Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_InFtJCmKdBjE0cBgKZ_ZFGItrU.cer
File: _InFtJCmKdBjE0cBgKZ_ZFGItrU.cer (raw, json)
Hash identifier: 0QphZpxhkkRvRYUKwthQMwSmCswpTFVAY5TydMyrMqc=
Subject key identifier: FC:89:C5:B4:90:A6:29:D0:63:13:47:01:80:A6:7F:64:51:88:B6:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B6873CB973DEFBBD681A0D4CAF1146
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/_InFtJCmKdBjE0cBgKZ_ZFGItrU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.26.198.0/24
IP: 2a12:7000::/29
Validation: Failed, certificate revoked on Sun 17 Mar 2024 22:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:87:3c:b9:73:de:fb:bd:68:1a:0d:4c:af:11:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc89c5b490a629d06313470180a67f645188b6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:52:bd:4c:b8:5a:a4:25:db:0a:17:e1:07:
a6:93:d9:05:5a:83:24:dc:75:98:70:85:d7:a0:d3:
4f:c4:08:6d:b7:0b:34:23:bd:d2:e6:0b:1d:11:ed:
9a:08:71:a7:e4:9e:59:f3:47:89:96:f1:24:79:5e:
41:a4:63:f8:20:0d:b1:37:2c:a9:56:14:a7:b2:c3:
a6:2d:8e:a4:ff:a1:8d:09:6a:ed:39:ef:df:29:a0:
5f:a6:1e:24:65:d3:ab:10:90:4f:89:76:4b:76:2d:
15:50:6e:35:32:b1:14:cf:18:b3:8e:e8:53:c3:80:
2d:0b:4d:47:68:20:66:3d:54:32:bd:cd:c4:9f:4a:
81:93:0f:b6:11:7e:30:38:51:6d:a8:f1:80:1e:21:
4b:dd:5f:9a:90:67:0b:3a:00:9e:41:95:de:84:be:
56:cb:7a:a5:88:ed:0d:1a:06:8b:e2:25:cc:7c:9d:
77:bb:27:ac:7c:6e:0b:a5:a7:95:53:b0:29:47:83:
b4:ac:f3:e4:a2:45:da:46:8f:d0:5f:82:17:a7:e6:
3d:74:53:8c:bf:1c:b6:a0:3f:c4:9e:39:e3:55:a8:
ea:7c:7d:43:dd:b5:1b:d3:2d:8e:5b:82:50:d4:78:
67:c1:b8:ec:25:bf:f0:2a:8d:ee:a8:e8:d8:d6:9e:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:C5:B4:90:A6:29:D0:63:13:47:01:80:A6:7F:64:51:88:B6:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/_InFtJCmKdBjE0cBgKZ_ZFGItrU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.198.0/24
IPv6:
2a12:7000::/29
Signature Algorithm: sha256WithRSAEncryption
91:21:d9:0a:50:dc:1c:82:52:58:3f:76:f6:70:5f:9c:55:17:
c4:f1:8c:a3:e6:a7:b9:1c:33:9b:aa:4c:b8:c2:d6:05:45:09:
50:bf:7b:6d:3b:26:9d:12:f2:66:af:38:52:0e:71:9d:dc:5f:
75:5c:67:9d:43:0d:d1:c8:63:28:7d:a0:30:8b:b2:bb:4c:37:
91:84:36:05:d8:fa:53:dc:86:1c:5b:f6:83:48:24:57:fe:5b:
bd:38:6c:07:bb:54:18:a8:75:d4:f4:4d:3b:2b:25:66:93:41:
dc:42:55:08:5a:21:1c:c6:4a:73:f1:2e:cd:6c:c3:f1:a2:eb:
f9:8d:45:2b:a5:1b:dd:1c:d4:ec:3c:8a:8a:08:b8:25:99:02:
be:29:e6:ba:fe:21:db:cb:ef:5b:35:44:28:e6:5f:09:c4:7c:
da:86:20:de:e8:bf:66:55:87:6b:b3:48:ed:af:f0:f6:eb:f9:
7b:70:68:6c:fb:c7:ef:79:36:82:47:ed:48:8d:43:55:b4:5a:
a3:a3:4c:57:5f:52:9b:8b:12:d4:77:d4:af:86:62:1e:0f:3b:
4a:1c:d4:b1:fd:1c:b9:a2:f3:08:e1:98:55:4f:80:f9:3e:58:
d9:70:12:2c:dc:93:cc:fa:3d:b9:c4:b2:f8:b9:bc:84:e2:98:
a1:61:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:29 2024 by rpki-client on console-ams.rpki-client.org