Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2iCn2CtmXGC3_P4wiMO3D9dytw.cer
File: c2iCn2CtmXGC3_P4wiMO3D9dytw.cer (raw, json)
Hash identifier: IkdWHzAZKopDa+lkr+DYEjJRGR8k3QqY0emZT8ogN7I=
Subject key identifier: 73:68:82:9F:60:AD:99:71:82:DF:F3:F8:C2:23:0E:DC:3F:5D:CA:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B636663891FD9640645751341DF5F3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/c2iCn2CtmXGC3_P4wiMO3D9dytw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.144.0/24
IP: 2a11:d0c0::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:66:63:89:1f:d9:64:06:45:75:13:41:df:5f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7368829f60ad997182dff3f8c2230edc3f5dcadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:ec:fb:76:ac:29:ff:39:18:d2:99:85:12:
00:06:5f:eb:74:f7:b1:04:23:81:d1:f8:1f:22:6a:
b3:9f:ae:c5:8a:61:02:5d:1a:43:37:5d:30:3f:03:
da:ee:56:80:3a:77:6b:95:53:a2:f6:e2:d8:05:fd:
df:26:2d:01:d0:2e:b4:40:da:0b:a1:57:2d:21:88:
89:b6:c5:94:56:a5:6f:51:35:9f:fc:e0:34:8c:44:
36:86:d0:ae:74:d9:c8:7b:f1:92:1f:e2:a3:4d:8d:
e8:3f:20:cd:15:2b:21:e0:71:9d:35:ee:9a:e3:f4:
af:e3:c1:80:7c:c8:8c:dc:95:e7:c0:d6:54:2c:0b:
b2:14:a5:c1:07:eb:74:a9:61:8e:9d:78:e1:c2:61:
a4:57:95:c8:a9:ed:2a:ee:ae:ff:56:5a:04:7d:c6:
8f:20:fb:c6:34:8f:93:d4:68:2d:8b:a6:7e:66:ce:
bc:81:65:46:c7:b7:95:63:ce:33:3a:22:21:4b:eb:
9b:d7:f0:34:9d:2c:0f:1d:a8:6a:37:38:ac:da:9a:
71:19:92:6b:e7:39:14:97:4e:eb:d2:15:4f:08:cd:
da:e3:4c:a0:2f:dd:7e:bd:f7:5e:17:ca:5f:1c:98:
5b:0b:87:63:12:bd:3b:5a:bb:86:0d:dd:d4:c4:43:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:82:9F:60:AD:99:71:82:DF:F3:F8:C2:23:0E:DC:3F:5D:CA:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e4cf15-a282-436d-9d05-c4da5939d7f5/1/c2iCn2CtmXGC3_P4wiMO3D9dytw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.144.0/24
IPv6:
2a11:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:97:a9:93:2d:0c:e6:e5:7b:97:89:8a:a7:9c:3e:82:81:e3:
ed:9c:f6:9a:f2:6b:45:4b:b5:8d:f0:88:5d:9b:81:5e:5f:e4:
47:5a:95:f5:3a:48:4c:b4:ed:a0:9c:28:00:7e:9c:9b:bc:87:
59:18:ae:91:7f:a7:69:6a:1e:8e:c2:cc:e1:88:cb:de:bc:dc:
e6:65:a1:bf:87:d2:ca:64:f0:0c:75:6d:31:95:b7:81:94:ab:
df:fd:be:48:f7:78:69:d6:bb:a1:cd:10:8a:35:4e:da:75:dc:
01:3c:f0:15:28:30:1c:52:da:d7:c6:2e:a3:da:ed:8c:ef:35:
fc:8d:fc:c8:f6:6b:9b:68:e2:3b:fb:54:36:3b:b5:86:31:01:
83:c9:bd:8f:7d:96:5f:fe:53:2a:d8:51:03:81:82:f9:85:2c:
33:ef:59:01:95:c6:2c:22:bc:30:70:89:2a:f5:ab:ee:9d:6e:
1a:17:3b:a2:b8:9f:f7:9b:a7:22:e5:e2:2c:a0:29:1f:d4:bb:
3a:82:71:09:6c:d2:5b:60:a5:e8:0f:ff:a9:bd:ad:cc:15:dd:
7e:fa:4a:9c:8d:09:bd:43:1a:a2:43:e2:eb:74:46:5f:1f:d1:
0f:69:e0:0d:21:5c:cb:af:6b:39:1f:cc:20:7d:1a:c7:25:6a:
c4:9b:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:46 2024 by rpki-client on console-fra.rpki-client.org