd:84:a0:23:23:f2:58:ce:7d:fa:92:
9d:ef:fe:ad:c4:3a:e0:fc:e2:e4:15:d8:c7:eb:90:
91:74:1d:29:c3:07:40:b9:72:cb:01:de:64:cb:aa:
4a:18:8b:cd:74:4f:24:7d:09:35:9d:c2:b0:30:3f:
e2:ee:c3:d3:1f:f2:cf:06:95:37:3c:6a:38:52:98:
47:8c:17:42:e7:ff:50:48:42:43:60:04:5a:da:02:
32:e5:85:13:20:2d:f1:7b:9b:aa:61:e6:cd:74:01:
18:6e:ec:60:18:5c:4f:df:9e:f6:34:b8:35:dd:0e:
20:37:ff:6a:d5:fd:a9:f2:7e:96:cc:0f:d5:b1:37:
e2:e6:ed:84:8f:28:12:7d:47:6c:57:65:b2:f5:40:
f9:68:db:b9:f7:e0:f1:8d:b2:8c:b2:96:de:26:a9:
ab:bf:15:bc:b1:76:4f:81:d4:af:b9:cc:18:af:34:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:8B:20:3D:7B:CC:64:A9:60:DC:7D:16:C8:21:12:87:40:16:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6c54-503c-4b55-93b5-a094ddea0c1a/1/JXeLID17zGSpYNx9FsghEodAFlI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.117.0/24
IPv6:
2a12:2740::/29
Signature Algorithm: sha256WithRSAEncryption
8c:0d:b6:73:57:de:52:60:52:76:76:f0:d0:68:4d:e6:d5:37:
c2:58:71:de:65:c5:63:6c:6a:66:4a:13:2d:52:46:2f:34:ab:
b8:a3:a5:c0:f9:33:93:59:f9:8f:85:bb:30:35:e0:68:ac:62:
65:65:c8:a6:11:70:5c:97:a6:c5:49:53:25:3d:f5:4d:b2:e8:
39:c6:d1:03:dc:5e:c3:62:dd:33:3a:fc:00:36:23:c7:8e:b1:
04:4e:9b:b6:d4:87:fa:7d:58:4e:4b:70:d0:a5:61:ac:88:39:
65:e5:c9:cd:5d:d0:5c:6b:3e:24:50:97:1c:90:f6:79:dc:ab:
dd:d0:d3:84:5f:39:58:f8:c0:74:e9:0d:4c:f6:c8:57:00:62:
52:2e:76:f7:e4:72:bc:29:b8:7a:71:f7:90:fb:24:c6:99:a1:
84:0e:04:d7:23:93:59:2b:bf:f2:82:9b:fd:ca:54:05:df:d0:
c1:24:4a:1e:3d:fa:b7:5d:ea:11:36:f7:a5:af:32:68:ac:56:
42:e2:2b:df:68:5d:b5:bc:98:92:fc:9e:ee:2f:a3:64:a0:1f:
3c:1c:3a:c4:24:97:3e:77:1f:87:67:82:23:1b:71:0d:f7:04:
f9:a9:73:e7:56:b4:12:6a:67:b5:02:47:11:15:f9:33:dd:0c:
78:c3:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:03:29 2024 by rpki-client on console-fra.rpki-client.org