Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CIYS1NNtYrCWhtnriqsFJ9S790E.cer
File: CIYS1NNtYrCWhtnriqsFJ9S790E.cer (raw, json)
Hash identifier: Pp5/Og548YO7IaY9GOh/LppbtMiXJK73zTQen6KFgiA=
Subject key identifier: 08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAE17FA55C5C9F51BA4C0C94FC6DA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/CIYS1NNtYrCWhtnriqsFJ9S790E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.213.194.0/24
IP: 2a11:3000::/29
Validation: Failed, certificate revoked on Thu 20 Jul 2023 15:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:e1:7f:a5:5c:5c:9f:51:ba:4c:0c:94:fc:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=088612d4d36d62b09686d9eb8aab0527d4bbf741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d0:f1:8e:6b:d2:e6:e5:29:64:13:ee:87:a5:
3b:e7:64:b4:e4:8e:5d:12:9c:4b:b3:4e:fc:9f:b1:
7d:a3:2f:89:9e:2c:03:c9:02:0b:46:1c:e9:ec:dc:
61:3f:81:a6:ce:74:ca:21:db:4a:f5:ba:b4:ee:9c:
62:f1:c9:af:d3:5a:46:f8:56:51:35:2a:f0:35:96:
b7:5d:cf:91:2c:65:e4:cf:9e:08:fb:e3:ef:9a:2d:
f6:6b:6d:d3:99:25:d2:e5:4d:47:d8:17:8a:02:97:
25:21:f0:be:e8:4b:1e:47:24:dd:3b:de:bb:0d:49:
7f:b7:1f:98:49:4e:8f:ab:1b:d0:51:88:2a:8f:51:
44:d3:5b:82:b1:a6:27:70:39:d1:95:39:60:ed:bd:
05:e0:a1:97:c4:61:38:5f:84:36:93:94:d5:86:0f:
d9:17:ed:c3:6e:af:d2:3d:a8:be:c2:db:c3:bf:ec:
6e:3b:a2:a9:f7:f5:bc:b3:6b:52:4d:23:5b:1a:2c:
c9:30:a0:6c:da:0c:99:13:61:07:7d:94:5e:4c:71:
82:21:de:ec:56:b1:f2:5f:3e:7b:ee:0e:bc:9e:f8:
27:bf:b3:0e:90:af:ff:53:f2:9e:b2:12:a3:b0:61:
4b:3c:f9:fa:59:6d:ea:16:a0:ad:d0:6b:6a:5f:ab:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:12:D4:D3:6D:62:B0:96:86:D9:EB:8A:AB:05:27:D4:BB:F7:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/43a486-ddb0-4ced-a0c2-ab771e104e85/1/CIYS1NNtYrCWhtnriqsFJ9S790E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.194.0/24
IPv6:
2a11:3000::/29
Signature Algorithm: sha256WithRSAEncryption
89:9f:9b:97:4a:59:8c:bd:d6:a2:b8:5e:6d:34:17:7e:64:26:
f5:7c:35:57:4e:e3:34:da:74:54:31:22:74:79:09:79:c6:89:
0d:a4:46:ff:b4:60:3d:a6:c2:9d:7a:52:18:eb:76:24:f3:3d:
e1:28:35:99:af:b4:62:f1:1a:ce:e1:7c:17:5d:26:f7:85:dc:
73:b8:fe:c7:ce:12:d1:79:ae:19:51:e8:2a:27:40:45:31:1e:
1c:e0:c8:b2:32:5c:0a:c9:f2:00:06:95:8d:a2:6e:a5:b9:9c:
57:14:05:c3:d7:a5:1e:1a:9b:40:b3:f1:09:a3:37:36:38:46:
d6:18:55:35:01:ea:f3:4e:6d:fc:38:42:9a:f0:8c:0a:ed:3a:
ea:c3:3e:1d:f1:9d:e7:fd:77:ac:aa:a6:35:8c:3a:2c:9b:64:
19:04:b0:11:d8:a9:fe:04:c6:94:98:07:d7:18:76:25:2a:b9:
46:f8:19:ff:19:11:3d:18:91:7a:aa:24:76:d5:d7:e1:c5:00:
74:23:00:ab:b4:ea:22:d5:13:f6:da:ba:13:09:60:90:f2:75:
c7:9f:61:2c:a0:87:3b:de:d7:48:4c:b8:7b:22:40:1b:c9:76:
4a:ed:8e:6c:94:39:41:28:6e:e0:98:55:30:7c:df:08:9e:65:
dd:29:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:33 2024 by rpki-client on console-ams.rpki-client.org