Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer
File: c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer (raw, json)
Hash identifier: Sp7dU9PUdqOVEZNs2yxDDqTAj1ccKKybBy2GQYeKZno=
Subject key identifier: 73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B54CFE3F0E6C15ACBC0B5EDD0C3D3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.177.104.0/24
IP: 2a0f:4300::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:54:cf:e3:f0:e6:c1:5a:cb:c0:b5:ed:d0:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d09d895b43a622a4521b95b99969dc673c0d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c3:ca:e1:23:ae:3c:70:f1:b9:8b:28:51:1b:
79:0d:a9:64:ba:b5:1d:c0:c1:cd:5a:40:fa:67:d1:
ed:64:31:21:26:67:13:80:ac:d3:1b:38:6c:1b:05:
1e:08:18:da:49:80:4f:a3:bf:45:8d:f0:2c:96:ac:
37:bb:d9:08:3b:a4:ec:21:c0:46:0c:4b:d7:1a:4f:
57:38:bb:93:3f:11:c4:f9:85:9e:97:66:52:22:14:
63:df:bd:de:21:7d:be:f5:e6:2b:72:f9:1b:4b:ef:
ee:37:48:64:9a:f8:b5:a2:93:11:75:5a:30:b4:62:
0f:ce:f8:68:e9:c1:57:21:2d:9a:a7:e7:67:f3:e7:
7c:a9:a2:e7:5b:06:83:1e:86:ff:10:8a:eb:ed:30:
8d:29:5f:56:4b:09:f2:44:71:bd:64:09:54:cb:35:
28:b9:c3:22:6e:ab:49:c2:d2:0c:c2:cd:da:08:47:
89:35:73:1c:90:c5:9b:4a:94:f3:28:a0:41:84:75:
96:91:b4:ea:0a:c7:4c:8c:9d:5f:2b:47:20:b2:02:
f7:2f:0f:17:f5:31:9f:87:08:00:08:20:be:c3:21:
b9:d7:29:0a:79:5b:80:ad:f3:fa:4b:b8:c7:75:31:
e2:12:7d:31:d4:c5:e4:ca:2f:f8:a4:ff:8e:ce:c7:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.104.0/24
IPv6:
2a0f:4300::/29
Signature Algorithm: sha256WithRSAEncryption
62:4a:69:21:6d:f0:e3:e2:6a:a6:7f:08:51:05:fd:1c:84:61:
02:33:fb:99:21:a0:0e:b2:39:b5:e9:8f:31:9c:da:95:72:05:
b4:85:95:27:63:55:66:9e:13:b6:c6:8b:18:c8:c7:cd:21:e8:
87:52:db:9a:52:74:f7:95:85:52:6f:0d:f9:46:cd:64:5f:89:
63:76:2a:c1:8f:86:ca:7b:a6:20:43:6c:15:cf:4a:1f:a2:5b:
a2:05:46:d8:3f:e6:39:05:01:7b:5b:02:24:18:0c:b8:5b:fa:
76:01:d2:1e:8c:6f:6e:06:b7:b2:eb:cf:74:40:8b:3d:4e:87:
82:20:20:0a:ac:0c:68:79:1a:24:26:48:55:b0:47:fd:d4:a2:
f9:53:d3:33:cc:79:e7:2a:d0:46:6a:b5:a5:9b:ee:aa:f2:16:
0b:56:5b:94:be:a8:9c:03:76:c4:b1:6d:db:54:f8:45:03:7b:
87:85:be:a4:49:af:3d:94:00:db:78:84:06:64:76:92:9a:a5:
33:bf:44:d6:56:a6:7e:d5:c5:be:19:e2:52:41:df:38:10:01:
30:56:1a:be:e7:a5:8a:93:00:6e:a5:6d:fc:be:59:19:92:57:
d4:8a:78:bb:ee:67:2d:3a:34:26:00:75:4d:41:fe:c3:76:f3:
05:16:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:09 2024 by rpki-client on console-ams.rpki-client.org