Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
File: ft18jWkyfwtWUcW_8YdCjosvPJQ.cer (raw, json)
Hash identifier: MbPWLN+s7OIZl3Tsi8F/XybgxIJs5HqeXb5GLZpuFxc=
Subject key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500BA30E8DCAC7861CB8D1B7DB528EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.106.0/24
IP: 2a12:f080::/29
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:41:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ba:30:e8:dc:ac:78:61:cb:8d:1b:7d:b5:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:26:c9:50:62:5b:84:e2:62:b7:0b:85:42:3c:
53:08:2f:9a:f0:3c:46:39:d6:9d:fd:81:cc:88:32:
90:71:86:56:97:22:cd:02:8e:02:56:07:0c:d1:be:
fc:68:92:f1:8c:00:71:22:b0:03:94:20:0e:e8:6c:
1c:11:68:bf:6e:42:74:bf:21:fa:9a:1a:c8:f9:ed:
89:09:d8:4f:f0:80:61:e8:8a:8e:48:aa:70:42:7b:
33:64:81:ac:44:43:0c:04:17:a2:81:d4:9c:57:39:
25:bb:16:39:d6:a6:b1:83:cf:44:08:05:7f:cc:d9:
89:8b:f4:fa:8f:28:dc:c4:ae:37:89:57:23:95:0f:
08:72:72:56:fe:94:5c:3f:b3:7b:09:46:1f:40:96:
1f:66:97:44:22:d0:95:10:0f:44:db:c4:87:3d:c2:
82:97:7e:b0:98:b7:91:75:e1:a1:40:03:33:ad:8c:
c6:81:0c:49:b0:62:37:ff:78:1d:5e:43:db:a3:95:
00:86:40:03:2f:06:a5:69:d1:a6:72:cd:cf:cf:6a:
98:d7:b3:04:37:9c:96:e6:99:76:a9:9f:b4:9b:dc:
f6:7f:9f:de:90:57:07:c0:83:fb:17:3c:4e:42:df:
56:d0:73:f3:3c:91:e1:b8:9c:83:6e:59:c5:80:2f:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.106.0/24
IPv6:
2a12:f080::/29
Signature Algorithm: sha256WithRSAEncryption
aa:16:2c:8e:43:ce:a3:48:d1:fb:11:ef:8f:03:4a:ac:84:3c:
55:70:43:f5:b0:61:ac:b2:d7:31:29:17:9a:42:78:ee:f9:1f:
cb:69:f6:87:05:25:5d:b3:8f:e9:3f:43:db:0b:9a:c4:5d:0e:
ee:a4:4e:ae:91:e0:e4:40:3d:bc:4a:ea:b3:f2:c0:31:d2:84:
62:07:62:06:4e:5c:1f:ed:71:59:0b:8b:4f:29:97:03:e7:e7:
d3:78:e4:5a:1d:38:5b:26:ab:79:c9:4c:58:d4:5f:bb:6c:63:
ea:f4:d9:d6:ef:8e:d8:27:1d:cf:e6:62:99:d5:c1:19:d3:16:
bd:5c:45:e9:90:af:a6:99:0f:7c:a4:7f:27:74:a8:bd:4f:24:
7a:7f:ed:3d:2a:fc:d5:55:af:dd:31:b0:36:ed:c8:e1:49:33:
4f:8d:f9:3e:b6:c2:14:50:9c:5d:71:bc:b7:f5:57:b3:85:d8:
f9:1b:1a:85:39:57:41:17:a8:c5:af:1a:a5:13:03:96:91:e9:
ae:cf:6b:a3:97:9f:a5:a8:4f:cb:7d:e2:17:18:f5:af:45:f6:
dc:27:50:2d:f4:78:05:57:f1:31:c2:bb:29:64:95:e4:98:ea:
c0:15:95:bb:d7:b6:3d:12:d3:c9:82:8d:c9:83:b8:14:f9:30:
75:7a:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:57 2024 by rpki-client on console-ams.rpki-client.org