Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer
File: f_pRq-o-H0Ij9UDvDYW43Znui_Y.cer (raw, json)
Hash identifier: agVpLOLqQfTR1viIoCHYQ4rc0qZzIAuco8zZ+Xchsuc=
Subject key identifier: 7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FA6CD72E8725DD3870A2C7B9ABE5B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.114.33.0/24
IP: 2a11:7440::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 10:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:6c:d7:2e:87:25:dd:38:70:a2:c7:b9:ab:e5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ffa51abea3e1f4223f540ef0d85b8dd99ee8bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:19:f2:b1:3f:f8:03:5a:49:a5:2b:57:d6:
11:f7:c1:88:08:76:b4:96:65:96:cc:cd:79:82:e4:
44:c4:c6:de:7e:3f:01:a9:52:db:f5:23:d8:5c:1d:
07:07:bd:b9:75:fc:eb:c1:ec:04:53:da:2b:5f:de:
c0:5f:b9:0b:d5:ad:cd:bb:81:bd:18:ef:4c:a8:ae:
a9:62:4a:b9:1d:7a:69:d5:a9:f1:aa:48:15:b8:78:
33:9a:38:62:0b:32:d4:bf:f6:c9:4d:e9:4b:40:fb:
12:f4:4d:84:a8:48:66:5b:df:30:68:ab:1e:15:74:
13:a9:ce:99:1f:4d:54:eb:1a:2f:be:11:58:5e:64:
27:0d:ae:2b:c2:ee:f9:ba:7f:fb:cd:14:0e:99:38:
fa:ca:70:5a:00:24:d1:fe:f8:a1:46:e7:fb:fd:b7:
4f:78:6e:60:05:f6:b6:6c:30:69:e5:2e:b1:98:f9:
4f:8c:0d:00:82:36:68:32:9b:b0:6d:2f:4d:cd:e5:
0b:f3:f1:0d:ab:d4:d5:45:ca:0f:c3:4c:8a:65:b3:
99:91:ec:85:63:fd:cd:1e:8b:07:5b:ca:31:94:ef:
e6:c2:8b:34:02:17:bf:f7:ff:5b:22:65:70:ec:95:
3b:d5:db:e3:8e:e9:c7:75:6a:76:02:02:09:79:a9:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:51:AB:EA:3E:1F:42:23:F5:40:EF:0D:85:B8:DD:99:EE:8B:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c1615d-d56f-4ba8-b0f5-1fc42e79eb07/1/f_pRq-o-H0Ij9UDvDYW43Znui_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.33.0/24
IPv6:
2a11:7440::/29
Signature Algorithm: sha256WithRSAEncryption
80:e1:e8:1c:14:da:6e:64:3a:78:ad:76:28:a2:dc:10:69:97:
d4:6d:4f:ca:24:88:fb:59:26:1b:44:82:35:71:ea:e4:f0:ae:
ce:08:08:04:ef:6e:01:1f:93:bd:c7:10:4d:f5:60:24:90:eb:
68:91:07:dd:4a:0f:a0:2f:0b:f2:04:4a:2b:cb:d6:7f:a2:59:
2d:cb:58:5d:77:c3:4f:18:17:31:1b:50:3f:1a:64:f1:e8:ef:
55:b0:56:43:a8:60:1b:0b:9e:b8:df:e3:52:f2:84:c1:5e:f8:
bd:30:2f:e1:71:6f:b4:c5:46:2c:84:f9:dd:ec:7f:e0:d3:c3:
ca:ed:95:02:ea:17:42:e4:0b:a8:2c:6c:d6:86:40:b8:fb:75:
2f:0d:4d:0c:ce:7c:43:95:fc:b5:93:e6:36:af:c9:5a:aa:1f:
3c:e9:f6:7a:18:ca:35:24:5e:a3:42:82:5b:71:a1:fd:8f:ff:
33:4d:a3:b2:00:7e:21:af:b6:af:fe:32:25:6b:fa:8a:2f:43:
6e:8d:fa:e1:e6:0a:f8:4b:b4:af:47:33:7c:1b:72:a5:e2:dd:
5d:46:94:16:03:87:c0:a9:79:03:9b:60:01:d1:6e:a9:d0:0d:
80:90:fc:af:1d:33:c3:28:b7:fa:94:45:49:24:ad:e2:46:56:
78:b4:f3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:46 2024 by rpki-client on console-ams.rpki-client.org