Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
File: fb6QcZOb-jvPfmxvvlTwBNHklZg.cer (raw, json)
Hash identifier: SrnfMRCMB1q2Qo4TqNQjp5SpYmofxZTCOSOKXo3KtM0=
Subject key identifier: 7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F2338F777F24935FAD11867C38921
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.96.0/24
IP: 2a12:8300::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 15:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:23:38:f7:77:f2:49:35:fa:d1:18:67:c3:89:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:a5:5c:bf:e5:fc:d9:3f:6c:6d:85:4e:40:
82:7d:df:4d:7a:4c:85:5a:cc:8e:f5:7a:1b:e8:e9:
0b:f4:7c:99:2b:28:5f:f6:04:30:3d:a1:8d:c6:80:
d4:d6:1b:53:89:59:c4:ea:ff:8f:c4:f0:34:7c:c1:
bf:0d:e9:22:47:a3:48:30:bb:d5:89:a8:0f:f6:d5:
17:c7:d0:b8:95:99:fb:96:6f:6a:33:68:f3:8c:17:
de:44:4e:7d:bb:bb:52:29:ef:0d:25:dd:95:e8:e1:
5d:44:d5:0f:8a:0c:1d:84:77:85:e5:c4:4f:bf:90:
16:32:5f:81:85:ea:d2:de:73:aa:03:4c:a3:c8:e1:
59:8d:74:92:79:8c:0a:d3:1f:2e:9f:5c:34:9f:eb:
8a:c6:de:39:ae:ea:5f:41:95:5a:33:69:0a:48:ff:
fd:0c:b4:39:0c:db:0b:71:27:03:9b:ce:3a:b0:ec:
8a:b3:eb:ac:2b:a9:e9:27:36:ca:eb:7d:0f:69:65:
26:80:63:97:aa:01:ea:b2:f5:ed:38:22:6c:bd:cb:
95:0f:d9:31:98:35:5b:0c:cb:33:d1:16:6c:38:05:
67:f9:8c:5c:a3:f0:2d:95:ba:f9:6e:d2:f7:e6:56:
b7:d5:02:39:93:a3:4b:44:00:b5:91:d9:91:c5:dd:
04:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.96.0/24
IPv6:
2a12:8300::/29
Signature Algorithm: sha256WithRSAEncryption
b0:e6:4e:6a:12:70:17:b6:bf:48:85:26:19:7a:32:11:6a:4b:
06:f4:d8:15:d8:4b:4f:4e:03:3a:91:7e:1e:44:db:f7:1d:e5:
40:d3:94:01:17:60:12:81:b4:16:54:e7:c3:58:59:bf:55:a0:
5c:48:31:c5:81:3d:5a:42:65:e0:cf:ea:bd:45:61:2c:68:f1:
62:12:8b:5f:61:e1:59:e1:42:4b:f5:99:ab:43:a2:be:f0:74:
66:2b:93:a3:ae:e3:29:1c:ef:c1:31:06:2a:e4:d1:ea:69:a5:
6d:ff:09:9a:e4:81:9e:9b:87:4d:8e:c1:a6:44:75:3d:fe:4e:
ef:af:9c:b8:49:55:1e:30:e0:12:ff:cc:48:2b:37:00:67:60:
3d:22:ab:2e:2b:89:f7:e4:8c:a7:91:0c:b2:d4:2a:33:8f:6a:
13:46:7b:02:77:c7:f6:49:10:84:af:29:e2:7d:cd:e2:04:9e:
26:b4:03:3a:f0:90:1a:1f:86:15:05:7b:51:c1:6c:de:58:57:
f5:c8:54:a5:22:1e:e9:a8:2e:ff:5e:82:d6:7f:ee:d5:f9:7f:
01:f1:cc:b6:a0:12:d6:d7:cb:9b:58:58:8b:db:4e:30:d4:2a:
f6:f3:31:49:34:b9:c6:8b:74:e7:d8:27:5e:af:13:40:73:49:
9c:07:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:05 2024 by rpki-client on console-ams.rpki-client.org