Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eDw0t3l8xm3_TkoKEnNHne1q6WE.cer
File: eDw0t3l8xm3_TkoKEnNHne1q6WE.cer (raw, json)
Hash identifier: uf8I5TKR+41tUwiHyE8J3iwrrMOMplTO5AEdPIWPBzI=
Subject key identifier: 78:3C:34:B7:79:7C:C6:6D:FF:4E:4A:0A:12:73:47:9D:ED:6A:E9:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7933741E32C21E18FEAA95E8F0F156F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/eDw0t3l8xm3_TkoKEnNHne1q6WE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.132.226.0/24
IP: 2a12:7180::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:37:41:e3:2c:21:e1:8f:ea:a9:5e:8f:0f:15:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=783c34b7797cc66dff4e4a0a1273479ded6ae961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:fe:ce:07:74:91:f0:9a:cd:f4:d0:42:5b:
5a:b1:30:93:a0:8e:07:25:5b:51:a2:7f:ef:2f:e7:
b1:8a:64:e0:60:48:11:5a:74:c5:5c:55:9f:74:76:
9f:60:61:fd:3c:14:88:c7:3e:57:66:9b:c6:c0:c1:
52:d8:90:c9:b2:53:99:94:f7:51:87:8f:f0:b7:6d:
8f:d5:2c:33:3e:38:0f:19:a3:61:f5:ce:2b:70:14:
4d:ab:26:ff:19:59:38:2f:8d:1e:52:00:de:e3:40:
9b:c1:39:4c:43:d3:bf:72:27:b6:9d:8b:54:c0:8c:
c0:4f:c1:66:8a:18:2b:52:f0:a4:16:89:52:d2:8e:
5f:db:51:29:fe:8d:6c:33:43:3f:75:54:c8:49:da:
b9:19:32:06:78:14:ec:c0:79:a1:dc:86:03:b7:08:
7e:fc:02:5b:27:a4:eb:57:5b:cd:df:34:4d:ad:ce:
81:d8:27:12:3d:40:f9:18:8c:c5:a5:31:bc:90:22:
e6:1b:cf:82:b2:a9:80:4b:fe:4f:ad:70:82:11:e1:
59:61:06:2c:d8:9a:6d:a6:18:dd:98:cd:ae:8c:0c:
fa:d5:fc:62:d4:13:4e:9d:5a:c3:d2:83:c7:d2:a5:
ca:f7:5a:8e:9f:03:9d:f3:84:3f:d4:db:6b:bf:ed:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3C:34:B7:79:7C:C6:6D:FF:4E:4A:0A:12:73:47:9D:ED:6A:E9:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c1f74a-7a78-4acd-8770-96c5988682b7/1/eDw0t3l8xm3_TkoKEnNHne1q6WE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.226.0/24
IPv6:
2a12:7180::/29
Signature Algorithm: sha256WithRSAEncryption
8b:fb:47:13:84:be:26:b1:69:96:3c:53:5f:3f:8d:d5:64:6e:
b1:c1:80:4c:f3:fd:2c:c5:0e:ae:9b:b8:a2:1e:03:7a:e4:75:
9e:30:a5:13:1d:c0:b1:08:fa:30:bc:40:0b:2a:98:a0:db:47:
13:e8:37:c1:10:93:30:28:f5:8b:5b:e1:d7:ef:1f:fd:d7:fc:
f5:1b:f7:6d:be:d9:3a:55:9c:2e:56:06:a1:fa:81:28:db:a9:
e6:dd:ec:77:01:05:0f:e9:f1:a3:0e:ab:cc:ca:31:d8:2c:5f:
c0:50:ea:3f:52:b8:b3:7b:62:d3:c2:c0:a7:3e:28:18:5c:ea:
0b:f0:4c:27:af:69:91:50:43:42:3f:e4:0c:66:58:da:f2:27:
7d:7d:57:1a:b6:44:48:29:de:42:b5:70:d6:dd:eb:b5:24:d6:
e1:91:eb:85:4e:c4:9f:a5:0c:d0:71:4b:99:3a:12:c1:74:e2:
1d:40:0f:a4:b0:b4:d7:16:4e:47:15:59:00:cd:12:19:2d:33:
59:75:c5:f3:d0:b4:c7:59:44:6e:2b:10:01:a5:59:7d:d2:4d:
7e:43:11:46:1e:6f:bd:31:9d:1a:4c:b4:85:ab:c6:b2:da:04:
6e:53:72:52:98:53:9b:09:74:cf:0b:62:a0:92:9b:06:02:e8:
7e:d7:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:13 2024 by rpki-client on console-fra.rpki-client.org