Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aE1dX9ftEHHKRznw4ji6UVNGw6E.cer
File: aE1dX9ftEHHKRznw4ji6UVNGw6E.cer (raw, json)
Hash identifier: d61VBDQkew12jEyRypoRwJDWlBd0BJPvV3U7jcXAE4k=
Subject key identifier: 68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3495D66AB29808337E0DC9748587ABA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.66.0/24
IP: 2a12:b880::/29
Validation: Failed, certificate revoked on Wed 31 Jan 2024 11:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5d:66:ab:29:80:83:37:e0:dc:97:48:58:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=684d5d5fd7ed1071ca4739f0e238ba515346c3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:27:16:8e:39:56:68:ec:fb:10:b2:4f:52:
74:9a:1c:1c:34:3d:c3:74:8e:20:18:09:85:08:51:
2f:08:b9:74:09:d8:67:79:e1:84:b3:42:86:c0:30:
bb:8e:aa:da:7f:60:2c:00:62:c4:e2:22:b1:2f:f2:
7f:9c:72:cf:e8:4e:f3:8c:4b:0a:eb:81:82:0b:76:
7e:fd:f8:05:be:e6:7a:f6:cd:cb:67:d5:f8:3b:7a:
cf:c7:39:3e:6b:d1:7a:09:f5:c9:d5:77:b4:9b:53:
72:ff:63:1c:fd:6f:f0:c4:4a:36:1e:5a:9f:14:4d:
71:51:44:5e:fe:1b:b5:e3:63:2d:9f:6a:d0:e6:3b:
42:14:ff:b5:ca:0a:1f:72:ac:9c:78:4d:9a:cd:30:
9c:17:1f:ab:6a:76:1f:ae:b1:52:2c:a3:c0:32:78:
9b:6c:7f:c7:d6:27:4b:f4:91:8e:c1:eb:29:22:8c:
d8:11:a7:f9:84:f8:f6:13:f2:f9:e4:d4:47:1c:51:
6f:d0:06:f1:e5:bf:6d:ab:6a:83:05:3d:37:7d:f1:
f9:c9:44:f0:b3:f1:19:4f:52:a0:89:2f:19:4c:68:
28:38:bd:a1:4f:aa:cf:bf:8d:8b:a5:d4:82:45:50:
a4:c3:09:0d:07:50:35:72:fb:e9:2f:e3:2f:ab:a3:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4D:5D:5F:D7:ED:10:71:CA:47:39:F0:E2:38:BA:51:53:46:C3:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/196925-f347-49a4-a5ec-6cb195d3df69/1/aE1dX9ftEHHKRznw4ji6UVNGw6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.66.0/24
IPv6:
2a12:b880::/29
Signature Algorithm: sha256WithRSAEncryption
89:1d:50:c3:33:6e:72:4a:b4:0f:65:9a:41:5b:3d:19:f7:9f:
62:6f:25:93:77:d7:c7:c2:b1:55:b7:28:fe:f4:df:bc:40:ea:
ae:79:9e:b6:5d:d0:70:2c:d8:8b:5b:8f:4c:cf:e9:77:a9:cc:
4c:d7:a4:49:4e:25:aa:19:1e:e6:7b:c2:50:e8:1a:43:f1:c6:
14:08:3b:39:aa:ce:e3:29:21:42:eb:5f:7c:3b:69:55:f2:09:
86:d9:9e:15:4a:45:91:b7:8b:95:cb:2a:ee:04:73:95:21:dc:
45:e3:08:65:2e:62:15:3c:fc:f3:7b:cb:9a:c2:37:4b:a7:82:
7f:7a:4a:45:a1:52:08:8c:2c:a7:a6:3f:83:29:70:4b:53:98:
56:09:e4:6b:9d:f3:49:fe:b5:9d:b0:05:7e:37:60:7f:56:8b:
ba:41:a3:8a:3f:10:3d:43:51:17:7a:4f:56:aa:76:ea:91:74:
2f:a5:fe:fa:87:77:58:ab:b7:9c:38:07:4b:da:8f:b9:f0:25:
a1:3e:39:a0:3b:06:e3:80:e4:5e:5c:83:60:f3:f3:18:c1:03:
bc:ce:53:c9:c9:0b:d2:f8:47:ca:09:b4:77:68:a9:f7:68:20:
88:27:3e:0d:aa:68:50:0e:ae:0b:8e:22:42:66:dc:c6:2b:03:
64:02:10:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:29 2024 by rpki-client on console-ams.rpki-client.org