Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XnF2J_ey_MVvDXvkaaExcWB9JCc.cer
File: XnF2J_ey_MVvDXvkaaExcWB9JCc.cer (raw, json)
Hash identifier: mvncSqF1eivuMLOn4Jm2+U/WrnE9LUAJlk6jyUAFcEU=
Subject key identifier: 5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC425382467233C2BE37F849EDDBDA84E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:22 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.254.165.0/24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 13:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:38:24:67:23:3c:2b:e3:7f:84:9e:dd:bd:a8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e717627f7b2fcc56f0d7be469a13171607d2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a1:87:29:d1:3c:5f:00:55:b2:eb:74:e8:39:
51:3a:93:61:ec:b8:bf:47:1b:cd:67:95:00:e8:80:
a5:c0:8e:83:90:0e:be:38:30:0f:79:32:d4:2d:9d:
b0:4f:42:c2:db:ac:8a:19:7a:93:46:fd:b3:4c:e2:
9c:38:99:f4:ac:f1:1a:88:d3:3f:00:59:f2:2a:df:
2b:cf:f2:e0:94:bb:9f:ca:74:1c:00:46:db:d6:a9:
c2:12:63:2e:7c:1c:31:ef:39:6b:25:d1:67:97:7f:
87:b6:2f:7c:17:44:ab:2c:d6:e6:a5:55:e8:a9:60:
3b:0e:4d:24:c5:4d:83:58:b6:12:d9:e3:c6:44:9e:
d0:17:8e:ec:5c:10:7b:f0:74:6a:c6:2b:a2:e2:ca:
48:a5:d4:9d:8a:96:87:fe:c0:12:4c:14:81:68:34:
39:c1:34:53:46:b5:1f:e1:25:a4:b2:03:b8:43:be:
bc:aa:4f:45:1d:93:7f:91:04:70:b9:b0:94:71:c2:
c4:ff:a8:c9:14:2a:c0:28:e1:7e:48:26:29:a9:97:
df:24:aa:ff:13:7a:2f:b1:6f:56:67:7a:ea:86:c9:
b5:fa:1b:ed:5e:d4:d9:5e:4e:a6:7e:83:10:53:af:
9f:b5:98:80:0e:86:ff:4c:72:1d:d5:7d:6d:27:88:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:76:27:F7:B2:FC:C5:6F:0D:7B:E4:69:A1:31:71:60:7D:24:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3d1945-d60e-48ab-88bc-8cfe4b8157d2/1/XnF2J_ey_MVvDXvkaaExcWB9JCc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
79:51:36:3a:bd:2f:c3:71:96:69:b6:e1:01:c4:26:8f:3a:22:
69:e9:11:b4:a4:bd:f9:e5:27:3f:c4:d1:51:71:73:ff:51:d6:
30:23:9c:35:4e:20:84:4b:f1:5b:f3:99:a7:8f:2a:d2:e7:c0:
10:18:02:53:98:89:33:0b:6c:61:d6:d4:9d:04:ad:00:f3:af:
cc:e5:a2:6c:e7:2a:a2:60:c9:7c:2d:f6:74:2b:ed:8e:57:49:
52:66:4e:79:67:3e:d7:7e:04:33:a9:dd:66:10:62:79:72:f0:
6a:08:28:90:89:10:ee:47:a7:af:be:46:9b:22:e8:4d:58:33:
b9:5b:a2:af:02:1e:0b:92:c8:a3:3f:57:69:e4:78:fc:a1:2c:
51:9c:72:d5:4f:01:03:e0:cd:54:0f:9f:2d:43:e9:a3:40:af:
37:d4:c2:f0:c2:ba:16:bd:d3:92:7f:2b:26:90:9a:e9:b9:79:
da:d0:f8:c1:cb:d2:aa:ec:b5:22:37:29:1a:f7:c8:54:31:50:
db:2a:6f:f5:60:ce:20:3a:72:7b:85:bc:9c:90:c3:bb:39:ba:
9d:d0:d6:2a:a9:11:15:25:d8:fb:9c:a2:e5:79:75:7e:7e:a8:
f5:e4:66:67:d6:82:c6:a9:e0:b9:1c:6a:da:29:24:37:4e:87:
ec:26:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 17:20:36 2024 by rpki-client on console-ams.rpki-client.org