Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Scab5nqwSq-CFYQChSi2WY857s.cer
File: 1Scab5nqwSq-CFYQChSi2WY857s.cer (raw, json)
Hash identifier: BJ2BCumJAS9j1rLBZA+JlA2qzqvjjPL+QZycW+ek4kU=
Subject key identifier: D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708B514FA97A3513C2573B7F791E864A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.23.240.0/22
IP: 2a04:2980::/29
Validation: Failed, certificate revoked on Mon 28 Aug 2023 10:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:51:4f:a9:7a:35:13:c2:57:3b:7f:79:1e:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5271a6f99eac12abe0856100a14a2d9663ce7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:f2:7c:59:a5:88:c7:92:aa:1f:7e:30:63:
db:54:84:b6:80:ef:e2:2b:a1:eb:66:36:c1:05:53:
5c:c0:5b:91:91:dc:b2:a0:be:07:0a:f7:b8:23:3d:
70:8f:63:0b:bb:ba:b2:00:b9:35:64:44:b3:d2:81:
64:32:1e:f7:09:61:c4:7c:ef:a9:1a:d4:f9:65:7d:
8e:2b:2c:f5:8b:22:9f:bb:78:a3:1f:f5:04:01:f0:
06:03:55:5a:f9:5e:b3:ce:7c:e8:93:b0:2c:03:e3:
e5:8f:aa:9a:1d:b0:27:cb:33:a7:65:b4:77:45:3b:
19:9a:7a:e6:db:bb:4b:21:f3:7a:6b:ce:80:8f:fc:
72:7e:b2:4a:12:aa:96:dd:5e:ee:fa:0d:b5:3a:38:
68:39:5d:fa:c7:ef:75:f3:d1:a7:c8:8d:3f:1f:c5:
b6:21:80:3c:73:02:62:2a:62:58:27:0d:2c:5c:93:
9b:00:6b:f6:64:ad:71:8a:15:1c:08:04:83:55:08:
51:24:f4:e9:ac:75:30:49:b9:8f:60:0f:f5:ad:ca:
55:80:49:a2:5d:29:aa:45:7c:a8:0f:91:0f:57:03:
5d:b1:f1:07:3d:18:3d:a1:00:4e:68:8d:80:85:d6:
ee:a3:76:e7:6c:f9:18:eb:8e:a0:3e:4d:de:44:f5:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:27:1A:6F:99:EA:C1:2A:BE:08:56:10:0A:14:A2:D9:66:3C:E7:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/180996-c97a-48bc-b5ab-100862b96c4d/1/1Scab5nqwSq-CFYQChSi2WY857s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.240.0/22
IPv6:
2a04:2980::/29
Signature Algorithm: sha256WithRSAEncryption
3d:89:3c:e9:7f:a0:59:af:d6:11:9f:ac:08:fc:13:df:83:17:
bc:76:ba:1f:a8:bb:2d:5e:71:7b:9b:cc:eb:97:da:e6:e1:b0:
02:4b:ec:46:6a:cc:4f:c7:93:25:b3:24:7a:79:ed:b3:11:99:
d1:c3:d2:d7:cb:cc:72:12:ab:29:4c:f0:c7:66:83:62:11:7a:
ef:6d:c1:a9:89:25:d9:b1:7a:66:0f:9d:ac:5f:2f:f2:85:76:
74:05:44:a3:7a:8a:d9:30:e6:78:f4:df:11:ad:a1:07:98:9b:
24:81:4d:e7:43:8a:d9:d0:06:f7:6c:6f:02:1a:5d:7f:0e:95:
87:31:dd:47:af:e0:e4:ab:1f:27:84:4d:44:36:44:ae:8a:de:
8b:e8:26:b4:d9:23:73:d6:1f:82:6a:66:58:ef:55:89:4d:85:
13:d5:95:45:6a:0e:a7:7e:28:4b:df:40:91:c0:be:a5:f4:0c:
34:ec:85:f6:a8:bf:c1:0a:ae:52:66:ed:e5:02:8c:44:8b:ea:
63:4b:e4:77:5a:12:aa:48:1d:86:24:f1:ac:9f:ab:ed:10:1d:
38:6b:f7:e9:8b:48:ad:c0:63:50:c0:ef:41:ff:53:d6:15:ec:
5f:8a:40:82:cc:71:70:e7:48:84:81:d2:34:8d:d0:d5:5b:a3:
ec:ce:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:12 2024 by rpki-client on console-fra.rpki-client.org