Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer
File: e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer (raw, json)
Hash identifier: wG3qYP6bhS5TE5bWRj3LJwU3eIi0ZLQzAZpv9zoadMA=
Subject key identifier: 7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701CA45CF0EBA341AE2ED2600B59157E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.88.0/24
IP: 2a11:1ec0::/29
Validation: Failed, certificate revoked on Mon 18 Sep 2023 11:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:a4:5c:f0:eb:a3:41:ae:2e:d2:60:0b:59:15:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b70bd98ee21138dd2436440f53cfa10160ee073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:51:0d:2b:ca:ef:5b:57:52:97:d7:09:0a:
3c:81:9d:cc:76:9f:e7:80:6a:e3:6c:a9:59:04:65:
9f:5f:f7:da:8a:b5:d7:31:ef:46:5b:f5:65:5a:80:
5c:b0:97:4b:3a:2a:5b:34:03:9a:99:eb:a3:74:dc:
14:dd:43:30:e1:c3:5d:1d:47:32:ef:a3:dc:32:b3:
ce:7c:55:c6:10:c6:04:5f:99:46:18:8f:62:91:1b:
b4:19:52:b5:4b:b6:ce:e9:70:69:3c:4e:51:43:52:
79:8a:92:61:54:53:f5:69:66:15:2a:93:1b:ea:7f:
1c:d3:90:a3:26:17:1d:53:98:61:3b:ce:fe:3d:85:
c2:39:b1:5d:2d:f9:8d:4d:b7:67:04:f3:f8:84:68:
c3:0c:b9:d8:f2:72:93:9e:a6:4d:e1:bd:57:e0:0c:
ea:a7:33:fa:f4:1b:f9:dd:de:e5:05:16:d3:cd:12:
89:2b:74:c0:7d:68:f9:10:b5:46:9b:6f:ed:42:a0:
02:59:55:7e:db:1c:1d:2f:0f:b3:06:8a:a9:8b:d9:
ea:1f:69:f5:49:19:5d:69:51:de:70:a3:65:f7:81:
bf:19:c8:98:65:2c:b5:2c:f7:ad:27:3c:9f:31:4c:
c1:cc:75:10:19:d1:d0:36:bc:52:31:f4:9e:50:ba:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.88.0/24
IPv6:
2a11:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:2b:69:dd:98:79:d8:87:f7:f3:09:0a:09:d4:38:0b:40:24:
b1:fa:d3:9c:28:cb:8c:bf:0c:03:23:96:bb:a3:0d:e6:d6:f7:
63:26:c1:c9:2a:82:7b:07:bf:b9:bb:70:9b:a5:6c:75:d5:f3:
c9:09:3a:e1:54:ea:ab:32:03:32:27:78:a9:df:f4:35:22:14:
c0:f4:8a:d7:94:0b:64:da:fc:d1:5f:16:7d:c9:39:c9:75:21:
96:2d:78:e3:49:6b:3e:7c:e7:fd:e4:95:d7:4d:77:2e:fa:fb:
13:87:34:68:f0:77:ac:6e:db:d1:a1:10:e0:30:22:30:a6:84:
bb:92:20:09:12:95:f1:58:9f:7d:78:0e:9c:32:28:42:a0:49:
64:d5:d4:7d:3f:cb:d8:64:ec:3d:ba:21:01:3d:99:95:3e:32:
65:ce:43:a9:84:18:be:31:ec:5f:79:af:be:bc:cc:db:d0:97:
26:da:a6:6d:81:10:f9:06:ee:cc:0f:df:f9:d1:a0:cc:b0:42:
8b:50:04:ff:21:c0:9a:56:91:9a:21:9c:35:62:61:b9:bf:f0:
01:8a:ea:0f:18:df:a5:97:45:ac:26:2c:87:a6:b9:b7:85:76:
c9:f5:90:cc:98:7d:70:74:5a:e8:a9:fe:3a:43:be:9d:90:b1:
f1:11:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:22 2024 by rpki-client on console-ams.rpki-client.org