Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
File: f_Igq9YH41e_slwvf9SPzGq2a4g.cer (raw, json)
Hash identifier: vunC1J+Xhl94bGr6DU3II2BGOtJwoVoPf5slBXGDDAg=
Subject key identifier: 7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED42505F584AA3DC6CE0444BFB72BE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.247.139.0/24
IP: 2a11:8580::/29
Validation: Failed, certificate revoked on Tue 05 Sep 2023 09:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:25:05:f5:84:aa:3d:c6:ce:04:44:bf:b7:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:a5:63:40:5b:36:20:c4:20:c3:17:26:73:
e4:6b:97:29:54:09:9f:f7:f7:ed:11:4c:24:a8:e2:
94:84:0c:37:af:4c:b0:e2:db:89:72:99:83:36:17:
70:50:1c:2d:4b:9f:a6:04:31:99:86:d4:7d:9e:3e:
19:a0:99:da:6f:45:d6:22:50:22:70:68:81:85:0b:
09:5c:b1:46:17:66:39:66:e1:b0:c8:e8:01:3c:6c:
97:8c:c0:61:0f:94:7c:d9:9e:d2:ac:de:77:22:63:
61:cb:3b:2d:1a:b2:21:1f:25:ee:41:a4:68:bf:e9:
65:8f:33:e8:17:fe:74:6d:20:d9:56:90:37:12:25:
45:58:70:0d:48:8f:11:5c:3e:33:f3:76:58:f6:64:
db:0c:a7:fe:88:d8:3a:46:94:2b:70:a0:22:1a:30:
4b:97:97:b1:1f:75:dd:61:42:ea:50:97:75:50:69:
b5:08:80:51:0e:8d:2b:a7:e8:82:82:62:3a:49:db:
3c:4a:79:b6:24:69:dd:62:5a:f2:24:ec:1d:5c:3a:
24:53:e6:cc:aa:a4:c3:e1:62:a3:ad:84:9a:d8:db:
2e:8c:74:f0:fc:0f:2e:3e:26:90:b5:0a:f8:d2:4e:
6f:ce:7f:8f:45:ad:36:04:12:72:a5:8e:00:fb:87:
35:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.139.0/24
IPv6:
2a11:8580::/29
Signature Algorithm: sha256WithRSAEncryption
b0:f5:46:d8:3c:70:4e:cf:ba:e7:3b:5b:a8:b3:d7:ba:e2:c5:
33:64:0b:87:cd:9e:db:5d:7a:7c:65:b2:2d:af:4b:b3:11:c8:
25:49:7e:05:4e:7b:bf:11:8d:81:0f:43:bc:a5:37:ff:ac:0d:
17:51:53:6a:51:8b:1d:e3:a1:29:7e:43:af:c0:4e:19:d8:22:
74:af:d9:4c:2b:33:ec:80:f7:9c:cb:89:62:f3:74:77:37:4f:
3a:54:85:89:6f:cc:08:0b:71:50:74:8c:3b:50:88:eb:4a:d9:
be:9b:49:df:4a:8c:ee:49:41:12:3d:af:a8:66:02:06:6f:c7:
17:1d:e9:7f:f5:65:d2:d9:c0:a8:f8:9a:73:53:4c:5a:ce:d2:
40:14:68:8e:fd:7e:69:75:1b:89:6f:51:b7:4d:3f:d5:3f:8d:
c1:0b:b5:98:9e:5d:65:21:47:e0:3a:82:42:e0:8f:66:95:e2:
be:c2:17:b2:35:4d:52:ba:70:a7:01:a8:ca:9c:a8:63:a6:ed:
6d:27:64:08:8d:84:4e:22:fa:0c:98:78:11:f0:bc:73:0b:bb:
e8:e8:78:f6:b2:db:48:a4:e5:23:2f:16:b3:1b:2f:26:e5:21:
c1:8b:1b:d4:c9:a5:12:4e:04:ae:f3:0b:31:9b:7c:3a:d4:ee:
83:3e:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:46 2024 by rpki-client on console-ams.rpki-client.org