Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a2RT4topW719o55n1bdza7uC8w.cer
File: 8a2RT4topW719o55n1bdza7uC8w.cer (raw, json)
Hash identifier: QHGwRfm29Rpmh7s0RXQ1gO0Tgt+cbPWRwZ3er1wuXF0=
Subject key identifier: F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F60C209D197936D13EA8385EA3B29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8a2RT4topW719o55n1bdza7uC8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.85.254.0/24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 08:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:60:c2:09:d1:97:93:6d:13:ea:83:85:ea:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1ad914f8b68a56ef5f68e799f56ddcdaeee0bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:e9:17:d5:44:83:fc:69:1a:bc:58:ab:75:
37:5d:da:1b:1f:c6:b4:02:70:17:db:18:3d:6f:a6:
78:30:e0:96:f8:2e:10:68:a3:2d:c4:fd:c5:c9:46:
cb:05:85:43:21:bc:14:cc:8f:3d:b9:c1:51:21:48:
39:50:ea:3e:0d:e6:a3:43:2f:76:7b:82:10:5a:3c:
82:11:48:5a:04:7b:43:fb:fb:bc:6d:9f:eb:c4:03:
18:92:59:f3:5f:b5:62:32:71:e0:88:6c:6c:1d:bc:
cd:ba:39:aa:d2:34:53:c0:8a:da:63:5f:8f:06:98:
ff:77:1b:a9:df:2f:be:0b:d4:01:b3:3a:8f:dd:02:
e7:3b:ba:15:9e:02:5e:76:24:2e:85:b3:02:ae:cd:
3f:b4:e4:74:e2:56:74:37:f7:7b:5a:20:6a:6c:9d:
f1:91:4a:b4:95:82:d6:f1:d0:d5:67:af:06:e6:f4:
3d:b9:72:d2:67:19:a6:3f:88:1f:c8:52:d1:bd:27:
8f:67:c4:ee:0a:4d:84:fd:b0:6b:d8:df:83:e6:ff:
30:2c:aa:51:98:1e:f6:82:15:f9:95:56:3e:f3:c5:
de:f6:26:bf:70:e3:27:62:0c:e1:14:58:8b:d9:e7:
0c:12:fa:32:85:35:28:db:d9:6c:e0:f3:f8:58:24:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AD:91:4F:8B:68:A5:6E:F5:F6:8E:79:9F:56:DD:CD:AE:EE:0B:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d0f6f5-a9a1-4ed9-a4c3-fd2e04bb01e7/1/8a2RT4topW719o55n1bdza7uC8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fe:b2:e2:36:26:88:cd:26:ff:a9:61:a8:9d:5f:4b:96:c5:
4f:67:19:5e:fd:f0:65:07:15:8e:7d:27:c6:37:62:ab:a3:a8:
84:c8:eb:35:b6:e7:58:93:d6:45:37:62:db:52:78:fc:f5:2a:
ac:24:4f:6b:49:ca:1e:3a:99:af:39:23:12:8a:f1:f0:f9:b2:
81:94:11:b3:c5:38:93:2d:ef:9f:e4:7f:c6:0b:bb:f8:88:ed:
91:64:93:0b:17:5e:46:49:3a:77:a0:61:45:7e:35:0b:f7:ae:
dc:05:1c:6e:dd:d3:b8:94:1f:6e:04:4f:2e:b7:98:a3:ae:53:
74:f1:f3:63:64:fb:38:a4:20:af:50:85:73:98:91:72:df:b9:
e6:e1:37:19:69:3e:25:1e:8d:93:e0:e0:1b:91:f1:6a:89:17:
61:35:24:d5:88:67:bd:53:15:f2:58:9a:7f:c6:0a:41:d8:bb:
08:ef:67:3a:32:62:62:6c:70:a0:5b:ec:12:e6:3f:a5:8a:7d:
43:e6:54:c3:50:98:29:95:f1:b3:6c:93:39:f8:63:96:2c:92:
12:d3:ed:2a:de:5a:64:85:e9:c9:ab:b5:98:be:e6:fa:80:a0:
7c:81:76:94:89:3b:91:73:f4:23:c9:ff:8c:9b:36:cc:54:9e:
2d:1f:a3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-fra.rpki-client.org