Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JoUdjQxcxPXux2Yrd2BojYtlLFI.cer
File: JoUdjQxcxPXux2Yrd2BojYtlLFI.cer (raw, json)
Hash identifier: 1zKjFv2HlMWyKEPnLqPqgtqaoya+9QL34T1fR85SJCM=
Subject key identifier: 26:85:1D:8D:0C:5C:C4:F5:EE:C7:66:2B:77:60:68:8D:8B:65:2C:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A41CD5420A91CA8AC98F502BE4599E026
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/JoUdjQxcxPXux2Yrd2BojYtlLFI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Aug 2023 14:58:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.148.16.0/22
IP: 2a07:5b80::/29
Validation: Failed, certificate revoked on Wed 15 Nov 2023 12:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:cd:54:20:a9:1c:a8:ac:98:f5:02:be:45:99:e0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 29 14:58:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26851d8d0c5cc4f5eec7662b7760688d8b652c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:99:2d:24:35:83:d4:d4:52:1b:e8:f6:b0:
cc:71:3b:e2:da:fe:d1:75:4c:d2:75:3b:78:af:51:
6b:b9:96:ed:e4:a2:27:1e:18:65:d6:d0:cc:85:05:
dd:93:ad:d2:8d:57:81:d5:66:a1:e5:53:21:f4:56:
94:dc:8e:da:bd:57:9d:60:63:c5:80:a8:8b:da:be:
b3:32:9f:4a:78:66:0b:0d:c8:19:78:73:cd:20:94:
89:69:c3:9f:34:a4:4d:d7:fc:c5:ac:91:1d:4d:29:
a7:d4:06:a9:64:d0:fc:95:a7:b7:00:90:48:0a:ff:
76:dc:90:90:91:ed:2b:c5:b3:9b:a8:f5:b3:c9:6f:
78:d2:7f:ab:07:8a:a2:e0:5a:72:08:f7:24:92:b5:
4b:9c:47:c2:bb:05:7b:0f:6f:b2:6e:62:93:bb:16:
73:da:19:3a:b5:1b:52:59:15:4f:94:85:08:cc:f8:
de:90:ed:3d:ce:23:61:18:48:ef:65:e3:e5:4a:f6:
c9:4d:41:eb:f7:a6:18:a3:dc:80:3d:79:f7:22:e1:
43:8f:56:7b:8d:a9:a2:a8:b0:62:64:18:d7:be:40:
0f:3f:89:47:49:51:d7:7a:3d:d2:55:01:c8:84:ca:
c4:58:d8:7a:dd:bb:e2:2b:b4:e2:c9:99:5b:f0:36:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:1D:8D:0C:5C:C4:F5:EE:C7:66:2B:77:60:68:8D:8B:65:2C:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2f9a3d-5428-4c40-8caa-a26e807700b6/1/JoUdjQxcxPXux2Yrd2BojYtlLFI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.16.0/22
IPv6:
2a07:5b80::/29
Signature Algorithm: sha256WithRSAEncryption
26:8b:2a:be:0b:85:64:1f:76:00:b1:4b:a2:13:54:41:39:e7:
44:a0:33:c2:72:61:a1:3f:c0:ca:f2:8f:83:ef:2c:a7:e4:3c:
2d:f1:87:4d:5c:2d:a3:d5:ee:ab:7e:8f:6f:88:1c:c1:4e:2b:
b5:2c:98:a5:9f:55:bb:5d:6f:5a:a2:2d:a5:30:09:07:e6:7f:
d4:a7:68:22:97:78:2f:5b:b4:a5:fb:60:b3:4a:86:89:7a:fb:
65:c6:5b:fa:f9:9f:de:db:39:9a:80:4b:3c:45:c9:9c:13:74:
0f:fa:8b:43:bc:d8:21:8c:2c:cf:68:4b:0d:f9:35:d0:65:84:
1f:69:2c:e0:0c:cc:52:f9:66:f0:ea:47:0b:ee:6e:ee:7a:6f:
a4:e1:d2:55:6e:87:d8:33:5f:01:6e:b9:98:c2:ca:45:51:5d:
9a:03:f1:9b:8d:17:f0:f8:2e:d4:9a:af:21:23:1e:06:b9:38:
9b:2f:75:07:d2:7b:5c:d9:71:5f:9c:cf:6d:8d:c1:5c:4f:cd:
f2:3c:ec:fd:c0:69:ee:de:e2:69:1b:1a:60:fc:99:81:f4:15:
d0:76:58:4a:a4:2d:b7:eb:3f:cf:02:bd:b6:65:70:9d:f9:b3:
f3:8f:12:fe:15:31:03:29:24:41:45:dc:c9:54:58:22:98:7c:
48:6a:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:41 2024 by rpki-client on console-fra.rpki-client.org