Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yI6TjrSuWcIY9OboAdc1wSUbfkU.cer
File: yI6TjrSuWcIY9OboAdc1wSUbfkU.cer (raw, json)
Hash identifier: hQaTFkaHGID7bTYuEYLdOIq0owCIAvoHXtLIbsNR8aA=
Subject key identifier: C8:8E:93:8E:B4:AE:59:C2:18:F4:E6:E8:01:D7:35:C1:25:1B:7E:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF20E912AE4C8AD866D98606BF7716
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/yI6TjrSuWcIY9OboAdc1wSUbfkU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:31:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.199.189.0/24
IP: 2a12:4280::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:20:e9:12:ae:4c:8a:d8:66:d9:86:06:bf:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88e938eb4ae59c218f4e6e801d735c1251b7e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:ea:71:c3:64:3c:18:f7:90:34:a0:a0:82:
5f:da:68:e6:73:c7:92:51:42:d8:3e:af:33:fe:3a:
39:40:49:a4:f9:76:d4:9d:9c:87:db:43:2b:1e:fc:
4f:91:d4:8b:08:8b:f2:e1:04:14:a7:57:57:69:83:
d6:1a:ce:e3:e3:c7:08:52:86:bd:74:88:66:5d:95:
74:7c:2f:d4:68:95:cc:0b:cb:f6:ca:0e:e1:04:0d:
57:3d:df:63:1f:bc:e5:8c:32:66:9a:f4:be:56:6f:
da:3e:8e:18:21:ec:8c:cd:b9:31:54:fe:5e:40:b9:
e2:8c:f9:fb:99:00:07:ba:29:5e:d9:5e:33:27:8e:
83:de:b7:b8:53:7b:08:6c:ea:ed:42:fa:2a:3c:07:
a2:64:9d:a5:c7:a7:74:e7:a6:85:77:88:5a:0d:92:
e7:8c:dc:dd:73:19:ef:4a:16:ff:ac:76:99:cc:83:
e7:2a:ba:1c:40:43:08:e3:f7:6b:45:22:81:f2:7c:
7e:39:49:d3:3a:8b:13:a2:71:63:15:22:5e:2f:5a:
23:9a:a6:1f:aa:eb:94:ce:d3:9c:99:04:b2:f3:72:
d6:8a:02:63:93:d7:97:95:42:e5:97:69:a1:c8:37:
f2:e6:62:4f:93:39:da:32:1b:8d:62:dc:a1:27:05:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:93:8E:B4:AE:59:C2:18:F4:E6:E8:01:D7:35:C1:25:1B:7E:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/b93447-4bcb-4925-92ed-c75e8fd5f1af/1/yI6TjrSuWcIY9OboAdc1wSUbfkU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.189.0/24
IPv6:
2a12:4280::/29
Signature Algorithm: sha256WithRSAEncryption
1b:7f:75:cd:16:10:07:58:70:02:fd:9d:3c:e9:3b:95:20:eb:
70:cf:93:58:a1:92:01:16:e2:2f:f1:31:7e:51:2d:3c:ed:bf:
1a:f3:fb:f5:57:c8:dc:fb:f6:44:5a:1d:f8:fd:b9:31:db:b6:
b3:55:da:2b:7e:80:9a:12:ef:82:0f:c0:bf:4f:cc:0a:c7:f2:
10:da:70:15:06:85:22:c4:1d:a6:3a:6d:fe:61:5c:d7:61:b0:
4a:2c:6a:64:32:d9:c7:37:99:a2:0b:f5:43:8c:09:8f:45:af:
cb:cc:56:c2:5c:10:44:3b:48:72:8b:c1:d3:38:6a:b6:9b:47:
9c:e7:26:8a:b6:6c:69:f1:17:30:12:ed:fb:53:02:cd:7c:9b:
5a:1f:2d:72:fb:87:62:14:9a:88:56:03:d5:03:6e:bf:0c:4b:
4e:bc:da:d7:d9:38:46:94:9f:2e:1c:bd:04:98:2f:96:5d:da:
dd:16:49:7e:de:e6:70:6b:24:72:f1:a0:11:4a:65:4d:67:fb:
19:d4:c2:28:70:3a:c7:54:50:62:b5:04:4e:20:9e:b6:63:aa:
f2:8c:fa:bc:4b:1c:4e:36:72:28:46:a8:c9:5e:18:3b:ca:85:
9b:0a:21:ca:58:08:42:a3:64:72:42:05:72:f8:2e:f3:11:72:
21:14:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:25 2024 by rpki-client on console-ams.rpki-client.org