Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BT_GtdJT7wQ_Z9iu0wxkBunmPiI.cer
File: BT_GtdJT7wQ_Z9iu0wxkBunmPiI.cer (raw, json)
Hash identifier: /IbRu2cys3xWdkMPf+2i8tcw5mZ8T24KTSm8hOfPzak=
Subject key identifier: 05:3F:C6:B5:D2:53:EF:04:3F:67:D8:AE:D3:0C:64:06:E9:E6:3E:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF4F659976ED4B5D3383FF1FF01952
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/BT_GtdJT7wQ_Z9iu0wxkBunmPiI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.214.36.0/22
IP: 2a0b:92c0::/29
Validation: Failed, certificate revoked on Fri 10 Feb 2023 14:08:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:4f:65:99:76:ed:4b:5d:33:83:ff:1f:f0:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053fc6b5d253ef043f67d8aed30c6406e9e63e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:f7:94:b8:53:4a:a6:10:b7:a7:e3:69:88:
42:88:5d:2e:26:bc:e3:4a:1d:3a:69:6b:9c:6e:d7:
42:9e:39:f6:02:41:82:26:f3:db:4c:88:de:66:24:
fe:d4:d4:dd:6c:6c:05:71:b6:d4:74:f8:51:de:75:
7d:50:ba:a6:64:31:a4:37:f9:44:da:01:67:0d:4a:
9f:a3:22:d9:d0:4d:30:80:ac:ae:d2:a2:c6:2e:93:
fa:35:bd:39:3e:d5:46:17:e5:55:39:f5:e1:de:d0:
c9:26:a2:3e:ee:bd:93:16:1a:a3:ee:c1:35:50:d0:
2d:6b:6b:76:4b:da:ec:22:a3:7e:34:82:d3:29:fc:
cb:f3:55:23:43:ce:e9:dc:4b:8d:c7:bf:d5:70:c4:
4c:18:de:fe:23:f6:ff:5f:32:bf:45:56:61:39:49:
21:42:77:85:f5:f8:10:d2:0d:b7:c4:61:ca:88:4c:
a8:6e:2c:b0:a3:fb:89:94:80:85:4d:95:85:61:eb:
aa:bc:ea:6d:4e:f7:5a:ea:58:c8:61:33:d7:8d:7f:
64:c2:d5:ab:6c:12:5d:8e:37:12:37:07:c1:e9:49:
bd:77:7d:63:2a:71:56:1e:61:60:f0:97:1b:4b:1f:
18:4d:e4:fd:6b:b5:4f:56:34:ef:9a:aa:5b:b0:19:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3F:C6:B5:D2:53:EF:04:3F:67:D8:AE:D3:0C:64:06:E9:E6:3E:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/acd613-855e-4bde-82a8-7a019de9d271/1/BT_GtdJT7wQ_Z9iu0wxkBunmPiI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.36.0/22
IPv6:
2a0b:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:a2:d4:58:ce:52:35:f6:0c:65:87:81:19:6c:0c:88:a6:d9:
de:7b:e3:2f:27:59:3f:95:66:65:ea:c3:82:d4:07:52:56:27:
81:e9:e5:07:6d:45:2b:6d:02:87:b6:53:b9:07:b2:40:fb:fe:
3b:b0:82:27:cc:cd:ae:4d:46:4a:26:59:3e:a5:38:2c:f6:be:
8c:18:2f:8c:5d:b0:ef:58:ec:31:22:fb:dc:fe:de:84:d5:97:
01:c4:a3:4d:1a:a3:58:5b:66:c8:d8:b8:cc:4a:98:99:ef:81:
5d:fb:c6:d5:81:c8:d5:bb:07:2f:a0:57:e2:c1:d5:d9:ad:05:
23:92:9f:17:e5:7d:74:46:83:88:75:b9:bd:d1:21:56:be:46:
09:26:92:9d:df:ee:aa:b6:67:84:f0:f4:bf:2e:a2:57:ef:2d:
30:a0:bb:9a:34:fd:e8:a0:a2:a9:c8:4c:43:70:c7:41:7f:cc:
e5:9f:86:30:62:52:1a:73:23:65:62:ea:f7:c4:b3:87:4f:60:
b2:b3:b2:75:7d:b1:97:44:8b:ba:91:85:66:1e:09:68:11:9a:
0a:e1:4a:b0:2a:94:a5:95:ad:fc:80:86:db:c5:66:60:c4:4a:
f7:99:b3:d8:62:69:0a:40:38:56:14:81:56:de:4c:c3:4b:43:
96:ea:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:41 2024 by rpki-client on console-fra.rpki-client.org