Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer
File: f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer (raw, json)
Hash identifier: pOub8JlfZPJNXUbKZGDBwkTJ60mUGnVkh/fRbUDrAzc=
Subject key identifier: 7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41CEAA52459DB5AD1419A4ABC17A95
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.190.125.0/24
IP: 2a11:7780::/29
Validation: Failed, certificate revoked on Mon 28 Aug 2023 09:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:ce:aa:52:45:9d:b5:ad:14:19:a4:ab:c1:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f7a8875274853b0707c36501152f890588cdb21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c3:fa:e8:bb:1f:c6:d9:7e:bb:2f:f1:a0:dd:
cc:40:dc:fe:23:52:50:0d:94:f5:3f:a8:8f:66:72:
68:7a:13:09:c8:3d:5a:2d:ae:02:e2:75:0b:94:c7:
69:ed:f8:15:3b:b3:97:89:95:ac:6f:a6:c8:62:e7:
42:bb:da:8f:1c:df:87:16:59:81:6b:d0:6d:d6:2c:
a4:40:7e:95:7b:d4:e2:24:1f:c4:a5:b1:c5:26:15:
79:41:5c:88:98:9b:00:17:43:f1:20:a8:3a:96:4c:
61:6a:91:16:ff:e1:6f:a9:cd:34:a6:86:a7:40:86:
94:05:41:ac:db:f4:9b:e6:fc:04:80:b0:ac:72:ab:
c8:00:5c:56:cd:81:3c:9e:ff:e5:c0:49:9d:08:8d:
cc:2b:2d:9c:72:f9:a7:19:1a:be:fb:d1:4b:99:37:
3a:36:8a:9b:97:90:aa:4c:6b:52:2e:ff:1c:dd:c9:
5a:c8:91:91:8a:ee:42:2c:1e:8b:a5:f8:0f:58:e3:
55:04:d9:84:8b:77:49:5d:5f:7d:71:3c:0f:33:ac:
10:3e:0f:b8:e5:73:9e:69:6e:a1:6b:28:da:e4:2f:
81:4c:ff:55:05:54:14:d6:0d:43:ae:32:cd:8b:c3:
5d:b8:9f:e5:2a:2c:81:88:22:cc:00:c0:58:14:6b:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.125.0/24
IPv6:
2a11:7780::/29
Signature Algorithm: sha256WithRSAEncryption
15:49:d4:b5:33:18:41:56:f1:f6:56:89:4e:8b:d9:6d:11:1d:
84:b5:8a:d1:a9:e9:aa:1f:57:89:84:5c:a4:92:d9:96:e2:52:
c4:84:94:2e:82:24:85:58:76:e4:3d:42:0c:83:8f:bc:d0:fe:
33:24:ea:86:45:6c:1d:1c:a9:2a:2f:94:2d:18:0f:e8:34:8e:
dc:49:3c:f2:cf:b2:5d:a4:78:f3:16:8d:68:7a:ee:ba:64:e2:
8f:8c:45:be:1e:6a:95:93:b8:73:42:1a:2d:ec:c3:7a:cc:26:
48:75:63:a9:34:8e:c0:de:e4:68:cf:9d:81:c9:f7:df:05:69:
ec:2b:d5:47:35:07:65:f4:25:26:08:e0:d1:66:c4:66:58:aa:
7c:3d:7d:59:db:aa:ae:be:bc:96:a3:2d:ec:22:6d:89:b0:d4:
a3:a3:1d:e7:4b:c3:e7:3f:c7:0f:6a:7b:22:b7:a2:5f:76:7a:
d4:60:56:84:df:e5:7b:91:11:3b:94:58:9f:2c:09:f9:a2:d1:
1f:b8:43:5e:f5:9b:5a:44:b9:58:e0:28:86:ab:8d:9b:f1:09:
c3:db:88:b7:91:f2:50:f0:e8:f3:fb:c9:1a:27:84:43:cb:90:
2c:a0:55:9d:80:5a:42:d5:30:1d:91:3f:56:e8:95:83:f6:8a:
ed:97:fc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:33 2024 by rpki-client on console-ams.rpki-client.org