Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.cer
File: ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.cer (raw, json)
Hash identifier: YnyF+PmfRENdmT1sMIyHeR1vGXwp/8FwrlEi3X9HmxI=
Subject key identifier: 78:F8:E2:46:CF:C2:F7:E1:7D:27:08:79:AB:93:B3:DE:87:0C:DF:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAAF6004C4F2A29CB7CD86B3913CB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.251.0/24
IP: 2a11:b340::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 10:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:af:60:04:c4:f2:a2:9c:b7:cd:86:b3:91:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78f8e246cfc2f7e17d270879ab93b3de870cdf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:62:85:79:ae:49:a4:ab:e1:79:1d:c4:4d:
2f:c2:bc:54:5c:87:4b:25:aa:29:aa:ce:b0:fe:a4:
8b:8d:18:fc:81:23:c0:d3:df:77:d0:1d:54:5c:f0:
85:74:5e:f5:14:13:b0:ad:eb:ab:28:a3:2c:4a:6f:
52:75:b5:65:08:36:82:e5:38:5c:48:27:3e:a6:f4:
59:c1:41:45:fc:bb:67:d3:7e:9c:a7:68:cd:91:11:
af:d1:ee:00:99:30:99:8d:22:cd:9e:eb:9a:82:ab:
5c:d7:00:6b:22:93:a2:bd:26:cf:23:f9:71:3c:98:
3a:c2:7b:2d:66:54:2a:4c:b3:86:3d:90:5e:75:60:
cf:00:25:d5:2e:1e:60:04:a1:4a:5a:61:2c:f9:38:
13:96:55:2d:07:4b:fd:73:9f:86:fa:f5:1b:54:8c:
df:7f:f3:4c:17:83:a7:37:ae:82:bf:f9:d5:d0:4e:
8e:19:7a:2b:b2:0b:3e:11:bb:c4:56:bd:99:5f:16:
6b:33:54:35:3b:78:e9:1f:89:22:04:8a:56:56:3e:
ec:3a:ba:f8:a2:eb:f4:8f:8f:6a:f5:88:8a:d8:3e:
eb:f9:a3:21:5a:9f:bf:81:d1:9a:1f:c3:86:19:c4:
1c:da:86:8d:91:88:63:ef:2b:d2:97:d7:f5:ab:4d:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:E2:46:CF:C2:F7:E1:7D:27:08:79:AB:93:B3:DE:87:0C:DF:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f61617-ef2e-4831-be5a-882856677eba/1/ePjiRs_C9-F9Jwh5q5Oz3ocM31Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.251.0/24
IPv6:
2a11:b340::/29
Signature Algorithm: sha256WithRSAEncryption
2c:dd:e3:9a:20:04:f7:69:b6:33:3c:88:37:8e:fc:03:fa:62:
ff:ce:16:9d:f5:7e:be:01:07:47:bf:54:2d:4e:cc:4e:b9:8b:
42:3c:f1:d1:f4:8c:99:19:98:1d:3e:e6:d8:e8:2e:5c:f9:75:
16:c7:1a:71:58:ec:cc:26:5b:e0:3d:90:d2:21:83:da:55:e7:
0a:0c:5e:79:a1:1b:76:72:3e:48:ed:91:05:76:d8:2b:4d:c0:
35:b2:45:3b:79:ea:5a:78:ca:6b:2f:4b:f3:48:f1:72:87:4f:
f0:9b:e8:93:8e:23:ce:e0:c4:34:31:c8:a4:98:bc:71:fe:2d:
c5:2c:20:97:60:99:5c:74:c4:a9:94:18:8a:1f:99:01:36:fe:
8d:2c:ca:e4:c2:08:c7:1e:96:35:d2:66:68:08:da:e1:ca:a8:
c5:04:28:77:9c:63:41:18:88:53:97:33:38:f1:f9:a0:96:d9:
5d:9f:93:af:1e:54:06:0f:03:e7:58:a3:1c:fa:21:7a:c2:88:
45:3a:d5:ad:24:ff:23:d4:dc:4d:f4:08:4e:9b:07:8d:c5:13:
c0:9c:ca:5e:bc:4e:7a:b9:46:0b:d6:b5:ff:8c:24:8d:54:71:
a2:8b:1a:98:e5:70:1c:02:fd:75:b3:33:c0:36:ff:87:64:b7:
d3:45:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:36 2024 by rpki-client on console-ams.rpki-client.org