Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6wa2BDHWwnqB2IudCDBMupyIFDM.cer
File: 6wa2BDHWwnqB2IudCDBMupyIFDM.cer (raw, json)
Hash identifier: zxzNg8/K/AV7pek68PPpzZ0Ad/14t+4l13J/hxDOTV8=
Subject key identifier: EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAC3936BB6DA89D86E2B29D31252A47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:31:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.227.0/24
IP: 2a11:aac0::/29
Validation: Failed, certificate revoked on Mon 30 Oct 2023 10:52:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:39:36:bb:6d:a8:9d:86:e2:b2:9d:31:25:2a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb06b60431d6c27a81d88b9d08304cba9c881433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:ff:a7:55:76:ad:c9:ad:2f:08:d2:72:9c:
57:66:20:82:89:80:66:86:09:8e:2e:91:68:a9:0f:
03:cb:09:7f:ce:1b:0a:23:dc:2c:d1:0e:32:6b:53:
76:10:69:f0:98:52:19:8b:fe:78:7c:16:27:51:2d:
af:93:90:20:2e:ea:40:a3:b2:84:03:86:b7:43:7f:
f8:a7:09:6c:53:1d:01:f9:65:6a:99:43:3d:bb:04:
e7:07:01:09:99:35:b6:62:a0:7c:c2:21:3d:e9:2e:
46:8f:cd:7e:df:b4:8e:bc:c9:74:6a:6b:0f:05:66:
c4:c0:c8:9c:64:a6:fa:7a:01:11:46:52:2f:53:25:
03:24:38:f9:c9:65:23:96:66:27:30:a1:c9:d3:92:
06:3d:1a:f8:05:f4:f0:e5:4d:c5:55:3d:38:60:b9:
42:00:4a:d1:52:8a:3e:0c:b0:56:50:67:b3:bf:07:
47:e6:37:bc:3e:38:19:63:fb:fa:98:a0:ef:8a:5e:
f7:8b:70:da:23:84:16:f5:12:66:e1:70:a3:8d:d0:
0d:09:f1:85:8e:4b:37:36:4f:ac:17:13:c6:21:af:
01:0c:61:12:f8:c0:8c:16:44:d4:4c:e6:21:db:b5:
ba:ec:00:4a:90:14:89:90:ef:91:ef:df:50:3a:92:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.227.0/24
IPv6:
2a11:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:24:1a:c7:62:80:b1:dd:0e:76:f0:c6:43:8f:bb:37:d8:37:
22:df:ac:58:11:68:aa:ba:d8:18:07:12:3d:f3:2e:a5:de:b7:
a8:29:1f:19:2f:84:a2:c7:d2:eb:60:a6:30:2c:c8:c7:73:ec:
c6:5f:72:ea:15:93:56:4d:8c:9a:bb:9d:fe:bc:f1:e4:4b:11:
ca:cf:27:c7:26:21:57:af:fc:94:4b:ed:d8:3d:49:83:e7:3e:
64:3b:9f:c4:d8:2c:c8:40:f8:fd:c0:18:1d:73:a5:4b:c5:45:
f6:1d:52:55:64:db:53:5e:45:ab:3c:ac:ae:3a:d4:f3:49:0c:
43:8e:bf:80:d0:97:13:1c:50:78:10:53:32:ff:87:dc:31:f3:
5b:e4:9f:16:a7:2f:e6:ef:12:4f:3f:f0:32:2c:10:2e:c1:e7:
12:96:12:16:ca:61:2b:68:c2:c5:c4:ea:2f:10:ec:ba:56:1b:
e8:8f:4a:10:a8:74:87:7a:9b:90:aa:ca:da:73:2c:be:47:0f:
60:de:37:a6:d2:ec:9d:2b:d8:64:41:9c:4e:4a:d0:f7:bb:c0:
a2:8c:c1:67:50:72:ca:ec:9d:ab:92:71:de:a3:f8:d1:e9:a4:
a0:23:f8:be:5d:5d:21:7f:b2:04:2e:7a:4c:0e:76:0b:9d:36:
98:22:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:10 2024 by rpki-client on console-ams.rpki-client.org