Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rEybTJ_-e-EJNIHkWec7QR5-HDM.cer
File: rEybTJ_-e-EJNIHkWec7QR5-HDM.cer (raw, json)
Hash identifier: 1dJ/6GJvEu8knimOHdzNXQXq8TaVoxbTFth1/u7+VYE=
Subject key identifier: AC:4C:9B:4C:9F:FE:7B:E1:09:34:81:E4:59:E7:3B:41:1E:7E:1C:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF79E6F5629B74119E7CDC5042FA575
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/rEybTJ_-e-EJNIHkWec7QR5-HDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.202.0/24
IP: 2a11:7040::/29
Validation: Failed, certificate revoked on Fri 27 Oct 2023 14:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:9e:6f:56:29:b7:41:19:e7:cd:c5:04:2f:a5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac4c9b4c9ffe7be1093481e459e73b411e7e1c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:e7:00:2f:8f:24:5c:39:29:55:30:1d:79:
0a:d5:c2:1b:30:b9:c5:0f:4d:99:11:a1:89:8a:c6:
4a:d1:0d:5a:00:c8:be:b6:6d:57:c3:d0:f5:3e:12:
de:05:0b:ed:92:2e:9c:78:0d:16:4f:f7:a8:c4:b1:
f7:57:88:f3:9f:83:99:88:b1:64:94:aa:69:39:b0:
dc:4f:f1:b6:8f:08:9e:a4:b6:f6:af:5d:88:2f:31:
64:5b:c9:8c:a8:9f:a6:55:d0:a2:92:46:ef:e4:59:
e9:d7:56:e3:a5:d0:c2:67:a9:d7:c1:af:e0:46:3d:
4c:28:d2:98:c8:d3:73:ed:8e:0f:87:43:17:df:98:
c7:53:dc:5a:8e:9e:da:63:5e:70:d3:e5:76:b2:51:
04:3a:10:0b:42:22:89:1c:31:86:08:68:ca:f0:b8:
78:a9:f4:ee:37:8c:9b:77:10:2e:bb:d1:70:72:dd:
84:80:31:5f:57:51:75:66:a9:bf:17:9b:0e:54:14:
98:a1:e4:4b:60:23:5a:4d:b6:c9:7e:8d:75:87:0f:
cb:e9:45:d1:fe:78:df:32:3f:9c:f2:50:72:33:f9:
0a:93:25:36:e4:bc:24:d6:ac:bb:e7:58:f0:9a:67:
52:6d:c0:dd:e3:f6:ce:9a:62:75:54:0b:f8:bc:03:
7b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:9B:4C:9F:FE:7B:E1:09:34:81:E4:59:E7:3B:41:1E:7E:1C:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/rEybTJ_-e-EJNIHkWec7QR5-HDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.202.0/24
IPv6:
2a11:7040::/29
Signature Algorithm: sha256WithRSAEncryption
a2:36:ea:72:e5:e0:01:d4:1f:ac:a9:aa:eb:c9:47:a1:42:1a:
7d:46:8d:f9:f3:19:75:21:b2:49:0c:36:6b:4b:bf:0e:f4:5a:
3b:5f:97:f7:68:0e:9e:6b:60:75:d4:53:cf:cf:ae:92:1f:a1:
05:8d:1d:ba:ce:a1:2e:67:89:e8:1a:d5:c4:7c:64:4f:e3:52:
d6:c2:e4:55:24:d4:3d:99:2b:47:8a:82:0f:78:ac:e8:b0:03:
9f:23:5c:b4:56:46:03:cb:ed:d9:79:1e:7c:7e:55:b5:49:ac:
36:4f:96:6b:dd:79:85:58:29:ee:41:b6:f6:c5:5a:f2:47:d3:
dc:b8:53:27:37:0b:3b:87:ae:30:7a:17:ad:bc:73:03:ec:27:
f0:da:6b:e3:dc:dd:6d:1b:7e:aa:d2:dd:2d:3c:3d:00:27:52:
11:1b:47:4f:a6:71:f6:22:eb:67:8e:45:c6:6a:d3:90:39:ce:
56:ec:bc:f9:c6:03:68:81:e0:21:18:83:eb:44:00:ee:ff:cd:
62:d7:2d:31:8b:c3:d1:ac:e0:f3:34:3b:f6:53:00:58:94:0c:
b4:8b:96:f8:cc:c1:99:12:df:80:30:66:19:b2:4b:11:b6:54:
48:4f:03:62:9e:ba:f4:9e:02:f0:3f:64:f9:d0:ab:ce:1e:1c:
48:2d:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:35 2024 by rpki-client on console-ams.rpki-client.org