Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
File: AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer (raw, json)
Hash identifier: k656bedwPZAf1l4nJ25/PHFhs63v+6Rg54jjat79XLU=
Subject key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A2C6223BBEC566D69EF9E6F1F1A7D4420
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Aug 2023 11:09:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.64.142.0/24
IP: 2a13:bd40::/29
Validation: Failed, certificate revoked on Wed 01 Nov 2023 13:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:62:23:bb:ec:56:6d:69:ef:9e:6f:1f:1a:7d:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 25 11:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:e4:e7:1a:3d:a6:8d:08:2a:21:d3:c9:a4:
85:7b:ce:41:df:12:02:c1:17:1b:6b:c1:0c:c9:3b:
28:f2:78:c1:c8:05:93:18:d9:4e:33:6d:21:00:b3:
25:92:74:ea:98:d7:f4:2b:8f:c1:45:45:6f:fa:22:
49:7f:da:36:88:e9:37:45:4c:33:f9:7b:a5:59:d7:
94:1e:ef:2a:ea:0b:59:92:9d:31:05:3e:cc:57:87:
59:76:7f:6d:0b:ba:87:d5:d8:d3:dd:51:07:6f:6d:
02:4f:4b:49:2b:3b:f9:bf:b2:d6:9c:22:2a:e9:52:
8a:f5:68:c3:ac:83:8d:79:f4:a9:52:c0:cc:e8:b2:
3b:ab:b7:5c:a6:88:7f:d1:cc:d7:03:60:f8:33:96:
75:26:c3:dc:74:09:7f:ef:0f:17:08:9f:be:e7:b4:
fc:94:83:4b:2c:f5:cd:4a:af:19:04:d7:b1:b4:c0:
68:6e:b3:a2:68:b2:22:9c:de:51:a2:4c:84:03:58:
12:a8:58:f4:c1:07:f7:3f:97:fb:98:28:6d:46:46:
2d:06:83:10:e6:1f:2d:75:33:86:2e:c5:60:40:cc:
1f:dd:42:61:79:8e:dc:b1:a9:ae:57:92:8f:3a:b5:
d2:2e:a9:59:6e:dd:b0:f3:e9:46:57:1b:4b:85:70:
8b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.142.0/24
IPv6:
2a13:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
a9:fd:c2:33:48:2c:da:b1:0d:73:b3:23:9f:52:52:65:81:76:
b0:3f:4e:9b:a6:02:7f:34:a5:fa:0f:81:92:47:af:8f:3c:ce:
90:fa:00:01:37:6f:67:95:ab:64:7f:ad:da:84:5d:f2:d0:50:
5a:12:54:e6:29:7f:4e:ff:a4:da:ab:82:cb:53:11:0b:d9:ae:
23:d6:4e:f4:75:8a:9f:4b:24:70:9f:0f:67:3d:5f:25:27:da:
83:02:7c:56:25:d5:e8:6f:4c:42:bf:0e:db:0a:ed:d1:1a:f7:
fc:88:1c:1d:1d:42:18:ad:c2:fd:3d:18:d8:4e:49:14:81:1c:
26:09:b2:a9:75:ab:43:bb:14:6c:0b:72:52:be:05:5d:14:48:
a9:63:26:e5:1f:5b:22:90:59:e4:f7:03:ce:99:07:3f:ef:21:
1d:52:bb:1c:fa:47:5a:5f:bc:26:20:ba:41:dc:21:18:b9:10:
75:78:9f:64:cb:80:b7:11:20:f8:29:40:b9:5f:c0:f7:bf:da:
91:69:f8:1b:96:b8:98:36:28:1f:32:84:4e:60:f1:54:80:43:
d1:ce:3f:f8:b6:d4:6a:2b:cf:2f:da:95:cf:09:10:6f:7e:64:
e6:ca:bf:27:98:9d:8d:19:c0:b0:c3:50:67:f9:aa:22:22:2d:
2a:20:22:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:06 2024 by rpki-client on console-ams.rpki-client.org