Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CqRmf8UBNS--0X5HFoxGh9d1Yj8.cer
File: CqRmf8UBNS--0X5HFoxGh9d1Yj8.cer (raw, json)
Hash identifier: QhzfXJ1otCJk8MG4Gr4oSLX8Q0LZNk3iiBBpz2PYjAM=
Subject key identifier: 0A:A4:66:7F:C5:01:35:2F:BE:D1:7E:47:16:8C:46:87:D7:75:62:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63247F6C11BE46CA2E37D0665228FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.119.0/24
IP: 2a11:c400::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:24:7f:6c:11:be:46:ca:2e:37:d0:66:52:28:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0aa4667fc501352fbed17e47168c4687d775623f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:4a:01:52:b3:f0:10:0d:3e:12:13:bd:27:
4c:a5:91:e3:c8:a4:0c:3c:35:11:6c:7c:6f:7f:7c:
6c:5d:71:79:25:0d:dc:12:9c:cf:7c:6a:6a:b8:70:
18:4f:de:82:1b:99:3f:c0:7d:9b:7b:7d:46:c3:db:
34:46:d2:bc:75:78:33:19:4c:ad:cf:39:68:49:f2:
ff:b9:43:8a:85:2f:dd:4d:44:68:3e:b4:5c:e2:43:
23:52:3b:e4:73:3d:d7:d0:a6:04:09:fe:48:dc:fc:
81:39:89:73:80:bb:aa:67:4a:44:a1:27:3a:e8:b9:
f5:c0:00:0c:f4:4e:01:a8:0a:64:09:a1:02:69:b3:
3d:ea:26:30:3f:98:e9:5f:20:f7:fb:84:3a:13:85:
24:88:07:2f:34:05:08:56:4c:aa:f5:67:52:03:ab:
44:9e:c7:0f:17:64:ee:5f:5d:18:42:c9:a9:29:b4:
18:9c:4c:33:2f:cb:51:db:79:77:5e:33:59:b4:79:
6b:a7:d7:ec:da:3d:f1:c3:fe:7f:11:b8:9c:25:ca:
db:f6:74:b6:ea:c7:91:54:1f:39:9d:18:c1:23:21:
93:0a:e3:c2:25:e2:74:4a:c8:8c:15:9a:6a:9e:ea:
7a:f5:c8:b5:dc:7f:aa:bc:ef:16:b8:39:4d:37:8e:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:66:7F:C5:01:35:2F:BE:D1:7E:47:16:8C:46:87:D7:75:62:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b41f63-65b9-403b-a067-4020a48983b3/1/CqRmf8UBNS--0X5HFoxGh9d1Yj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.119.0/24
IPv6:
2a11:c400::/29
Signature Algorithm: sha256WithRSAEncryption
07:60:42:46:53:2c:76:36:9a:27:38:34:70:1c:96:06:e9:f8:
4c:85:b8:03:66:86:52:f5:48:ed:64:5c:94:72:d8:46:0b:f6:
7d:28:bf:ac:b6:56:f8:9b:20:78:fc:3a:13:df:48:2d:bf:f1:
08:d5:b4:6a:f7:43:a2:b5:15:6b:a2:d2:26:28:58:1b:46:d5:
f9:35:fd:2c:93:19:6b:f0:f3:b5:94:08:45:b2:25:90:f4:d3:
0b:16:29:c1:12:e5:8a:f3:8a:3f:06:71:37:18:8c:01:b0:59:
5d:21:3b:92:1f:20:3b:f7:2b:fb:05:3b:ac:57:fa:55:63:02:
54:33:e7:e6:f2:9c:97:fa:45:41:63:b5:9e:75:19:6c:ee:46:
98:63:6b:f7:89:3f:d1:14:db:26:38:91:6a:73:f2:44:23:03:
e2:13:32:f5:7f:46:51:fc:ac:4e:66:ff:75:6f:b5:30:ac:57:
64:54:8b:f4:0a:cc:6c:a8:15:fa:dd:34:37:09:c3:34:39:0f:
75:3d:1b:d2:4f:20:9c:44:4a:fc:4f:60:ad:58:6f:21:04:d1:
aa:64:10:d8:48:36:15:d3:e1:ee:ce:cc:7b:13:fe:11:d6:22:
37:d5:b1:80:13:dc:cd:be:e6:e2:5f:b3:14:3a:2f:9f:7f:fa:
86:d7:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:00 2024 by rpki-client on console-fra.rpki-client.org