Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f0VWwjuGg3zykGFdeo6-QGoKFM.cer
File: 6f0VWwjuGg3zykGFdeo6-QGoKFM.cer (raw, json)
Hash identifier: rpLefb0zesedJEIcIdKSg7s9T13RSL3w//oY8/7INUI=
Subject key identifier: E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7E84BAB4B0535488D89EA29F7E4C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/6f0VWwjuGg3zykGFdeo6-QGoKFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:34:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.191.144.0/23
Validation: Failed, certificate revoked on Wed 20 Dec 2023 08:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:e8:4b:ab:4b:05:35:48:8d:89:ea:29:f7:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:34:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9fd155b08ee1a0df3ca418575ea3af901a82853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6d:1d:93:e3:6f:08:a5:aa:36:09:cb:60:e0:
68:42:dc:d7:13:1f:ef:bc:0e:59:7c:2f:32:a8:42:
e4:66:66:f4:57:63:e5:9c:1f:7f:7a:3e:aa:96:ac:
36:60:e5:c3:9a:57:be:fd:72:b9:e6:f9:9a:56:bd:
07:ac:46:6b:5e:b0:36:ff:da:e5:52:85:75:43:9a:
54:9f:5d:ef:8c:6a:4e:8e:03:88:b0:4f:cf:cc:05:
1a:8e:0d:28:10:3a:49:bc:c0:f0:55:ab:d9:f8:16:
82:4c:64:15:5d:e4:b9:2b:1b:39:8c:8a:ad:2f:a9:
d6:da:d6:5c:bf:fd:0c:8a:3e:75:17:66:26:19:d4:
82:e6:70:4e:cd:fb:49:7c:2a:01:96:7e:1c:fc:b7:
8c:c0:69:5f:57:05:62:bd:55:ea:66:8b:88:2d:a0:
7e:c3:f6:67:30:d9:8c:40:92:9a:bb:67:bd:c1:87:
19:ef:9a:f6:d7:2a:a4:ba:ad:30:17:17:60:17:c3:
38:cc:8c:17:08:c6:c0:a3:04:0e:2d:94:0f:ef:8e:
a6:c4:02:ca:e1:09:97:12:76:91:5d:40:0e:3b:85:
3f:e4:62:2f:93:94:87:9a:d5:5b:d8:d7:68:13:29:
0b:d9:7b:0e:3d:d5:3d:da:6f:52:7d:76:f5:f0:6f:
a2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/6f0VWwjuGg3zykGFdeo6-QGoKFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.144.0/23
Signature Algorithm: sha256WithRSAEncryption
07:98:03:f5:44:c0:f5:48:eb:08:35:ca:60:e3:6a:4b:ad:9e:
f4:7a:31:2e:46:63:b4:dd:bc:4e:da:db:d3:6c:73:53:34:6b:
95:80:21:56:95:a8:f9:b0:9f:9e:3f:de:71:a5:fd:d3:b6:61:
e4:3b:45:b3:2e:4e:8b:cb:f9:90:e4:6c:bf:2a:8c:7f:45:1e:
6d:7a:86:e4:17:0d:e4:1c:60:53:ce:49:3d:f3:84:9e:17:d4:
67:0d:46:af:85:b5:74:69:2d:90:ef:7e:e8:65:09:54:af:02:
83:63:b5:65:7e:f8:7d:97:68:ef:1e:3e:8c:d8:ac:03:93:a5:
a0:1e:70:45:68:4a:df:6a:55:e4:a3:c8:d4:7b:a9:75:43:5a:
be:62:82:b6:ec:23:f4:d7:0a:7a:01:ee:af:6a:9e:82:44:c0:
18:44:17:02:d2:61:54:3b:d1:f2:ed:7c:44:8e:bd:3d:81:3e:
90:5f:13:06:c3:58:5f:28:27:b3:c7:13:1d:61:12:39:70:a0:
ad:fb:b5:48:fa:5d:09:84:d2:35:69:bf:ac:ca:e8:3f:d3:3f:
ff:14:b4:e0:73:96:c0:09:c7:57:5e:5f:09:68:11:e5:76:b1:
07:78:b0:a4:b2:52:b0:78:b5:b5:11:56:08:97:e1:74:b4:1b:
9e:09:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:25 2024 by rpki-client on console-fra.rpki-client.org