Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer
File: 1-qqSWzs_p3bEQRmTIKLGox3uN_c.cer (raw, json)
Hash identifier: bAz/y4npoRs8Pzd1tt+RPCqGgR4nxLbtfv9h0MHNnYI=
Subject key identifier: FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FADEA9CB6F676FC0E9030BE128113F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.77.146.0/24
IP: 2a11:6700::/29
Validation: Failed, certificate revoked on Fri 11 Aug 2023 09:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:de:a9:cb:6f:67:6f:c0:e9:03:0b:e1:28:11:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faaa925b3b3fa776c441199320a2c6a31dee37f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8e:e6:a9:28:48:a5:b8:8d:04:83:21:71:a9:
0d:a4:35:cd:d4:63:2d:52:8e:0b:fc:e9:47:fc:b7:
fc:cc:a9:a1:d4:85:0f:d6:07:f3:63:ba:0d:87:43:
36:b8:ae:e2:a0:fc:f0:3e:66:21:4f:7d:0f:4c:c9:
a9:65:d7:f1:91:bf:87:4a:c9:87:9b:f4:5b:cb:01:
e0:b4:72:96:18:9e:1c:37:40:9c:25:96:63:cc:27:
d6:79:2d:4b:c0:fc:29:a0:c9:46:aa:3f:8c:2c:48:
3c:f6:78:81:38:23:be:31:44:1c:62:f1:16:96:df:
d3:01:a1:e4:c5:1c:80:25:ed:1d:35:34:4b:dd:52:
1d:37:5a:e7:48:ca:d8:6d:87:6e:c1:e4:9d:a5:61:
9e:71:e5:35:a1:aa:93:49:b0:02:bc:33:0c:44:68:
96:28:52:c4:b3:7f:85:99:b5:36:82:63:e3:9d:2b:
0d:bc:f8:e0:31:6e:38:49:ba:2a:bb:87:7f:7b:f3:
f3:ac:ce:38:ca:14:31:38:fa:b3:cc:74:59:43:67:
83:19:91:f5:c8:73:62:15:bd:35:d1:db:49:cd:dd:
73:76:7e:13:01:5f:1e:ed:94:12:f0:63:0e:57:80:
42:09:26:17:57:96:a7:57:7b:95:dd:6e:1b:47:8d:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AA:92:5B:3B:3F:A7:76:C4:41:19:93:20:A2:C6:A3:1D:EE:37:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0b86b3-3903-46de-9a9d-ca105c28bbfe/1/1-qqSWzs_p3bEQRmTIKLGox3uN_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.146.0/24
IPv6:
2a11:6700::/29
Signature Algorithm: sha256WithRSAEncryption
3d:3a:8f:90:19:a2:58:09:4c:0b:69:6d:96:7e:7a:db:35:16:
dc:39:60:e4:ac:43:a7:f0:e7:5e:8f:e5:62:72:0c:51:d6:a6:
05:9e:4f:75:f1:f9:ba:60:d2:c7:25:3c:03:62:b6:c2:0d:64:
1a:5f:41:89:3b:1d:a2:0a:ed:e9:51:e7:29:ff:ae:bd:6b:54:
08:a9:9d:e3:e4:51:17:26:d5:34:1a:8d:cf:45:20:44:1e:5b:
7f:d5:88:6d:3b:28:ac:72:c7:1e:17:4f:da:b8:ea:9b:83:df:
e0:6f:df:90:ac:56:9e:93:04:e1:34:72:eb:e9:1f:73:66:03:
b5:75:ea:30:d5:e9:6a:9e:69:6e:72:05:a0:a8:bd:f2:fe:82:
4c:ab:1e:89:ec:6f:be:c4:f4:f7:10:22:02:90:ab:3d:8c:ca:
c0:4d:05:e8:64:61:c9:8d:fe:b1:77:6b:2a:81:f2:c3:5b:eb:
89:b3:22:8c:c1:dc:c5:92:87:18:34:9f:2f:bd:fe:4e:52:ca:
b9:3e:25:8b:da:9f:93:14:ee:6d:4b:c4:b8:f1:a9:e7:22:c2:
f5:06:ac:34:11:bc:13:96:7a:c9:3f:31:2d:07:7c:7d:79:0e:
f2:2e:4f:f2:84:ef:5b:3a:f9:54:25:ce:74:3a:2e:59:e4:35:
0f:5a:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:24 2024 by rpki-client on console-fra.rpki-client.org