Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48tIhAJO43p6ace6TtjR6PQU_I8.cer
File: 48tIhAJO43p6ace6TtjR6PQU_I8.cer (raw, json)
Hash identifier: pP2VLx40fftnPtuiqhbHTVBmiDTm6vhMe7KJPJBiwOs=
Subject key identifier: E3:CB:48:84:02:4E:E3:7A:7A:69:C7:BA:4E:D8:D1:E8:F4:14:FC:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189BB3FA452E0F67CAD6DF2740819E67219
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/6f1d6c-ec32-4eb3-ad30-9973e136b247/1/48tIhAJO43p6ace6TtjR6PQU_I8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/6f1d6c-ec32-4eb3-ad30-9973e136b247/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 03 Aug 2023 11:54:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a11:3d00::/29
Validation: Failed, certificate revoked on Fri 18 Aug 2023 09:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:3f:a4:52:e0:f6:7c:ad:6d:f2:74:08:19:e6:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 3 11:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3cb4884024ee37a7a69c7ba4ed8d1e8f414fc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:f9:8e:bd:73:63:a9:85:73:45:ab:db:25:
5e:0a:3e:1b:a1:d1:82:68:b6:1f:8c:c6:30:f0:f6:
2b:88:62:57:e4:8b:6f:35:37:de:5f:27:d9:53:e0:
20:c0:5f:5c:53:5e:af:ee:45:67:00:d8:13:d8:a3:
9f:4b:bd:c5:1a:be:a4:74:da:46:8e:22:14:a3:59:
df:07:85:8f:3c:ee:69:71:f5:b5:18:11:ef:8f:96:
fe:55:be:10:fc:2e:ca:eb:f0:6e:d5:56:56:58:c1:
ed:92:7a:28:0a:ca:ef:24:1c:1d:a9:42:d4:5c:f1:
42:4f:c6:50:c8:a2:a8:57:bd:97:45:b8:a2:74:80:
80:1e:76:6c:c7:1e:fc:4c:ae:37:a7:ad:ad:04:7f:
4d:67:2e:f3:6b:39:6e:f0:bc:e5:96:80:35:7a:dc:
13:5c:7f:a5:e7:74:4b:f5:62:7b:09:a6:52:7a:b9:
e3:f0:00:be:52:95:28:0c:42:b3:7c:67:8a:7a:30:
fb:e8:33:14:f1:e1:b0:66:b7:2a:cb:bb:c2:c5:f9:
3a:54:b9:f6:04:05:ca:31:c3:0a:7c:96:64:63:08:
0c:6f:6c:2e:6e:9a:d7:0b:ce:8c:19:4e:21:3d:fb:
71:d2:05:be:39:04:e2:11:07:73:14:d2:40:f9:d1:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CB:48:84:02:4E:E3:7A:7A:69:C7:BA:4E:D8:D1:E8:F4:14:FC:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6f1d6c-ec32-4eb3-ad30-9973e136b247/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6f1d6c-ec32-4eb3-ad30-9973e136b247/1/48tIhAJO43p6ace6TtjR6PQU_I8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
43:4e:30:28:be:e2:1f:14:f0:ba:a3:7b:2b:44:5d:d0:db:63:
8a:3f:d6:b0:ef:8e:07:ea:4e:c4:2c:22:f2:57:e8:2c:5d:b5:
42:8b:4a:83:ef:0c:28:78:18:08:20:0d:68:8c:73:40:07:fd:
bd:db:14:6f:16:e6:e3:18:31:ee:01:53:f3:51:0c:f3:90:7e:
4b:aa:5b:89:9b:40:dc:c5:7f:25:2e:ef:20:01:f1:94:87:f5:
f4:eb:b5:70:fd:1a:b4:a3:2e:4d:03:dd:94:62:ef:3b:0d:88:
b0:ed:b5:0e:1a:4b:bd:7d:a9:6f:1b:8e:7c:fe:44:59:7f:08:
51:03:bd:8b:6a:86:d9:7b:3d:2a:f4:56:d4:38:e0:6a:06:2c:
fc:ca:14:62:18:e6:45:d3:48:0f:85:40:be:bf:be:d3:7e:0a:
68:c7:32:f2:aa:ca:a1:38:b4:05:76:18:6d:c6:84:ec:cf:31:
81:5b:38:44:f7:b1:6d:60:d3:dd:cf:30:3f:d8:49:d5:5f:58:
fd:fc:e3:83:af:1b:8e:43:a7:bb:10:9c:d3:13:75:eb:f4:b7:
76:5f:a8:46:f9:a9:21:ef:28:6d:42:b7:07:04:b0:c7:be:a3:
e6:cc:80:7f:41:eb:a5:32:dd:d1:71:51:35:6f:33:8f:12:21:
90:fc:18:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:42 2024 by rpki-client on console-ams.rpki-client.org