Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
File: fgzO9rwOeqzd0g2vWKYAjkqANag.cer (raw, json)
Hash identifier: kf7Bx/tLeRa6ivC8v33SlLB7gKkYhlDWTwopL01BzVI=
Subject key identifier: 7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB07041C355759ADD063C12E542BE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.93.119.0/24
IP: 2a11:1240::/29
Validation: Failed, certificate revoked on Fri 06 Oct 2023 11:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:07:04:1c:35:57:59:ad:d0:63:c1:2e:54:2b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:22:ee:11:15:53:28:1d:c7:b4:96:f1:0d:
59:36:75:25:af:c2:c1:52:4c:72:2a:2e:dd:02:db:
e9:f5:48:8d:f2:5e:1d:f8:3b:66:f9:db:06:e8:38:
b3:a6:c5:6e:08:7b:b4:6d:68:d4:8f:cf:35:24:11:
af:9b:b5:c6:52:dc:d4:93:aa:28:ef:a6:3c:58:1a:
cb:cf:8a:84:f5:23:9d:08:8c:43:4f:37:d4:e9:84:
1c:e9:3a:ad:d1:c0:24:bd:06:ad:2b:54:b9:cf:e5:
32:80:3d:e3:1c:ed:c1:e7:4b:42:11:44:3e:0f:1c:
05:84:2d:11:e5:d9:35:4b:74:cf:12:e5:fb:73:07:
a3:95:1d:ce:74:42:97:8e:70:35:b7:98:f1:f4:69:
83:8c:0c:ca:e8:cc:c6:13:5c:bf:a4:83:0f:f9:86:
56:b8:67:40:28:b2:b7:85:64:f6:9d:4b:34:69:66:
a5:41:ba:83:18:8f:a4:87:08:cf:a2:12:82:87:e2:
6d:56:19:ab:84:b3:f0:e0:12:24:93:eb:4a:5c:22:
f1:dc:24:e5:e7:6d:bf:b4:ab:72:2b:b1:a6:8a:24:
ae:cc:45:8d:dc:b0:21:92:70:08:e6:68:55:ac:8d:
e4:a2:58:ca:15:f3:6a:f3:e7:0e:d3:a8:d4:06:6a:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.119.0/24
IPv6:
2a11:1240::/29
Signature Algorithm: sha256WithRSAEncryption
47:95:f2:09:f5:da:73:87:33:47:8d:d6:30:64:fa:e2:2a:a4:
ce:54:d7:c2:1c:c4:b0:d3:1b:4e:53:b5:56:18:77:f9:41:ad:
87:77:3a:89:fd:24:52:e8:f0:4a:f0:8c:cc:63:75:82:0d:99:
6f:15:3a:f6:e6:ab:4d:08:9b:0c:0f:39:06:2f:14:f6:99:00:
f7:23:70:6f:dd:bb:77:41:a4:de:5e:7d:6d:75:93:5e:33:75:
d7:65:d6:31:7c:4e:47:61:60:69:8a:71:fd:57:10:df:2e:35:
69:31:e6:29:02:d6:55:c8:c7:de:e8:90:cd:d2:eb:4d:30:8b:
4a:4c:41:d1:b4:fc:e8:18:3c:a3:16:e1:6d:b7:b5:ac:08:25:
11:37:02:f3:37:00:b1:9e:4c:44:29:dc:bd:92:a3:c8:21:d3:
40:e1:60:5d:8f:26:af:b2:92:b7:30:93:6f:eb:ce:96:69:f2:
31:b2:bd:0f:0c:ea:8a:8d:03:d8:e4:6e:37:58:4c:b8:90:6b:
cb:80:8f:1d:ac:92:47:b7:13:b1:82:45:b5:b6:54:ac:8e:54:
ae:8c:8a:83:3d:70:30:73:98:ea:42:9c:c6:f7:a5:bf:bc:a4:
f4:8f:eb:b1:4f:74:00:86:2b:85:99:83:68:a7:20:20:44:92:
5c:8b:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:19 2024 by rpki-client on console-fra.rpki-client.org