Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjYJAf_k8jwYxFtUSrh1nbVSkss.cer
File: BjYJAf_k8jwYxFtUSrh1nbVSkss.cer (raw, json)
Hash identifier: 83J7eIItulYqRW2limhES+NSp/TREW1eCqY8qOG1ddE=
Subject key identifier: 06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6336F18F06A9BD5922E62CF54227AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.198.0/24
IP: 2a11:d740::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 12:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:36:f1:8f:06:a9:bd:59:22:e6:2c:f5:42:27:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06360901ffe4f23c18c45b544ab8759db55292cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4c:94:29:48:ed:ec:eb:13:73:2b:c7:7f:14:
f8:21:d4:aa:2d:4d:ae:88:37:43:c6:52:51:de:5c:
3f:6c:bd:1b:7b:fa:cd:b1:2c:e2:4a:84:ff:35:26:
bb:61:42:39:b2:13:5b:6d:36:df:b2:37:98:d0:18:
85:f1:52:ef:31:0f:e9:57:d7:3c:2f:6d:84:b9:64:
66:eb:ad:6b:e0:9b:67:35:ac:78:26:0d:12:24:f8:
f2:23:09:7b:9b:3f:b7:e5:1c:5a:33:c9:62:25:c6:
65:af:4f:3b:02:f5:77:84:13:6b:30:f0:90:7a:07:
7b:75:eb:25:4a:4a:31:dd:b3:4d:13:92:26:3d:c3:
b7:ac:18:8d:9e:c5:ad:2c:97:45:ac:5c:b1:f6:6b:
cf:6f:11:59:97:f8:35:71:f5:9e:6d:bb:fe:d9:bf:
6e:92:3b:bf:5f:3a:59:a3:64:bb:55:15:51:98:62:
de:01:7b:71:12:93:43:e6:10:8e:0c:36:f1:e8:2b:
a7:00:af:62:04:98:cf:e0:f6:61:f6:0f:1c:d3:86:
d7:9d:d2:bd:07:4b:3a:a5:5d:6c:91:8d:9c:2c:2b:
46:7f:46:ce:67:31:38:fd:9f:47:0d:80:c3:8d:a8:
d9:40:1d:f9:00:62:f8:20:31:9f:d2:84:44:96:05:
62:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.198.0/24
IPv6:
2a11:d740::/29
Signature Algorithm: sha256WithRSAEncryption
94:6b:34:c0:1c:ca:cb:c5:8d:41:f1:d9:6c:36:20:b6:a8:d2:
e0:6a:20:f2:d4:96:4d:d9:89:0b:cc:6c:81:0d:cb:d5:cd:a6:
30:39:3a:5b:3f:4d:12:5c:1a:bd:67:14:3f:1b:9c:97:44:db:
70:5a:4d:17:16:85:fa:1a:e0:04:af:b8:5f:45:11:18:f9:8b:
fd:34:09:f2:c8:58:ef:7e:42:d5:1c:f9:ef:62:1b:0f:6e:69:
62:3e:1a:ae:aa:c7:c3:e8:e4:19:ef:48:21:35:88:9d:76:f4:
14:14:56:6a:fa:78:6b:02:b3:bb:39:fd:08:b3:f5:1e:de:04:
38:47:b7:51:74:1e:79:13:35:35:3f:24:dd:a2:7d:b8:ce:61:
a6:f0:ad:95:58:5d:7f:74:7d:51:3c:09:f2:85:1e:e9:0a:3e:
a7:a3:22:57:eb:54:a8:f6:84:af:65:95:c9:4a:dc:6c:4e:a6:
09:4a:02:16:70:ad:1f:59:6f:89:f2:72:6f:57:d5:6d:e1:ce:
f8:fe:39:97:f5:75:85:9b:91:15:f1:2d:94:19:89:38:2d:06:
bb:46:d0:cd:d6:9c:e7:51:42:ea:f6:ef:ef:23:90:d2:4f:2e:
a5:ff:de:b2:2b:de:c8:2d:f0:ac:06:97:9e:c2:f1:41:85:b5:
6a:6c:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:46 2024 by rpki-client on console-fra.rpki-client.org