Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer
File: 1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer (raw, json)
Hash identifier: qatoydJIEo2hnVO6qe43wbOQ9AkVhtyPbq4uW6rDE6o=
Subject key identifier: FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D69211D86A4B33271B03C8F0CE4D0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.56.3.0/24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 07:54:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:92:11:d8:6a:4b:33:27:1b:03:c8:f0:ce:4d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:fb:cf:ba:04:8f:a7:27:7d:a9:a8:65:a8:
55:8d:74:b7:03:74:6e:12:cb:0c:2c:0c:30:69:e7:
b5:7b:14:51:08:aa:28:4b:cb:a4:0d:6b:53:f2:dc:
2c:e1:f7:5e:14:de:7e:c1:7b:6c:ba:01:06:0d:dc:
74:c0:d5:a1:de:ae:cc:b5:39:b3:7d:b9:9e:a9:db:
e7:ca:3d:ab:e4:6d:09:4f:84:c9:a9:2a:a2:36:a9:
cf:25:21:7c:e2:9c:84:61:6e:d8:1b:b2:c9:f9:66:
21:35:3b:1e:f9:e5:03:04:e7:1e:c3:4a:1d:d3:1b:
dc:67:65:5c:df:ce:45:99:fc:42:b9:7f:1d:9a:58:
68:ef:dc:cb:d1:7a:30:0c:b1:30:84:f6:93:3c:4e:
44:58:8c:90:49:ff:ab:f7:c7:6e:c5:53:a6:05:db:
3f:f7:af:bc:c5:68:a6:a2:5e:6d:98:1d:95:db:3d:
b9:46:b0:af:df:47:50:23:c5:03:be:98:6f:f4:16:
99:e0:30:97:e4:74:0a:42:52:39:e3:4d:18:69:b9:
86:30:5f:48:5d:fa:0e:8c:8f:b9:e9:97:d7:63:12:
87:90:b6:79:8e:95:12:6e:d7:e0:b6:69:46:63:49:
c0:30:92:de:dc:4a:80:9c:7a:93:1e:4b:b8:88:f9:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:de:8b:6c:36:50:9f:99:50:33:ef:e9:45:db:ed:e9:11:d4:
b4:6f:38:9a:91:50:f0:5f:03:03:af:b6:32:fd:7b:d6:b3:11:
8f:89:e4:b8:31:69:a0:71:f2:5d:45:4e:e5:10:f5:18:0f:f6:
d9:96:6a:8c:f0:ed:dc:b0:75:5f:42:29:76:e5:44:7c:0d:ee:
e6:41:65:c8:3b:f8:18:46:01:46:6a:92:47:80:3a:21:65:20:
6d:48:17:35:aa:29:f1:be:ba:2c:24:a1:4a:bf:19:83:64:62:
e7:8b:d1:9e:f5:03:32:e5:6e:d9:83:2c:2b:cf:fb:08:f8:fe:
0f:e7:5c:bb:dc:46:d2:69:2e:4c:85:c3:01:75:1a:91:39:b0:
36:d4:67:c3:25:6d:89:30:0c:7f:02:3e:80:af:99:b7:cd:1d:
06:86:89:47:6b:5f:b8:b8:6e:f9:e3:2e:a0:6c:74:4c:30:eb:
97:c0:c9:8a:b3:fb:7c:de:9f:26:11:e5:b2:f8:26:2f:b0:ce:
82:dd:9c:4f:1b:85:c3:57:f3:54:69:3a:1f:a6:17:d1:3d:9e:
bf:67:fe:cb:ee:a5:09:cf:6c:c5:d0:c3:4b:e7:bf:93:24:89:
cf:e1:cb:d5:69:da:49:48:2c:74:aa:ed:f2:58:7d:5a:83:d0:
03:3c:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:29 2024 by rpki-client on console-ams.rpki-client.org