Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x9eoi8b66VFUlZD3ehTmKIUjCR0.cer
File: x9eoi8b66VFUlZD3ehTmKIUjCR0.cer (raw, json)
Hash identifier: VvU4X2vscKbCjmURsrhmP0Slhfo9VmnB+DcTiiv5z3M=
Subject key identifier: C7:D7:A8:8B:C6:FA:E9:51:54:95:90:F7:7A:14:E6:28:85:23:09:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E1431219F9BFD2BECA65D8F46366B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/x9eoi8b66VFUlZD3ehTmKIUjCR0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.100.40.0/24
IP: 2a11:c380::/29
Validation: Failed, certificate revoked on Mon 11 Sep 2023 07:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:14:31:21:9f:9b:fd:2b:ec:a6:5d:8f:46:36:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7d7a88bc6fae951549590f77a14e6288523091d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:6d:9d:81:07:d5:4c:e9:15:e1:3a:9c:4b:
2e:61:11:09:a5:4f:31:98:63:80:fa:bb:61:4b:5b:
93:df:0f:81:1e:6b:30:3c:a8:04:5b:ec:13:8d:51:
35:0a:b4:02:d7:ab:f7:2e:71:0e:fa:30:c9:8a:20:
90:56:6a:08:5c:f2:5a:e0:b4:cc:bf:5e:d3:8d:09:
ee:20:8a:33:77:26:7f:b7:81:ad:ca:1d:82:37:af:
24:94:9f:80:41:78:3d:92:f6:bb:ba:1e:b8:de:1e:
2b:ca:a6:6e:01:23:0a:10:49:59:79:cc:0e:2b:54:
ce:26:df:64:f2:cf:c6:4b:a2:18:d8:cf:32:70:1c:
a1:7d:03:e2:06:fe:8e:2a:77:c2:fc:59:6a:1d:66:
08:f1:d6:74:6d:79:51:fa:4f:87:33:bc:dd:01:fc:
75:b1:4d:91:31:7f:ca:dd:6c:af:30:bd:96:45:a3:
6f:aa:3a:c0:d8:0d:5a:91:ce:72:be:a1:80:da:26:
82:52:65:0f:0e:f9:f1:5f:51:6e:aa:71:51:6c:1e:
99:c7:ad:94:d2:a8:4d:e2:eb:99:48:71:e1:ca:67:
96:12:2c:74:63:48:be:f7:2a:0b:5d:a3:03:fe:d7:
44:42:ca:7e:4d:62:10:e2:16:8a:b9:02:7f:9f:aa:
26:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D7:A8:8B:C6:FA:E9:51:54:95:90:F7:7A:14:E6:28:85:23:09:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/279038-f7d2-4a67-bd7f-d78d8d5af47d/1/x9eoi8b66VFUlZD3ehTmKIUjCR0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.40.0/24
IPv6:
2a11:c380::/29
Signature Algorithm: sha256WithRSAEncryption
21:49:a2:1d:70:86:f6:0d:d3:06:8f:7f:4c:fe:5a:20:e1:bd:
dc:6b:c3:ff:d4:2f:61:46:e9:fd:f9:aa:a5:b1:1d:eb:5b:d3:
7e:a7:36:92:b6:9e:aa:36:f9:38:f1:c1:6b:48:ae:e8:8c:ec:
72:e1:00:af:b1:26:dc:ee:03:c4:d3:f0:4c:37:1b:c5:6b:84:
65:8d:3d:d5:1a:a2:9f:a5:83:db:29:92:03:2d:4f:62:2c:5c:
41:f8:fe:b4:5a:ef:bb:99:78:07:05:62:74:df:9c:82:29:d9:
2c:75:ac:85:60:ee:ca:1d:99:c7:ff:b9:70:ab:9c:2a:92:f4:
6b:1c:a9:79:cc:a5:95:63:56:0e:b0:79:c8:6d:be:cf:4f:57:
47:43:0e:fc:25:18:8c:b2:e4:6d:0f:aa:07:ca:1c:3c:1b:e0:
c8:19:89:f5:2d:82:15:65:6d:dc:a0:ea:3e:de:e5:ab:ac:0d:
82:12:b7:e9:11:b1:94:30:5e:4a:89:97:a6:0a:c8:35:b8:e6:
91:af:bd:a9:ce:cf:ac:be:15:45:75:d0:da:a4:7d:7d:64:1c:
f3:a7:79:db:74:39:4f:ed:ac:8b:7c:8c:59:e8:8d:ae:29:a0:
fd:de:08:6a:21:a5:29:3b:3a:e6:80:ce:31:86:44:b5:0a:69:
51:d1:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:57 2024 by rpki-client on console-fra.rpki-client.org