Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ALjVYfyCYtFrdG36o3TsR0ZvW8A.cer
File: ALjVYfyCYtFrdG36o3TsR0ZvW8A.cer (raw, json)
Hash identifier: u1iTxOT/pLhtyxQuBMboZJ36nfxY+d4/6h/GsHCAIVw=
Subject key identifier: 00:B8:D5:61:FC:82:62:D1:6B:74:6D:FA:A3:74:EC:47:46:6F:5B:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E650B46F1E88C55E03858EF5BEBA9D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.133.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:0b:46:f1:e8:8c:55:e0:38:58:ef:5b:eb:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00b8d561fc8262d16b746dfaa374ec47466f5bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:1d:80:d3:bd:ff:56:d6:cb:7d:2e:25:1b:
e0:0f:32:d8:5e:cb:aa:db:3e:b5:c8:24:29:41:05:
e4:18:3c:b2:a0:8d:61:1d:91:67:1e:4a:66:b3:8e:
1e:b4:65:2b:4a:54:d6:e4:b0:80:67:30:82:d8:37:
e7:3a:e0:f2:cf:de:76:80:35:d1:2f:a2:0d:b8:a0:
0a:28:93:be:d8:6a:12:52:c0:82:53:15:64:b9:67:
99:e7:b1:48:8a:71:b0:1f:8f:88:cf:26:6a:fd:5f:
24:7e:c2:60:03:11:e2:88:d5:06:cc:52:ca:fd:f1:
9b:00:cd:f4:71:78:a2:17:94:80:47:2a:9e:b9:19:
81:bb:75:77:b4:67:cb:e4:6c:61:65:58:35:35:fe:
f3:ca:dc:32:8d:7e:cf:65:97:5c:c6:9e:4c:03:36:
0a:b7:2c:f0:8c:e3:1b:85:d6:a9:11:95:08:03:ea:
7c:41:71:55:9d:1f:8a:e4:4d:e9:90:e8:fc:18:bb:
12:bc:24:db:4c:81:d0:f1:8b:5f:4e:8c:1a:2c:9e:
90:ad:21:91:71:e0:0e:a9:f7:ed:d3:ca:9f:78:15:
9d:1a:19:11:f1:4c:be:30:f3:eb:0a:23:f7:62:d9:
83:47:fc:65:0b:9e:82:9c:74:d4:6d:97:67:a4:33:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B8:D5:61:FC:82:62:D1:6B:74:6D:FA:A3:74:EC:47:46:6F:5B:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9a06b9-6bd5-4a75-a57b-bf3a717de744/1/ALjVYfyCYtFrdG36o3TsR0ZvW8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.133.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ec:d5:e7:2c:2b:97:92:be:15:64:1e:c2:88:85:15:0e:91:
e5:94:41:e6:ca:ee:7f:08:79:38:65:29:0b:b8:04:a1:02:f0:
e8:9d:b7:b7:22:72:58:93:26:07:d3:bd:8c:ab:2d:4d:c1:6c:
d1:fb:5c:62:bd:ce:ab:d8:c9:d3:9c:42:3b:4d:54:5f:51:08:
51:4b:25:a5:cf:53:65:94:8c:01:d0:20:d1:27:7d:4f:74:44:
d5:21:59:29:05:b0:86:12:f0:c5:9f:57:10:d9:35:b0:7f:5c:
eb:40:0b:90:4a:35:78:dd:4f:fe:2d:b9:2c:36:77:1f:83:a3:
dc:85:03:a7:1a:d0:a5:36:2e:c1:bc:87:27:fd:43:e8:33:2b:
d3:fb:e6:98:84:90:e0:79:cd:ba:2a:88:d4:4c:68:92:e6:0b:
42:1c:64:45:27:ca:b5:fe:bd:f2:ee:e7:fc:d4:27:52:b7:46:
64:39:30:b4:d9:82:1a:42:12:79:aa:5d:2b:63:fe:39:5e:19:
4f:dd:16:e7:9a:1c:e0:28:ac:c8:79:1c:b7:2f:ae:53:b9:79:
59:eb:fd:b0:94:2d:ed:b1:d2:0b:4c:ef:c7:26:34:5c:6b:6c:
8e:29:4b:58:8b:2c:c5:cd:e4:9c:7b:e9:44:68:7b:5a:b5:ed:
13:b2:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 08:09:29 2023 by rpki-client on console-fra.rpki-client.org