Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ROKbxnH5ndWb2pRVdxORUGMbHXE.cer
File: ROKbxnH5ndWb2pRVdxORUGMbHXE.cer (raw, json)
Hash identifier: QjDQZqMa45mc3tuSWnILyldx1NbcQqc6H4isACwag3s=
Subject key identifier: 44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFF8561F8407E5AD874CA9D1A977C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.199.0/24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 09:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:f8:56:1f:84:07:e5:ad:87:4c:a9:d1:a9:77:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44e29bc671f99dd59bda945577139150631b1d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:63:1d:f5:e7:3e:11:e4:5b:ca:30:12:6e:
13:01:20:ba:99:b4:90:e9:b4:4d:1c:d7:ce:e8:f4:
20:9a:f2:83:a1:eb:9a:e8:6c:c1:83:08:59:59:90:
91:4c:6f:b4:f2:c8:eb:bf:fa:d7:bb:06:99:d8:9c:
38:a5:a6:90:58:80:49:be:34:53:47:95:e8:56:86:
04:ab:03:05:8f:d0:c6:1e:67:38:63:9e:65:e7:7d:
ed:dd:42:60:b9:1b:c0:2d:ac:b7:cf:20:96:0d:5f:
d3:95:59:ff:0d:9f:a0:e5:fa:53:b3:81:59:e9:d8:
11:d3:a8:bf:fa:2a:60:0b:80:07:7a:81:45:33:97:
68:56:14:c8:be:68:a8:be:fc:55:b1:ee:aa:70:ae:
52:e5:d3:a6:16:09:b0:55:2c:cd:e7:22:db:96:3a:
0f:60:3f:a9:e3:82:c9:1c:db:27:ef:a7:99:4b:ab:
40:1b:47:41:e4:7e:a0:04:74:59:5c:ca:24:1c:37:
15:7d:04:dc:6f:98:61:dd:21:ee:cf:a7:55:12:d8:
3b:2a:2f:38:53:1f:54:07:41:19:e9:15:ab:37:80:
59:ca:b5:4e:c0:c9:54:16:4d:1d:bf:d9:35:fd:ba:
d4:1f:00:56:7f:c7:cb:61:38:e1:ed:0b:f4:bd:3f:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:9B:C6:71:F9:9D:D5:9B:DA:94:55:77:13:91:50:63:1B:1D:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ed110-6479-42d7-81d9-e876ebf94417/1/ROKbxnH5ndWb2pRVdxORUGMbHXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:28:38:10:17:3f:dc:8a:55:76:ed:74:e4:34:8e:fe:78:5a:
56:10:52:34:b6:9c:01:98:b6:66:07:4b:77:f0:9d:5d:8f:f8:
43:c6:6d:c5:8c:25:9b:7b:f2:8e:04:59:13:9c:7a:c4:ec:e1:
15:e2:98:c9:cd:5e:8c:d3:26:59:7a:66:78:08:31:54:c8:a2:
0e:80:ae:ce:47:55:16:50:a4:62:a1:e3:67:ff:53:85:79:70:
96:2d:e5:94:85:42:b3:9d:67:92:db:b6:9c:2b:db:87:46:88:
d3:76:52:71:82:95:9e:77:36:5d:a9:fd:e8:bf:7e:de:13:b5:
81:aa:1d:ea:56:3a:37:d7:2f:2f:2f:cf:2b:d5:23:ca:57:1f:
2c:9c:1d:0c:d7:8a:83:8f:f6:2a:aa:27:0f:bb:c4:d0:a8:a8:
3a:f2:e8:b7:b2:2c:a4:07:2f:bf:7a:01:7f:06:7f:98:10:e8:
35:05:61:62:a3:21:af:d8:cf:4d:57:2e:eb:e3:47:f9:ee:89:
bb:66:1b:87:06:8b:2f:bc:aa:0d:ab:fd:0e:3d:69:e1:40:9e:
04:f1:75:bc:4e:2c:1d:f9:b9:d2:ee:5b:a0:7f:c3:41:00:fc:
be:04:6d:e9:2a:5c:81:ce:ae:44:26:9b:54:23:4a:30:7e:c6:
b8:48:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:29 2024 by rpki-client on console-fra.rpki-client.org