Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
File: abYKbXfEysjxAtgQvjMLPTke_pM.cer (raw, json)
Hash identifier: 13saMZmSChBOWIVoXXYXQdDupipTYMANLd6tMZ0OK4g=
Subject key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7940220F625B1123ACBF74B00AFDE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.202.209.0/24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 08:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:02:20:f6:25:b1:12:3a:cb:f7:4b:00:af:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:67:f3:f6:be:e7:3b:34:2e:c2:fb:6f:aa:
73:60:e9:dc:e8:1b:1f:60:55:1e:64:54:b1:8a:ab:
bc:6d:90:90:60:5c:4d:0b:70:18:79:13:7b:23:a4:
03:7f:eb:d1:bd:b3:56:42:5f:53:f1:73:db:55:8a:
0e:b7:02:4b:60:0c:69:ea:10:ca:64:ff:cd:3e:fa:
7d:2e:0b:bb:2e:35:15:0b:05:0f:e8:b5:d4:8c:f6:
6b:d0:f4:a1:43:f5:e4:58:f7:f0:c1:7e:6b:0d:a1:
ae:d4:1c:fd:4b:7c:58:33:46:06:b4:71:87:0a:05:
f8:f0:c2:c3:ee:e2:0f:c9:b0:cc:0b:95:b4:6d:e8:
21:1f:30:d7:08:fd:74:1c:1d:18:44:5a:8b:e3:57:
48:59:99:5d:ff:91:31:1d:51:86:eb:c3:fe:cb:ba:
80:b7:10:43:f0:78:a7:e2:c3:af:ba:64:94:b7:c4:
9f:6c:95:58:e1:a8:c1:bf:89:dd:69:62:04:73:ca:
e8:64:94:5d:a6:72:46:2f:8f:43:73:8f:10:49:bd:
cb:b7:40:18:e8:82:75:52:87:78:06:50:80:1c:80:
0f:ac:fc:eb:9d:ec:36:85:a4:2d:f0:4f:1b:17:73:
78:f3:1f:73:ae:ff:04:c1:02:da:40:48:9e:16:e0:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:84:c3:c9:ba:43:8a:e2:75:25:a3:b2:89:9a:0d:3e:27:8a:
e0:a1:3a:42:45:0a:82:53:f8:9d:94:6b:56:80:86:b7:f7:e3:
20:c2:5e:be:bb:be:6d:eb:35:b7:34:c1:1e:b9:94:18:61:19:
64:09:f6:fc:46:24:79:9d:67:76:ea:16:d9:31:99:3f:c6:5a:
55:a2:2a:ee:a8:43:76:6f:b6:32:79:3b:37:69:ba:cf:f6:d0:
aa:19:51:40:59:5f:14:9c:a3:56:d1:34:e6:d4:5d:3d:3a:07:
ca:7f:5d:68:0a:06:a9:c7:76:3d:0b:a8:dc:39:18:e1:95:2b:
1e:91:0e:04:32:d6:19:31:af:e8:9a:df:fc:2f:87:ee:be:86:
ad:e2:c2:3d:f1:c4:a2:fe:ba:e4:d4:b2:5a:d4:bb:6b:40:13:
9a:d6:9a:2d:b1:8b:53:f0:83:63:ea:c6:34:e8:d3:73:01:37:
11:47:59:0d:90:ea:54:02:ea:4a:7f:53:df:d7:62:c7:20:db:
7a:c1:1a:ee:bb:58:d9:f7:77:4f:80:e6:df:62:62:f6:b6:a8:
55:df:c4:fe:8a:da:d3:79:d5:89:58:13:35:5f:eb:66:36:ac:
d3:d1:3c:44:da:19:56:62:17:dd:92:45:d5:99:e2:e8:96:fb:
b7:79:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:24 2024 by rpki-client on console-fra.rpki-client.org