Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd3cSTfLu9cu9BnvLF_FNpCyOuY.cer
File: fd3cSTfLu9cu9BnvLF_FNpCyOuY.cer (raw, json)
Hash identifier: rmxo7IdaoU7E8yH1SMDwFtpM1EN6FdmngMm+miK8Egc=
Subject key identifier: 7D:DD:DC:49:37:CB:BB:D7:2E:F4:19:EF:2C:5F:C5:36:90:B2:3A:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018964782819788D55076EC55AC91D2D7692
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/fd3cSTfLu9cu9BnvLF_FNpCyOuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 15:29:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.73.244.0/24
IP: 2a11:1580::/29
Validation: Failed, certificate revoked on Mon 21 Aug 2023 06:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:28:19:78:8d:55:07:6e:c5:5a:c9:1d:2d:76:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 15:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ddddc4937cbbbd72ef419ef2c5fc53690b23ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:14:7a:ea:3c:5a:6b:16:d9:13:6f:ed:6d:
cd:cb:c1:09:fd:67:f3:4f:6d:67:7a:b5:9f:db:c1:
7f:c3:4b:e6:5a:8d:bf:22:ac:19:3d:d5:c6:59:73:
03:98:8a:d6:01:7b:2a:80:d5:9a:33:c9:86:18:5f:
90:d5:41:9b:99:44:aa:07:ca:ff:52:8d:ba:e2:bb:
6c:c4:7e:f3:4b:d3:8d:c8:d6:1e:e6:91:af:0a:9d:
89:91:94:b7:17:1e:97:ec:f3:53:6e:52:70:8b:20:
64:2f:82:fb:c0:89:46:fc:cb:ba:84:7e:76:a0:a4:
d1:9f:26:8b:12:6e:95:f3:c8:ea:ec:60:61:f5:df:
b7:37:84:bc:f4:45:25:eb:6d:a8:ad:89:c2:8d:30:
c0:53:7d:63:a4:01:e5:37:b4:cc:14:a8:fe:ff:1b:
a5:11:96:dc:f9:b0:9a:cb:c3:b0:6f:e6:0e:26:1c:
4c:7e:53:2a:21:95:ac:1a:f0:95:fb:34:58:b4:d9:
cd:94:6f:fd:e2:17:22:f7:be:d5:07:7a:c7:a2:56:
8b:e5:0e:56:bb:9d:01:ae:d2:73:f7:a8:16:cd:dc:
4d:e3:68:d4:2e:03:ca:17:98:56:a8:40:9c:05:2d:
87:a8:58:d5:75:a6:96:e8:c8:60:df:51:c0:8c:c4:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DD:DC:49:37:CB:BB:D7:2E:F4:19:EF:2C:5F:C5:36:90:B2:3A:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/74ddfd-8a91-4448-aedc-b220e1a794ca/1/fd3cSTfLu9cu9BnvLF_FNpCyOuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.244.0/24
IPv6:
2a11:1580::/29
Signature Algorithm: sha256WithRSAEncryption
8c:34:25:d6:66:1c:2c:c5:32:fb:11:02:02:bc:6b:69:0f:0a:
ab:21:9c:20:16:ff:4e:e8:d2:71:dc:f6:d1:4f:0b:dd:6e:bd:
92:5a:2c:2d:7c:6b:7e:fd:5a:ca:f6:ca:40:68:ac:fa:e3:11:
df:33:42:ad:e9:29:8a:4d:8f:a2:60:55:bc:0e:24:7b:3e:c3:
2c:1d:ff:17:a5:58:68:70:5d:6c:fe:65:39:b7:db:b0:99:d5:
05:42:f5:a1:cf:b5:9d:c7:59:7a:53:53:f7:34:f9:20:12:9a:
28:66:95:bc:6a:fb:4b:68:f9:71:6c:92:a6:f8:53:e2:c6:94:
1c:a4:83:78:97:bb:72:a2:70:af:8e:0d:6f:cd:4e:aa:bf:12:
46:2e:dc:92:91:ab:02:9f:c8:d5:b0:8c:f0:45:e8:23:35:c0:
14:ca:ab:b2:df:7e:c7:2f:e2:89:d1:55:b2:ca:e1:ab:a1:95:
76:95:1a:73:56:5e:42:b6:ca:f1:47:bc:08:bd:8c:06:1b:13:
e9:a5:9d:09:a6:a1:c0:3d:ac:36:c9:e1:2e:7f:60:85:c6:50:
40:42:f4:c5:c1:3b:4d:71:0d:84:a3:03:b3:ff:9f:48:6f:09:
15:27:bd:8d:4b:cd:8e:6d:90:ac:2f:be:97:73:c4:54:32:55:
fe:70:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:31 2024 by rpki-client on console-ams.rpki-client.org