Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
File: eQZczx6-VVs3UnF-WVwnW8rQC04.cer (raw, json)
Hash identifier: ZMyD/4ByebpUm1bftaSFp/NMXsBSTxG9RqDb/53l8Ss=
Subject key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94ABF59CDE7E02782A0CC606E8551FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.59.6.0 -- 194.59.9.255
IP: 2a0f:1cc0::/29
Validation: Failed, certificate revoked on Wed 24 Apr 2024 10:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:bf:59:cd:e7:e0:27:82:a0:cc:60:6e:85:51:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:ee:e0:cf:cc:11:81:87:cb:30:f0:52:b5:
39:36:5f:27:50:e2:24:0e:f9:a5:9f:5a:2f:c8:8a:
06:fa:b7:9e:3f:bf:da:8c:1b:90:b8:b7:0c:88:23:
94:a9:c4:57:3a:25:bb:72:a2:26:e7:20:ea:3a:15:
17:4b:a4:34:a0:3f:a2:60:36:ed:82:68:e6:ab:b4:
89:76:5a:a7:a4:04:36:0a:a8:a4:a3:23:01:5d:a2:
53:b6:f0:b4:dd:df:47:f4:04:33:68:30:70:75:81:
08:b2:d9:9e:07:81:66:e7:48:21:e2:4c:a6:0c:f8:
0b:b9:dd:96:1d:fa:7a:3d:83:fe:e6:82:0e:5a:e6:
42:56:2e:e5:be:33:1f:0f:62:85:62:d2:7a:fa:2f:
5a:9a:90:5e:08:9b:92:cb:ed:be:f0:d1:e7:bd:da:
ce:31:26:75:96:ac:b2:3f:57:90:89:2c:8c:8c:19:
7c:f7:db:bb:45:99:f4:32:0f:ab:57:73:51:1d:ed:
a0:e9:4e:f1:c5:67:42:56:a6:c5:20:d0:4a:12:8a:
a1:88:bb:30:54:1c:e0:f4:57:b0:6e:50:f2:60:01:
70:2f:52:55:2b:a6:6e:54:6a:a5:ca:91:2c:f1:4a:
1e:8d:9d:a8:28:75:cd:af:ef:44:15:62:df:f4:7e:
49:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.6.0-194.59.9.255
IPv6:
2a0f:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:2e:1f:fe:95:10:8d:45:f1:a3:24:a3:a6:76:5b:eb:9d:47:
2a:2d:89:b2:dd:44:51:ac:14:43:21:08:4c:b4:3a:38:b6:fc:
50:83:a4:27:5d:a0:90:80:1f:fd:5c:e9:55:a6:17:c9:9e:d6:
32:f9:0c:8c:a1:50:df:54:24:1a:3d:bc:6e:ab:54:ae:f4:f6:
10:58:00:9b:fc:a7:cf:f6:c3:e7:fe:ed:70:97:88:a7:31:fe:
83:f9:1a:f7:98:bd:e9:18:27:c2:76:3a:2e:f1:86:8d:55:10:
d9:6b:8a:29:9f:e1:91:32:31:83:6b:9c:c5:47:de:d2:74:6a:
bd:47:20:48:bf:25:ee:47:79:66:c2:0e:f2:4c:81:87:8d:8c:
42:7a:64:d7:3f:20:81:b1:bc:1b:c3:f7:b4:03:7e:59:a7:dd:
4f:5c:07:b0:94:ab:a4:b2:17:40:b9:84:c2:78:43:b6:a8:3e:
f4:d3:6d:88:a3:68:83:b1:51:d4:0c:73:3e:73:af:eb:16:13:
02:41:ab:5e:91:6e:aa:b8:6b:eb:68:dd:a7:b3:e8:12:b6:83:
1e:98:9a:7c:5b:37:d8:ea:32:d1:00:60:17:59:90:ec:43:58:
07:0f:c3:77:9b:6c:ba:22:9b:58:df:f0:5c:35:4d:a7:71:b3:
57:ed:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 13:50:29 2024 by rpki-client on console-fra.rpki-client.org