Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAsYihpAvWavvaCQnvphISW8igI.cer
File: AAsYihpAvWavvaCQnvphISW8igI.cer (raw, json)
Hash identifier: 382t0+ZI+Gq7WHMsUJLaTcNuysW+/VZ6jfErinXrW5o=
Subject key identifier: 00:0B:18:8A:1A:40:BD:66:AF:BD:A0:90:9E:FA:61:21:25:BC:8A:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ADB0CF6AAB0A2D399D466AAF24FAB68E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/4/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Thu 28 Sep 2023 09:09:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.32.86.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:0c:f6:aa:b0:a2:d3:99:d4:66:aa:f2:4f:ab:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 09:09:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=000b188a1a40bd66afbda0909efa612125bc8a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:24:a2:17:2a:66:26:a5:7d:de:58:82:4c:
29:89:0e:f2:e6:95:d3:4a:bc:47:de:7c:03:ea:15:
b1:ff:eb:54:83:e9:2b:56:68:47:e0:78:13:0e:06:
1c:f7:e7:22:80:0e:bb:81:9d:61:13:64:8b:7d:25:
3f:e6:cf:cf:9d:9e:a3:a5:38:5d:3d:e4:54:4a:1c:
30:b9:0b:5c:cf:8a:f2:42:27:ad:63:86:c5:c2:d7:
58:0e:a2:d8:50:97:de:20:67:45:c6:21:fd:16:3b:
a0:b8:c8:a1:a3:88:ba:15:cc:4c:bb:77:ee:36:94:
82:96:ba:71:64:eb:ca:32:ef:4d:0a:bb:d6:f3:05:
f9:f8:4e:00:46:79:be:a9:1b:7a:92:d3:bd:2c:c1:
b1:a7:f9:15:b2:77:72:4e:4f:a1:ed:f4:62:39:ef:
3e:28:09:a8:3b:dc:0b:96:1e:15:75:77:13:7b:4b:
79:28:ee:f8:20:5f:49:ca:c8:39:3e:40:dc:7c:a7:
b7:82:4c:b9:8e:da:04:c3:ca:d1:6a:94:f6:53:4a:
0b:81:ae:3c:cf:dc:d9:d4:e7:23:f3:f0:92:12:50:
a0:73:16:93:47:d4:10:b3:13:09:30:62:6d:02:79:
a5:bd:8d:40:40:e7:66:75:ee:8c:97:f7:3f:63:75:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:18:8A:1A:40:BD:66:AF:BD:A0:90:9E:FA:61:21:25:BC:8A:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/4/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/4/000B188A1A40BD66AFBDA0909EFA612125BC8A02.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.86.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bf:00:3b:6d:d2:02:d2:ec:74:a8:7a:ed:61:86:9a:21:89:
67:b4:42:3a:47:a0:2f:9f:33:fe:76:71:1c:21:f9:7c:25:4e:
08:42:04:10:ce:e4:00:52:57:bb:a7:6c:0d:0c:28:c6:3b:0f:
ea:ef:51:c1:0d:89:82:bf:0a:ce:a0:f6:9b:ca:20:f8:0a:33:
10:97:66:ab:e3:c3:bb:5d:9c:6e:00:15:49:29:f8:9e:4e:17:
0c:57:0b:09:1c:d4:1a:c2:b3:90:ae:fe:99:b7:95:39:8a:5f:
7e:e9:49:26:8f:3d:7b:7e:33:e8:9e:5d:38:0b:b0:ec:fd:cf:
0e:22:93:30:7e:d1:b8:59:2b:21:8b:4d:1d:f6:cb:c0:d2:86:
f1:52:18:07:cc:73:da:69:70:97:4c:45:1c:27:da:1f:d2:c8:
bd:89:1c:4b:c7:13:25:72:11:70:1c:e8:5c:f2:9d:c5:4d:b9:
06:e2:36:a8:e1:7a:78:ad:40:9d:3d:7b:73:6f:19:c3:76:f6:
8b:76:df:51:25:84:0a:e8:dd:82:99:a0:b7:46:f6:f6:22:80:
d1:ef:c9:f2:1c:7d:17:64:86:9b:be:2f:6e:0c:27:05:11:79:
80:60:bb:ca:ec:a9:41:06:f3:ad:a2:8b:d4:e5:10:d2:15:8f:
f3:69:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:07:36 2023 by rpki-client on console-fra.rpki-client.org