Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fED4xC07TCEUFd4Urhqxe3evM0s.cer
File: fED4xC07TCEUFd4Urhqxe3evM0s.cer (raw, json)
Hash identifier: bjXSDUHZCi0ahSc71EmLoNmjF3VnAZC8e+Aj3tmtJ4c=
Subject key identifier: 7C:40:F8:C4:2D:3B:4C:21:14:15:DE:14:AE:1A:B1:7B:77:AF:33:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D7121C226857FB5782C4E38455484F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.103.188.0/24
IP: 2a11:44c0::/29
Validation: Failed, certificate revoked on Mon 11 Dec 2023 13:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:12:1c:22:68:57:fb:57:82:c4:e3:84:55:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c40f8c42d3b4c211415de14ae1ab17b77af334b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:95:12:df:f9:67:64:2b:4c:96:3c:ee:93:ec:
48:c3:46:49:81:d6:6b:29:1b:ca:d6:ff:34:60:91:
e0:3f:15:57:09:57:e3:b6:59:4e:7f:ae:97:8e:4a:
5f:50:f2:d3:e8:9d:d3:af:e6:96:3b:b2:4e:a7:46:
68:3f:46:3d:b9:ac:67:5c:77:13:fc:79:df:d7:2e:
53:88:54:b6:18:99:ed:98:22:8e:0a:2d:96:e9:c8:
53:e1:cc:ba:5a:e9:65:32:46:fb:c8:e9:3e:5e:b8:
76:e6:78:6a:51:6c:88:ab:71:0a:65:ef:e5:b4:e8:
d1:58:7e:43:76:db:5c:33:8f:46:a6:f5:84:b3:43:
16:58:5b:4e:4f:8a:f3:6d:99:3a:26:2e:c7:75:ee:
3e:05:be:b0:42:39:69:3d:01:62:16:37:d5:09:b7:
00:b1:12:01:8c:45:d0:9e:ea:36:38:17:ae:0f:21:
48:23:e7:e7:a4:97:50:c5:ee:5b:05:57:56:30:65:
08:ae:1a:90:a3:1c:24:64:ea:e6:3f:9f:7b:01:e6:
a7:aa:69:e9:b9:03:c9:dc:c8:c3:d8:18:d0:36:a4:
89:69:cf:f5:d1:22:e6:b9:9a:61:8b:18:77:b3:45:
10:85:8d:20:15:c5:c1:2e:c6:e0:25:ea:28:c5:2a:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:40:F8:C4:2D:3B:4C:21:14:15:DE:14:AE:1A:B1:7B:77:AF:33:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7679d8-a5d5-43a2-8ed9-145683922548/1/fED4xC07TCEUFd4Urhqxe3evM0s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.188.0/24
IPv6:
2a11:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:e3:6b:af:35:9e:2d:ea:ba:ec:b4:dc:88:2b:fa:2c:83:87:
28:22:27:9f:84:d8:ce:b9:c8:a1:6c:29:2b:3f:6b:60:7c:28:
c1:36:b5:fb:d5:8b:2f:3d:6d:5c:5d:61:20:eb:9f:fa:fb:d0:
ba:96:f6:f6:dd:47:ce:b3:85:76:05:73:6d:61:04:ea:5d:3c:
d9:a9:3a:bc:bb:70:24:8c:4f:10:48:87:be:c0:58:4c:b5:f1:
88:02:19:25:26:23:18:b4:e8:c6:91:e3:af:22:70:9d:b3:4d:
6b:fd:04:40:5b:a6:d1:93:f0:70:d8:67:fb:e6:bf:ba:aa:31:
70:8a:47:90:74:c8:e5:7d:18:06:16:08:96:06:79:12:99:3b:
34:e4:53:ac:23:94:61:c7:a1:c0:56:04:b9:78:bb:d3:58:68:
3b:6f:bb:fe:26:12:e9:88:c5:c1:e1:28:cb:c8:75:16:a3:74:
76:dc:bf:30:d1:4d:19:dc:89:92:6f:2a:b0:db:73:7c:a9:df:
9b:00:d6:f3:7e:be:5b:14:42:a7:10:9d:af:7b:64:49:03:ed:
76:27:b2:53:11:d2:40:2b:9f:bf:3f:f5:74:72:40:96:53:3e:
df:97:96:d5:5a:4f:81:03:31:07:93:e6:86:48:16:64:9a:ef:
04:3e:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:25 2024 by rpki-client on console-fra.rpki-client.org