Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RRbGi9oE1UCjLYqtleBGBsYZko.cer
File: 9RRbGi9oE1UCjLYqtleBGBsYZko.cer (raw, json)
Hash identifier: 5a1KF/t4/bQLV+Gxu9viVMH78UliB9ggkfzfFYQuaiA=
Subject key identifier: F5:14:5B:1A:2F:68:13:55:02:8C:B6:2A:B6:57:81:18:1B:18:66:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E6532499022062A233A0CBFEEADD175
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/9RRbGi9oE1UCjLYqtleBGBsYZko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:4bc0::/29
Validation: Failed, certificate revoked on Wed 12 Jul 2023 09:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:32:49:90:22:06:2a:23:3a:0c:bf:ee:ad:d1:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5145b1a2f681355028cb62ab65781181b18664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:c8:05:09:ea:d8:7b:11:5a:a2:f7:69:71:
92:7d:96:bf:7b:49:99:48:73:e0:c7:e5:78:b9:cb:
a7:8c:e4:31:8a:57:ad:9c:56:bd:e0:46:0b:93:4a:
54:d2:69:54:b3:1e:be:57:43:7d:b4:e6:0d:4d:39:
e7:a0:46:c5:32:88:b2:ce:0d:89:38:58:80:6d:05:
bc:72:42:2a:3b:19:5c:7a:bd:f0:03:db:b2:b6:00:
0e:f5:0d:28:07:73:af:d7:c1:23:6e:3d:93:d9:b5:
b9:26:9e:5e:04:a4:0f:67:ae:24:49:77:dd:dd:30:
e7:d2:23:d2:f8:d8:74:ff:ec:45:01:5a:b1:25:c1:
40:13:f4:de:4c:80:8f:b2:62:f0:93:76:aa:e6:cb:
23:99:64:b3:90:82:6f:5b:8f:96:42:26:70:ef:94:
3b:18:d9:ab:03:45:c8:a2:1e:9a:0a:0f:24:af:eb:
07:e5:9b:5c:7a:6e:ed:ba:91:47:c1:ab:ad:c5:ec:
75:b6:ee:5f:a6:42:a8:56:ac:25:d8:e7:3e:4d:d0:
3d:cd:eb:69:49:d8:4c:22:b9:14:0c:56:66:77:c5:
ca:15:bb:4c:34:4e:37:b1:25:02:cc:2a:6a:b0:86:
32:78:e9:8e:c8:dd:0e:cf:8e:35:37:e9:68:ff:46:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:14:5B:1A:2F:68:13:55:02:8C:B6:2A:B6:57:81:18:1B:18:66:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c050ea-0e26-4ef2-9fb9-345554f65a24/1/9RRbGi9oE1UCjLYqtleBGBsYZko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4bc0::/29
Signature Algorithm: sha256WithRSAEncryption
66:84:9a:0e:53:c5:ab:ef:e9:c7:bd:49:84:53:47:98:f1:f7:
37:66:08:e7:20:94:d9:c2:87:ba:e2:d0:97:d7:63:35:ff:84:
73:ba:66:44:9c:00:63:e7:77:72:e9:0f:ba:8f:08:25:0d:53:
2d:9d:3f:c0:e5:5f:29:6f:f7:17:1a:c3:4d:74:81:f3:a1:fa:
0e:4b:f5:06:9a:71:4e:8c:09:eb:73:52:25:2a:ed:70:82:de:
35:05:62:5c:ea:d2:1b:a9:35:6f:18:49:e1:de:20:06:c9:df:
30:6a:d1:79:fa:d3:ee:f9:ef:3a:cd:f5:16:e9:d8:f2:82:c2:
5e:83:d6:0b:fd:54:eb:93:61:26:af:7d:a4:8f:70:4d:45:fd:
7e:60:e2:ab:55:f9:f1:11:7c:57:51:b7:96:80:63:8c:f2:7b:
5b:c8:de:3c:d1:9b:1f:90:7c:8f:8e:9b:bd:43:02:a3:cd:7b:
d1:6a:c4:80:8e:38:e3:b2:17:d1:72:29:34:1e:d6:cb:ba:81:
ac:42:48:8a:44:cd:7c:30:bc:94:1b:10:96:44:3d:e1:06:24:
57:27:bc:2e:19:33:a2:3e:f7:d9:5b:9d:76:72:96:9e:50:db:
e0:a5:8a:7f:cb:5e:1b:bc:44:78:c6:6d:b5:e1:b9:2a:da:6f:
6d:50:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:27 2024 by rpki-client on console-ams.rpki-client.org