Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer
File: 1-bOTc3G4mQjfzuieQSxeSzSvPsA.cer (raw, json)
Hash identifier: AD9/p+x2glsn9N3+KuV7D6iJMWn+2+67LjytP94MHeQ=
Subject key identifier: F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D546FB86D6AEFD499C6E71401B853E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:34:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.171.0/24
IP: 2a12:dd00::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 12:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:46:fb:86:d6:ae:fd:49:9c:6e:71:40:1b:85:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:34:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9b3937371b89908dfcee89e412c5e4b34af3ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:c4:b7:3b:44:1a:cc:53:d2:9f:96:f5:f0:
6c:a9:d7:a7:98:ee:63:00:de:f9:5b:e8:d0:c4:86:
fd:2c:97:12:b0:16:4d:68:e9:05:84:5a:06:91:6d:
a7:b6:91:19:16:27:38:66:a8:5f:3f:26:af:4b:6b:
64:18:d0:28:e1:de:97:71:0d:5a:23:d6:b3:78:c7:
64:93:2c:d7:43:21:75:fa:95:e7:07:89:f8:2a:2b:
07:90:74:3b:6c:b4:fe:b4:fa:ad:47:18:ba:c8:0e:
22:23:b3:2f:f1:f2:90:24:26:a2:15:9a:2e:00:49:
50:7d:8f:5f:73:d8:7f:a5:92:fe:16:3e:32:06:d9:
3b:68:f5:58:c2:01:87:c1:f5:1c:aa:83:38:b6:58:
c9:b4:35:7a:14:4c:21:97:00:57:c4:80:44:7b:95:
db:3e:29:bf:8b:22:0b:2a:63:fe:f2:18:0e:cf:5d:
a3:59:a4:7e:94:5a:44:f2:40:d3:2f:be:ed:d7:65:
1e:30:7e:32:d3:e6:27:75:15:4a:5f:7b:6f:ce:d8:
17:4b:44:2b:c0:fd:b1:b2:42:38:b0:b1:2e:52:40:
53:ee:d4:50:31:45:09:88:f2:85:5f:2c:25:3e:dd:
a9:6d:d6:5e:1b:35:1f:f6:78:25:e7:48:29:3e:b5:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B3:93:73:71:B8:99:08:DF:CE:E8:9E:41:2C:5E:4B:34:AF:3E:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c53b79-97d0-48cb-8a9b-4234e6a95d4a/1/1-bOTc3G4mQjfzuieQSxeSzSvPsA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.171.0/24
IPv6:
2a12:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
7c:4f:68:dc:6b:03:b6:38:9e:ba:29:26:53:b0:1c:05:da:c8:
fe:78:2e:9f:ab:f0:7e:8a:be:46:95:9d:c0:c0:e6:5f:b5:59:
e4:9f:15:ee:81:88:14:65:34:0e:dc:cc:f9:27:b2:f0:c6:56:
52:13:61:69:13:ba:68:1e:d9:be:27:c5:59:0e:d4:b5:c8:0a:
f8:8c:7b:09:81:0b:00:19:0c:d0:57:4b:c2:97:e5:7a:1b:9d:
68:8d:69:72:8b:00:57:e5:f5:a3:fb:57:ac:4b:3a:a4:80:d2:
d2:67:ee:8c:1f:14:48:a3:d9:b1:50:0b:d0:fb:f5:99:9f:da:
02:27:81:37:d2:e3:0d:70:29:42:d3:f3:90:9d:97:1a:6b:ee:
ed:bc:33:1e:6d:5e:86:1d:f5:3a:e8:a5:25:8d:66:0c:74:ce:
ee:3b:05:80:9b:e7:2b:14:a4:15:b4:e4:ee:f0:10:32:f4:e2:
6d:d6:2b:6c:fc:a0:8d:83:d5:58:16:e0:45:21:c1:42:f8:59:
5c:24:bb:56:27:0d:05:f3:28:5b:64:97:f9:77:43:d5:94:04:
d7:0d:85:38:be:0a:64:f3:05:93:ab:3f:8c:0c:72:ac:d2:d1:
25:ae:99:2d:31:d4:bb:06:07:62:2a:13:9b:ea:d2:4c:c0:91:
5c:17:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:21 2024 by rpki-client on console-fra.rpki-client.org