Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_eLa2GRDTvW0xdRT0tU7O2at3m8.cer
File: _eLa2GRDTvW0xdRT0tU7O2at3m8.cer (raw, json)
Hash identifier: 43QYDtA6FWOcXHWnHQuzPVH/kkLkKqjyyzMolWvPFq0=
Subject key identifier: FD:E2:DA:D8:64:43:4E:F5:B4:C5:D4:53:D2:D5:3B:3B:66:AD:DE:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C68800DF5D74B3BB466F904AE6F3A1EC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/_eLa2GRDTvW0xdRT0tU7O2at3m8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 14 Dec 2023 13:24:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.71.157.0/24
IP: 2a14:3380::/29
Validation: Failed, certificate revoked on Fri 15 Dec 2023 14:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:80:0d:f5:d7:4b:3b:b4:66:f9:04:ae:6f:3a:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 14 13:24:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fde2dad864434ef5b4c5d453d2d53b3b66adde6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:fb:cf:82:e4:22:f1:d5:f2:b5:7c:80:b6:
0c:4f:1a:44:f8:fd:e9:7f:85:7b:e3:aa:b4:29:cb:
b7:d8:47:85:f7:cb:03:6a:78:77:db:0b:a8:28:5f:
ac:c9:8f:60:fa:8e:5d:9c:6a:5e:38:ba:82:cd:30:
97:34:08:67:4f:c0:6c:41:7f:31:88:99:6c:1f:8c:
26:19:97:c9:18:91:00:2f:64:fd:74:fd:a1:50:d0:
09:1d:6e:e4:c4:40:9b:16:fa:6e:17:bc:ad:b7:17:
fc:33:58:84:ac:a0:85:d9:03:30:1b:af:d5:68:0b:
43:27:a3:19:5e:e5:d2:0d:1c:df:27:8f:2f:19:3b:
c2:27:b6:5e:0e:ac:23:08:29:f3:80:73:63:62:3c:
b3:18:c4:78:2a:f2:e1:e8:0f:23:b6:3c:19:fd:b7:
ac:24:2b:8f:51:65:e8:04:17:95:20:27:68:9a:0f:
69:47:8b:6c:9a:b5:36:af:65:20:33:ea:80:76:a7:
f3:01:c1:99:c8:7e:3a:0f:9e:2f:d9:bb:67:52:a7:
1a:e6:60:b1:fb:00:86:c7:c3:2c:94:3c:ef:80:2a:
23:4d:2c:69:75:50:46:fb:7b:3d:d6:b5:11:45:54:
6b:d7:3c:0b:8e:bd:ed:d8:5e:9b:52:db:10:fc:05:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E2:DA:D8:64:43:4E:F5:B4:C5:D4:53:D2:D5:3B:3B:66:AD:DE:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5b38b5-15e6-4dca-816b-8467ec499a72/1/_eLa2GRDTvW0xdRT0tU7O2at3m8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.157.0/24
IPv6:
2a14:3380::/29
Signature Algorithm: sha256WithRSAEncryption
5c:95:e8:ae:9d:c6:5b:95:58:03:da:f0:bb:84:ab:de:54:e7:
dd:73:d5:43:60:40:ab:39:03:28:8d:4b:b5:37:cb:94:5e:62:
03:e3:9f:96:dc:99:b1:44:61:17:2d:8e:cd:68:ec:ee:71:7e:
e3:63:b3:d1:8e:97:92:47:b9:45:de:1e:11:df:69:7a:cc:53:
67:0a:eb:95:90:aa:a0:0f:7e:73:59:89:f3:aa:0e:8f:4a:2b:
ca:c2:34:9b:a5:0b:76:a4:60:8f:11:e4:23:5e:f8:2f:14:70:
95:26:de:1e:1e:34:de:1d:01:a3:c5:ae:09:be:83:d3:f4:be:
38:2b:18:37:fe:1e:ce:72:11:b0:51:d0:cc:d7:b8:fe:68:65:
13:82:85:f1:3d:00:4a:b2:08:1d:05:5c:0d:9d:84:d9:71:bd:
4a:67:31:69:fe:54:e2:ef:03:5b:17:bc:b2:9b:4a:3e:6e:a2:
6c:83:a5:7e:46:eb:ae:45:70:7f:92:da:e8:81:8c:b1:b7:12:
63:df:a2:a1:54:25:66:ce:69:99:3c:dd:eb:3f:a0:26:da:19:
80:ad:e1:19:8b:da:90:af:d2:a9:76:f7:6d:92:4b:14:99:db:
96:13:c6:b8:3b:69:71:13:e3:5e:bb:b6:e7:d2:3c:eb:0a:78:
02:68:01:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:35 2024 by rpki-client on console-ams.rpki-client.org