Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R_LjECpBeSUl1L1qimwv9KqPbXE.cer
File: R_LjECpBeSUl1L1qimwv9KqPbXE.cer (raw, json)
Hash identifier: j1Bb3Gid7p2qseDGzyzRdF0OV9LzyqEB3hQzH+4J7Z0=
Subject key identifier: 47:F2:E3:10:2A:41:79:25:25:D4:BD:6A:8A:6C:2F:F4:AA:8F:6D:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3F7BFBB66E9DBD8ABB0A8CE4D970A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/R_LjECpBeSUl1L1qimwv9KqPbXE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.124.0/24
IP: 2a12:e400::/29
Validation: Failed, certificate revoked on Mon 27 Nov 2023 12:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:f7:bf:bb:66:e9:db:d8:ab:b0:a8:ce:4d:97:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47f2e3102a41792525d4bd6a8a6c2ff4aa8f6d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:d5:b7:33:95:d9:8c:12:dc:61:3a:ba:5e:
d1:59:51:05:41:28:d0:7c:b0:5e:2c:2d:e4:9d:f1:
dd:04:99:55:fd:f1:c2:4a:93:4b:68:49:02:90:02:
7b:78:ae:2f:88:17:54:e0:0f:91:b2:8e:3e:11:32:
e8:4f:92:c7:bd:23:6b:66:fd:9b:a9:76:4e:d8:74:
99:a1:42:95:3a:04:d1:3d:41:2b:e0:ce:f5:db:88:
7c:e2:5e:14:8f:7d:ae:c0:92:cd:ef:3b:b3:51:e8:
f1:b6:ca:6f:9d:e2:a5:e0:60:dc:99:f0:21:d2:6f:
c7:64:c3:1e:bd:a2:b9:ed:d2:14:36:73:b7:86:7b:
f7:12:04:01:d8:5f:80:c6:93:75:fa:45:2b:a8:00:
f7:90:b0:af:65:02:c9:a1:eb:0a:a0:e2:f0:6f:2a:
29:b7:83:38:7a:af:19:aa:d9:c0:4f:e3:8d:cf:63:
3f:91:94:77:c8:40:19:85:06:af:ce:8b:34:2a:67:
91:ed:24:03:e3:41:b1:00:11:23:c1:c1:96:2c:83:
d9:a3:16:d9:48:99:46:66:22:be:b9:fe:45:32:9c:
6a:80:fd:7f:f1:7c:ae:27:39:38:81:af:1f:c8:02:
47:39:dd:47:ed:ad:ce:3d:24:07:46:e9:f0:1e:5d:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F2:E3:10:2A:41:79:25:25:D4:BD:6A:8A:6C:2F:F4:AA:8F:6D:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/42fb4c-295d-4da2-b1c0-35d2285f0299/1/R_LjECpBeSUl1L1qimwv9KqPbXE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.124.0/24
IPv6:
2a12:e400::/29
Signature Algorithm: sha256WithRSAEncryption
09:5d:52:3f:0d:31:c5:58:4a:95:1b:1f:4d:7a:1e:20:31:2f:
36:c0:48:78:e4:53:a5:8e:8b:b9:71:5d:69:d4:aa:92:bd:5c:
43:3d:9a:d4:ff:92:87:0a:be:e4:99:e8:9f:3e:b9:89:50:5d:
95:47:2d:83:6d:ca:b1:9f:6c:2e:db:7c:14:70:6b:ea:d3:e1:
7f:3f:06:f9:53:90:d2:b8:bb:63:b0:f2:57:d6:7b:b7:98:52:
c7:91:b5:fb:c7:2b:06:07:47:ed:c1:6d:e1:c8:74:52:e6:89:
84:23:62:67:7a:db:d3:85:ca:62:51:41:3d:45:27:d0:89:9d:
9e:3d:84:c5:40:ce:5f:d7:3c:b1:dc:3a:2d:9d:c3:58:e3:3a:
b4:a3:64:4e:c1:64:07:14:77:a4:dd:60:d5:77:f7:52:21:3a:
10:0f:1e:76:93:8c:54:e5:70:ff:ec:f3:fb:00:b3:12:76:a4:
ae:5d:4a:77:98:b1:bf:80:00:8a:96:24:06:06:d9:70:37:23:
96:94:5f:ed:88:c8:6c:77:a1:eb:39:af:49:81:93:4f:3d:f7:
62:e7:f8:fd:b8:a3:be:e1:a4:11:5a:cc:be:6c:30:2f:49:eb:
52:c1:e2:3d:6f:c0:66:a3:68:13:86:e9:48:f1:f0:0a:af:b5:
68:1d:cc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-fra.rpki-client.org