Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
File: R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer (raw, json)
Hash identifier: YyoFFqbO64i7rzaMshJ/a93zz3YVxBgTz8UYmPMBBe4=
Subject key identifier: 47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F05AEB9193B45991E834F29805F38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/R0GAzBESvUFoe6ZgnCcWdX5UJd4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.220.198.0/24
IP: 2a12:4980::/29
Validation: Failed, certificate revoked on Thu 15 Feb 2024 14:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:05:ae:b9:19:3b:45:99:1e:83:4f:29:80:5f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=474180cc1112bd41687ba6609c2716757e5425de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:65:f3:27:38:76:11:ba:bb:52:6f:c7:1e:
89:26:52:ab:c4:1b:03:f1:ad:e0:87:88:75:8e:f9:
ac:78:5b:60:ba:e8:de:01:e9:af:b9:40:80:4d:39:
fa:48:05:b8:ed:c0:16:b0:aa:ed:43:94:75:ec:00:
50:ea:dd:b6:cf:3c:49:24:a3:22:26:73:19:0d:51:
ae:39:fc:7b:a5:55:c0:1f:63:43:ba:4b:f1:3e:75:
6b:36:ab:bf:0f:b0:c6:fb:ca:48:26:30:39:1c:6e:
f3:8d:9b:bb:8c:9e:41:f8:f9:63:b9:7d:be:f7:71:
d4:0e:84:78:7f:7a:d9:41:97:01:fd:a6:72:a4:6c:
83:e2:d2:b4:e7:10:4f:9a:df:f1:24:ab:f8:dc:e2:
6f:9a:52:ca:a6:5a:fb:0e:ce:3e:f1:16:38:e3:d2:
42:c2:b4:8b:ec:92:39:e1:e6:f1:32:74:22:c8:c2:
3d:be:31:8c:e1:c3:ca:d8:02:e5:cf:96:70:47:38:
53:d9:09:3b:9e:cb:7d:e7:53:2b:81:e8:b3:6e:f1:
4a:a9:3c:bc:59:0d:ee:5f:16:d4:be:bc:b3:a4:5d:
95:17:9b:51:1a:f7:7e:1f:0f:65:fc:09:b8:ba:a4:
00:e5:4a:87:91:f8:21:fd:db:1e:42:3b:34:97:39:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/R0GAzBESvUFoe6ZgnCcWdX5UJd4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.198.0/24
IPv6:
2a12:4980::/29
Signature Algorithm: sha256WithRSAEncryption
29:0a:8a:bf:d3:77:2f:e2:3c:89:e3:34:64:6c:3e:5a:b3:c6:
39:ec:94:7e:ad:53:50:71:c4:1e:90:69:69:e1:03:2a:09:40:
ed:fc:13:63:e8:da:84:42:cf:94:f7:7d:e6:36:3e:b7:e2:71:
65:5e:44:c3:7e:e6:3a:db:e2:1f:4b:e9:b3:ce:f0:bd:23:9a:
94:b6:4a:59:f5:e2:b7:d4:f4:b6:0d:a7:05:50:12:11:a1:79:
37:9b:3b:2f:57:d2:09:7d:fe:ca:56:fe:4d:49:d1:ec:20:66:
f0:38:49:eb:4b:f7:b0:91:73:17:27:3d:01:ea:4b:46:9c:26:
f2:ba:29:f3:4c:d3:25:e4:dc:3d:fb:ae:3c:8d:29:29:66:a7:
21:4d:ff:4e:83:34:6b:3b:82:47:37:40:b8:a7:b9:5d:19:db:
c4:f1:94:28:d6:73:45:80:f5:f2:5b:f9:9e:a4:7a:1a:42:60:
01:3e:b2:cf:0a:46:9a:6e:d9:b8:b4:cb:c8:63:09:86:3a:f6:
b2:75:91:8b:5b:ad:6e:94:03:91:4a:2a:db:fd:96:7c:3f:dd:
d8:0d:9f:bf:1c:1c:02:3e:69:37:93:9b:8d:2c:50:b2:b0:06:
f0:b8:d7:82:98:f5:f0:2c:b8:70:b3:ca:34:fd:f4:77:61:92:
8e:9a:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:23 2024 by rpki-client on console-ams.rpki-client.org