Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer
File: IZ-NH7o11Jg11C_NIpQAj6dB2o8.cer (raw, json)
Hash identifier: akT/YaGDdij5BFnDF81VGuUi4TK3XlW0mbmOvyqE8C0=
Subject key identifier: 21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC871353297A0C8FC5E88A3A2CA4CFAAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:31:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.32.85.0/24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 15:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:35:32:97:a0:c8:fc:5e:88:a3:a2:ca:4c:fa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:31:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=219f8d1fba35d49835d42fcd2294008fa741da8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:a6:00:0f:9a:69:e8:c5:ef:79:4b:4b:9e:
a3:e3:72:0a:d5:49:ff:aa:38:7d:6a:f3:58:e4:ed:
b4:2b:63:92:c0:7c:a7:04:d5:a1:1e:29:4a:4b:80:
09:6e:61:b6:29:d4:b2:2e:21:30:6c:27:c0:20:39:
83:e3:03:87:25:19:4b:17:e8:37:ba:cd:b0:8a:c0:
cf:a4:dd:d3:4e:f4:54:0d:dc:78:62:1f:d8:f7:58:
ba:49:72:de:5e:0c:71:9d:83:77:ac:12:7f:c6:5b:
1e:fc:c8:21:22:ba:0c:7c:ab:a1:04:7d:95:20:d3:
c6:14:ce:3f:11:5f:2f:45:53:f5:22:d9:43:f1:de:
91:1d:37:aa:e3:14:0d:87:53:8f:96:66:da:fc:f6:
36:bd:ce:d2:8f:0d:cc:02:23:64:af:3b:c9:a9:a9:
5c:ba:6a:ef:c5:2c:cc:06:74:8b:2e:00:4e:49:ef:
66:62:f7:72:c2:d1:6b:04:7d:38:fd:af:79:ed:6f:
ea:4e:65:85:f3:4d:eb:11:5c:06:82:ab:15:d2:4b:
dc:89:94:41:f1:ba:66:d9:51:20:e3:44:3e:15:ec:
aa:a3:ea:eb:3b:a6:73:8a:a1:0b:ac:5f:28:e4:52:
b6:8d:e0:ea:96:b8:b8:31:74:af:06:c4:84:2d:fe:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:8D:1F:BA:35:D4:98:35:D4:2F:CD:22:94:00:8F:A7:41:DA:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067d02-52b6-43c4-bf01-ecb5fecf7d0e/1/IZ-NH7o11Jg11C_NIpQAj6dB2o8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e5:a9:db:38:90:23:66:fe:f4:33:5c:8b:87:01:f7:a0:ee:
0a:27:e8:ad:09:3f:e9:b7:c0:8c:93:dd:ff:f1:be:41:9b:de:
bd:93:fd:d6:b3:32:90:b2:c3:c0:26:cb:d3:da:d4:26:6a:78:
b3:40:c6:1a:3e:00:7b:20:af:39:9e:13:06:8b:bf:29:ee:0e:
52:86:d3:e8:13:27:ec:88:3e:08:a8:29:54:ad:97:9b:35:8f:
21:3a:41:12:66:94:d7:60:a9:c3:2d:8b:cf:13:29:3b:b8:6e:
8a:60:80:9c:06:25:f2:05:b5:69:56:f8:c1:de:3d:1a:af:3f:
64:23:e8:73:e5:41:00:67:24:f0:40:d4:5e:1c:3f:1d:e9:21:
81:51:81:b9:f5:de:b0:a6:60:58:51:6c:06:ff:91:37:3b:04:
8b:4a:c8:05:d6:c1:aa:c0:ee:a7:88:be:a2:50:2c:69:04:8e:
fa:35:74:cb:dd:8c:bc:65:e3:a1:11:bd:ba:75:0c:c1:dc:70:
3a:9c:06:25:62:b0:38:86:92:7e:cf:81:4a:80:13:ff:66:88:
56:a5:3b:d9:5f:3a:63:f2:b1:51:ce:93:6c:92:17:2a:e3:8f:
48:48:e5:41:3a:1c:01:08:c5:21:7c:11:61:2f:43:bd:ab:b3:
f0:82:e5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 20:07:27 2024 by rpki-client on console-fra.rpki-client.org