Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BBoNAIW4knA5aKsT3WZb1oIW87I.cer
File: BBoNAIW4knA5aKsT3WZb1oIW87I.cer (raw, json)
Hash identifier: GLkXgcYE9ZkAk9MpsiZ/PYGfIDtNVxVV73h8u1K2p+0=
Subject key identifier: 04:1A:0D:00:85:B8:92:70:39:68:AB:13:DD:66:5B:D6:82:16:F3:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D105639A2D33A5B942B46CB56F690
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192/041A0D0085B892703968AB13DD665BD68216F3B2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.173.0/24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 07:22:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:10:56:39:a2:d3:3a:5b:94:2b:46:cb:56:f6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=041a0d0085b892703968ab13dd665bd68216f3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:9c:e4:32:39:d8:c9:de:0b:1b:95:c4:27:
30:52:1f:59:ff:68:d0:b1:33:49:c2:ed:a2:b0:38:
74:49:ac:9f:5c:7a:6d:29:06:bf:0e:e4:a3:5d:3b:
86:5d:25:1f:50:28:a5:88:8a:4b:0b:c3:46:48:90:
72:78:77:eb:d3:e8:c3:93:3c:d5:52:f5:9d:b8:fe:
45:54:46:7b:02:a7:b4:89:32:3f:9c:9c:57:f5:71:
d2:2b:48:62:af:67:35:24:47:32:fe:a3:0b:10:12:
22:86:dd:a9:85:01:9a:45:90:44:43:8a:0d:42:63:
cf:ea:ad:0d:45:2c:fd:41:a9:48:e2:09:53:fd:ba:
3c:b5:22:9f:97:30:3d:49:be:0e:dd:76:41:1d:03:
1d:e8:55:ed:6f:56:0a:e3:dc:f6:a4:91:6c:a4:d2:
67:bf:a6:5a:33:9f:9d:e9:35:58:86:3a:29:82:9d:
b6:7c:72:e3:4a:0d:e3:bd:42:b3:96:f6:13:5e:ec:
17:5b:ff:6b:1f:eb:2a:cc:d9:4b:d0:7f:c1:2f:bb:
42:57:96:b1:a0:4e:01:ef:38:49:ef:6c:92:dc:ed:
5c:7d:40:df:36:bf:60:ef:39:2d:e2:fd:ee:1a:2a:
25:c0:bd:82:ba:ed:c3:23:68:38:fb:2b:aa:76:e9:
f8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1A:0D:00:85:B8:92:70:39:68:AB:13:DD:66:5B:D6:82:16:F3:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/192/041A0D0085B892703968AB13DD665BD68216F3B2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.173.0/24
Signature Algorithm: sha256WithRSAEncryption
00:1e:94:09:d6:6e:95:83:51:ab:da:06:6c:20:79:7a:59:7c:
8a:d1:90:41:81:25:31:e6:ef:9e:34:f8:0e:52:67:ee:e2:74:
d6:e0:37:19:b9:3a:43:70:3e:a5:4d:90:b8:7e:0c:81:66:8c:
78:8e:74:68:44:44:55:35:80:7b:06:b5:f2:61:3d:7e:96:6a:
3f:db:6b:80:87:12:30:6d:e0:30:7e:a4:85:dc:b9:6c:2e:5b:
f9:31:9f:9e:24:d2:62:80:bc:94:98:e6:83:f1:30:40:c3:84:
30:db:7a:6e:bb:91:69:f1:1d:95:e1:67:e1:d0:ed:d0:c7:e4:
ac:6d:e8:98:7f:91:b8:d7:47:a7:ff:d1:80:72:ef:86:78:a4:
fc:b9:0a:ed:43:89:40:22:0c:76:b1:f9:e0:6e:88:0b:40:ff:
bf:99:a0:96:96:c2:40:34:60:5f:6a:ae:20:14:ea:8b:d8:0d:
92:c8:a4:17:52:24:98:ac:cb:e4:8e:8a:11:8d:36:61:c6:44:
60:d0:da:3d:b7:a2:27:71:3c:73:c5:ef:a2:bf:19:d7:30:02:
d4:35:98:fc:5e:28:90:49:2c:f8:d7:fe:94:87:4c:f2:ce:ff:
97:33:e4:03:89:97:99:8b:e6:d8:7a:97:76:a0:4a:2f:f9:75:
28:c0:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:39 2024 by rpki-client on console-fra.rpki-client.org