Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ezApJF-55OWbRO1bzYSFO7qV5qc.cer
File: ezApJF-55OWbRO1bzYSFO7qV5qc.cer (raw, json)
Hash identifier: 9bMvRrSYiPkuFZvMbdZhakQd8TGiUAEQSn3GoN3shAI=
Subject key identifier: 7B:30:29:24:5F:B9:E4:E5:9B:44:ED:5B:CD:84:85:3B:BA:95:E6:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC4E009030F4C450B51C0BCCA06FC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/ezApJF-55OWbRO1bzYSFO7qV5qc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.228.130.0/24
IP: 2a12:d480::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:33:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4e:00:90:30:f4:c4:50:b5:1c:0b:cc:a0:6f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b3029245fb9e4e59b44ed5bcd84853bba95e6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:20:64:42:ae:c6:0d:a2:a5:aa:73:b5:20:
62:14:2b:a5:39:5c:2f:9f:08:45:f8:42:5a:7f:66:
cb:61:b7:b1:ea:30:df:4b:6e:b9:bc:d3:50:d2:f0:
e3:52:41:f1:2f:6a:68:89:a9:f2:72:35:1a:d4:38:
fd:b5:a5:bd:67:f6:9e:d5:c7:99:66:76:de:ec:ff:
c4:46:3c:ce:04:ad:17:d2:66:00:0f:e3:f4:c0:9d:
4c:52:08:35:6c:ba:0b:2d:38:8f:b9:ed:5a:fd:8a:
14:94:f6:6f:9a:22:4a:5f:0e:56:71:5c:07:c6:ce:
d2:9d:9d:61:ad:7e:0a:e6:13:2a:f1:38:58:23:e4:
04:d6:88:8b:4a:32:30:f3:42:f2:1f:3a:55:dc:8c:
42:6a:1e:0c:c7:6f:24:60:86:97:ca:52:f0:ea:f8:
0b:dc:d0:4a:10:e1:69:0c:d7:d4:11:da:73:cc:bc:
53:14:b5:c7:ab:38:27:d2:7d:2e:8f:9f:dd:84:de:
f2:56:c0:31:a7:37:50:a8:cb:c5:4b:d0:86:7c:9e:
7f:8f:64:47:14:4f:f0:ac:bc:a9:48:f0:cd:c3:0a:
bc:91:70:6a:21:29:6d:9f:f1:04:41:0f:ab:49:29:
f4:a0:20:03:be:54:9d:bd:c8:13:63:4b:25:66:86:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:29:24:5F:B9:E4:E5:9B:44:ED:5B:CD:84:85:3B:BA:95:E6:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ef68c-aef7-4743-afd0-34d6dcf0ddb8/1/ezApJF-55OWbRO1bzYSFO7qV5qc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.130.0/24
IPv6:
2a12:d480::/29
Signature Algorithm: sha256WithRSAEncryption
22:18:5d:76:c6:10:2a:e0:a6:e8:10:4d:92:21:f5:55:ee:72:
63:fd:82:ab:99:a0:c7:31:91:11:16:70:fa:e9:92:77:7d:e8:
05:27:0a:2a:0e:11:48:9b:b7:11:84:ed:f9:e4:e2:ba:44:ce:
b5:ab:42:56:94:c9:da:ff:c7:eb:a7:c0:ac:cd:38:d7:ac:1e:
75:65:5e:2b:c9:67:85:2d:b2:95:21:2c:16:09:af:17:70:b7:
d8:2c:58:10:22:db:c4:a4:0b:72:53:78:d8:65:66:72:e1:bb:
fd:59:95:3d:87:d0:87:c4:8e:a4:8d:b9:83:6a:cc:c2:d1:de:
0d:c3:84:5f:9b:a1:76:c4:7c:71:d5:1f:8e:66:d1:df:97:c3:
44:33:97:cf:e8:0b:d2:69:d8:9e:90:b6:69:77:21:43:0c:7d:
c1:02:c4:07:62:26:5b:2f:31:35:5e:1a:35:3d:8d:68:e5:22:
0a:e9:80:43:d7:49:45:d7:9d:dd:e9:a2:2f:5c:9a:c6:fa:1d:
3c:30:3b:9f:f7:5e:ce:ad:c5:44:ae:41:1e:bb:ad:27:2b:43:
09:13:85:87:9b:32:23:2f:93:b0:69:de:2d:57:e5:34:2e:da:
e1:5d:a8:d2:86:c8:ae:3a:1b:dd:07:bb:1f:f7:d5:35:40:68:
9f:88:df:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:03 2025 by rpki-client