Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hCc8jeRlDXGhdoXloRkI5YjbCYg.cer
File: hCc8jeRlDXGhdoXloRkI5YjbCYg.cer (raw, json)
Hash identifier: xSHHYUK1VVcHBrnT5isz3SJDV5VoiRKg8DZu8GNyues=
Subject key identifier: 84:27:3C:8D:E4:65:0D:71:A1:76:85:E5:A1:19:08:E5:88:DB:09:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DEF243613E1AF3E7DADC7B7B6FF365
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/hCc8jeRlDXGhdoXloRkI5YjbCYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.211.136.0/24
IP: 2a12:da80::/29
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:f2:43:61:3e:1a:f3:e7:da:dc:7b:7b:6f:f3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84273c8de4650d71a17685e5a11908e588db0988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6a:4a:29:16:c5:60:2e:05:03:a4:93:07:46:
3e:d2:ec:28:30:24:88:32:c6:1d:df:3f:bf:d0:4f:
75:f6:b2:47:97:4b:4c:f8:af:86:c6:45:76:91:7c:
a1:3b:cc:0e:50:77:fd:50:6d:43:3a:63:45:6a:25:
e4:6d:62:40:20:04:69:ef:eb:21:82:f9:a0:23:10:
9c:51:f3:7d:2f:45:48:da:13:5a:15:bc:71:7f:85:
db:c0:2f:1b:21:07:d3:22:46:3b:a2:08:35:e2:bd:
c4:53:9b:dc:b5:79:46:c3:e5:c7:88:9c:18:d6:c4:
a4:12:5d:d5:fb:fd:2f:49:38:f9:f0:e5:45:50:8f:
b7:de:76:5a:b4:56:dd:a9:60:ce:39:84:96:1e:38:
a7:23:8e:c5:bc:fe:5b:47:9b:c5:d0:41:0b:e1:d4:
3e:35:e0:8f:9f:e6:82:60:b8:bc:cf:9b:00:c3:cc:
fc:77:77:ea:f6:3d:b1:dc:01:8b:3a:a7:79:84:ed:
83:65:38:89:91:be:43:d7:20:49:ef:1d:75:42:ee:
99:2b:91:37:02:1c:d7:24:4e:98:7f:06:be:21:d8:
c6:a2:f1:3f:8d:67:e1:f9:3c:60:e7:0c:2d:a0:b5:
56:4d:62:c5:0a:1a:f2:1b:a3:c8:ed:41:1c:52:b8:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:27:3C:8D:E4:65:0D:71:A1:76:85:E5:A1:19:08:E5:88:DB:09:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3f1ed3-bd9b-4301-a493-8bd79430f57f/1/hCc8jeRlDXGhdoXloRkI5YjbCYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.136.0/24
IPv6:
2a12:da80::/29
Signature Algorithm: sha256WithRSAEncryption
28:0b:94:77:1d:f0:b6:60:6c:fb:40:10:1a:ac:bf:44:72:62:
12:2c:a5:2c:e5:60:82:34:52:bd:76:fe:6b:e7:7c:9d:d6:4b:
33:62:06:ad:97:50:7f:ce:52:b2:c8:34:51:92:97:3d:5f:79:
d2:62:bd:9b:e9:b3:ba:0e:2a:c4:e8:6d:8d:b5:03:65:6c:d0:
d6:0c:69:cd:c8:d0:74:e6:86:37:1c:d8:8b:82:a5:a2:bb:09:
77:d8:3f:23:27:07:34:c2:d4:e1:ac:3b:39:da:bc:00:0d:af:
ca:35:2a:69:f3:cb:21:66:8e:5a:d9:62:fb:b9:47:0d:87:f1:
52:c6:06:70:3e:32:32:d1:f8:4e:9c:8c:c6:aa:7a:c3:16:2c:
bd:47:bd:9f:e2:7c:52:7f:61:cf:e1:84:c6:43:58:1c:2e:ea:
0a:73:0d:ce:4b:df:0d:15:47:33:d7:7b:37:c3:78:ec:5d:93:
d2:8f:4c:06:3d:90:2a:a7:11:7a:72:dd:69:be:d9:7f:49:c5:
2f:66:72:f7:9f:a8:de:79:48:51:1c:61:cc:e7:59:ce:dd:56:
87:09:53:83:87:9c:30:bf:16:ff:7f:18:02:17:1e:41:4c:af:
b6:a9:e4:44:27:7e:12:50:17:ee:64:c4:8e:e3:50:6c:4f:f2:
23:51:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:32 2024 by rpki-client on console-fra.rpki-client.org