Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
File: 92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer (raw, json)
Hash identifier: nB4HO6kDj6ldCb4DMUHiakJGyxCzaZ44WSWpHl/4kfM=
Subject key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBCCF9A40FD438462FAF8ADC145381
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.24.240.0/21
IP: 185.55.244.0/22
IP: 2a02:42a0::/32
Validation: Failed, certificate revoked on Fri 19 May 2023 14:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:cc:f9:a4:0f:d4:38:46:2f:af:8a:dc:14:53:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:b1:f8:7d:31:b0:31:39:f6:84:5f:bf:a0:
c5:ff:e3:2e:f2:4f:79:a1:95:bc:c9:0c:8f:fb:57:
6d:5e:d4:c7:45:b6:ac:55:b4:c6:7a:f0:e1:a2:b1:
6c:eb:ed:4b:eb:7b:5c:22:b7:5d:10:c2:63:1b:11:
1c:bc:5e:97:51:18:6a:41:f5:95:d1:67:59:6b:d4:
3d:aa:e9:f0:73:42:18:b8:27:fc:cb:ea:c5:02:c2:
3d:c0:2d:d1:8d:76:4b:c1:0b:07:94:20:82:d7:19:
a8:9a:f8:dd:23:61:94:94:9d:21:87:f7:62:70:d4:
00:4d:c7:1b:9f:cb:91:9b:3b:35:a4:0d:c9:59:23:
d9:89:32:64:e0:02:03:33:e3:9d:5f:f8:fa:6f:81:
d2:a9:64:22:7b:7b:d7:e0:88:2f:e8:52:5b:d1:77:
1f:c8:06:7f:9e:a0:94:a6:c0:a4:9e:d6:ed:d7:f1:
33:41:ed:0d:9a:40:60:a0:e6:ce:93:9b:bb:47:ac:
47:9b:a3:fd:73:cf:17:bc:ab:2f:42:15:60:4a:99:
93:62:e9:d5:32:dd:29:78:21:46:62:c3:02:8d:fb:
51:c6:db:f2:43:50:a5:f7:9d:37:cd:32:65:70:b4:
2e:ae:17:6b:f2:a8:85:2d:c3:95:8a:f1:de:27:10:
44:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.240.0/21
185.55.244.0/22
IPv6:
2a02:42a0::/32
Signature Algorithm: sha256WithRSAEncryption
22:f0:b9:7d:87:63:3a:9b:30:1f:d7:4e:f8:47:ee:28:2c:b8:
d3:d5:8b:7f:e8:83:7c:e0:1e:15:a2:9b:33:c0:58:2b:63:43:
49:ca:89:15:73:20:4e:39:fc:b4:0e:40:56:8c:db:db:97:9b:
2b:32:c9:65:5b:62:98:15:7f:97:54:f5:bc:06:3e:b9:f0:e6:
f5:75:0a:4e:63:2a:6f:69:71:98:fc:61:85:de:5f:29:12:87:
64:1f:77:cd:c9:c1:6e:cc:d8:4c:62:ed:7f:ba:18:c2:af:16:
61:71:c1:e1:bf:b7:1c:06:ea:01:e9:84:00:2b:ea:4f:3d:7f:
d1:70:80:a9:8c:38:11:b0:7f:b0:45:56:85:c6:5d:39:73:ff:
2f:3e:55:81:36:6a:7a:ec:a6:33:7e:b3:2e:00:d0:11:d8:4c:
69:f2:1c:c7:e1:55:da:3e:8e:aa:f3:4a:f0:f5:7a:2f:0b:67:
a8:c2:f0:25:09:e8:6c:c2:79:7c:d8:db:a2:d6:30:ac:2a:98:
25:b8:a7:a2:da:5c:32:54:5a:b6:a6:4a:fa:68:48:e6:f7:e3:
47:17:89:af:a3:90:47:64:b3:2f:b8:3a:11:be:07:54:ae:44:
92:94:15:62:37:ac:31:aa:f7:48:5a:83:66:22:ee:7a:01:6d:
fd:e2:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org