Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jfq7WDMKaPESGvK-9D3EVBclECA.cer
File: Jfq7WDMKaPESGvK-9D3EVBclECA.cer (raw, json)
Hash identifier: +l3R4rveZ5ELLhYUHYRHnLK0g5jVgMk73qvlxBP034U=
Subject key identifier: 25:FA:BB:58:33:0A:68:F1:12:1A:F2:BE:F4:3D:C4:54:17:25:10:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8979762C8916892039496D4A97BA2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/Jfq7WDMKaPESGvK-9D3EVBclECA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.41.251.0/24
IP: 2a11:2d80::/29
Validation: Failed, certificate revoked on Fri 18 Aug 2023 09:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:79:76:2c:89:16:89:20:39:49:6d:4a:97:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25fabb58330a68f1121af2bef43dc45417251020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2e:f4:75:06:9d:73:26:e8:b9:ad:4f:91:6c:
bc:9d:b1:19:f3:49:a5:ff:ae:82:37:51:7e:91:59:
66:4f:4f:9a:32:1d:0f:49:33:df:a2:09:0e:d7:4e:
af:ec:9f:7a:51:e6:f0:fb:b4:78:03:63:f6:cf:d0:
47:93:f8:18:86:fc:8d:a5:e7:bf:fb:a9:c6:c6:51:
a1:aa:ae:f3:ae:6c:3a:16:9e:33:8b:04:26:62:e3:
15:63:0c:4a:21:2b:b6:98:ad:be:46:04:90:8c:86:
d6:ae:ae:31:0c:73:90:35:de:85:46:61:16:71:b5:
78:dc:12:3a:5a:7e:ff:62:8d:69:d4:17:74:23:ef:
55:e0:e8:43:80:67:df:75:ff:b6:de:e8:b2:ed:94:
68:50:dc:29:82:fa:11:70:a6:ab:78:f6:25:1a:1d:
65:d1:2e:49:e6:33:1a:dd:47:ef:55:6d:54:3e:76:
34:27:8e:17:ac:b7:fa:ac:0d:d9:1f:8f:f7:2c:63:
dc:49:94:41:8c:b5:d8:a7:e5:10:47:9d:f6:61:db:
48:bb:0a:97:e2:75:02:97:e7:f4:bf:8d:2c:fd:97:
7f:10:a9:9b:23:64:96:b8:52:c6:09:9e:46:b7:2e:
66:e2:0e:3e:29:08:db:c2:5a:3b:76:50:f8:8b:05:
c8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:BB:58:33:0A:68:F1:12:1A:F2:BE:F4:3D:C4:54:17:25:10:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c5635b-3c1c-43e0-9006-5a1a7006c306/1/Jfq7WDMKaPESGvK-9D3EVBclECA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.251.0/24
IPv6:
2a11:2d80::/29
Signature Algorithm: sha256WithRSAEncryption
72:80:c3:b7:82:9f:e0:21:ee:59:e0:45:bc:e5:f6:09:40:22:
b2:34:73:03:6a:ba:b0:88:32:a8:f1:90:02:65:9e:39:8e:3b:
22:17:d2:65:37:21:64:76:2c:d0:7d:44:fc:56:41:dd:2e:d0:
45:01:17:6c:e7:b5:11:52:29:df:b0:a2:df:33:dc:ec:b9:bf:
80:f7:85:d3:ca:91:37:2c:5e:ea:e7:c0:9c:ab:1e:3a:7f:cd:
55:c0:9d:89:56:81:e7:d8:30:f7:a2:2d:d3:dd:a6:b1:c0:a5:
06:b0:ed:2f:af:a9:7c:58:df:72:d3:a5:ec:e9:6b:83:01:52:
65:89:73:1f:29:00:07:eb:36:c3:07:03:47:20:c0:a9:1c:1a:
51:5e:bf:9e:f5:b5:27:05:31:cf:1d:69:de:4d:e4:d3:72:17:
2f:5f:7e:f6:14:94:95:5c:4d:64:1f:f4:e9:64:4c:4a:75:a8:
04:7e:e5:57:ec:29:bd:42:40:fb:66:b7:ab:0b:1b:4f:c6:78:
1e:04:23:d2:24:db:4d:50:e3:14:09:31:25:32:0a:23:e0:23:
b9:8a:60:a9:b2:24:a2:96:4b:49:ad:2c:2b:1b:25:2a:b0:ca:
80:2c:a1:f3:d6:85:98:20:7a:fc:da:4b:c4:85:78:4c:eb:14:
4b:9e:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:03 2024 by rpki-client on console-ams.rpki-client.org