Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer
File: Q5J9yZixEB4Wx45bNrEwe_Jci6o.cer (raw, json)
Hash identifier: eU7hDsUipx7ssG0KxzFnNZTK2UvsjB059lMZ3uPwGyQ=
Subject key identifier: 43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185DDED7FDF50CB05503115ED4F81D5EBBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Jan 2023 09:20:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.234.93.0/24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 08:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:dd:ed:7f:df:50:cb:05:50:31:15:ed:4f:81:d5:eb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 09:20:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43927dc998b1101e16c78e5b36b1307bf25c8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6e:bb:98:5e:87:4e:29:c5:18:72:26:88:ea:
2c:fd:36:8a:b2:3c:89:17:65:92:11:56:43:3a:64:
0d:a1:50:d6:82:88:9b:04:ab:18:3b:95:b0:4c:90:
76:7e:38:05:3f:2c:1f:56:01:c9:30:fb:fc:ac:f1:
6b:4e:cf:c5:aa:51:46:15:e7:03:17:f9:51:0c:0e:
80:71:fc:d1:8f:7e:86:99:32:2b:1f:0f:cb:25:1c:
42:2f:f2:65:20:7c:34:2d:65:4c:7d:9a:63:af:72:
b8:64:30:03:8a:13:63:d0:13:56:63:cc:1b:09:5f:
61:99:b9:0a:b4:b3:87:d4:49:b9:b8:e5:ea:d3:51:
89:0c:bb:16:b7:e0:9e:bc:c8:9a:fc:4c:a7:ff:01:
6c:59:25:44:da:6d:e0:55:0c:0a:c1:e8:f3:6e:9e:
1b:d8:ba:56:87:1a:30:23:eb:cd:36:11:c3:13:33:
18:0e:76:08:de:ec:67:20:1a:db:e0:67:6a:87:f9:
49:8c:6e:3e:07:26:90:18:13:44:f2:b3:92:ab:69:
d7:03:ce:ca:b0:e1:45:8f:68:9d:2a:b3:59:e0:31:
55:29:7c:d4:d4:01:b0:bd:70:37:ef:fa:54:bc:a5:
7a:23:50:16:4c:dc:de:05:61:a9:1f:e0:69:8e:f9:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:7D:C9:98:B1:10:1E:16:C7:8E:5B:36:B1:30:7B:F2:5C:8B:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/821d73-7f6f-4ba5-8f98-b6517dc41a78/1/Q5J9yZixEB4Wx45bNrEwe_Jci6o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.93.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d2:6b:93:9e:5e:e0:f6:cf:5a:b4:fc:80:8c:7d:40:07:7d:
fe:31:6c:b1:29:77:be:b5:70:2f:49:f3:3f:42:0d:34:61:25:
d4:74:a0:d0:1f:18:63:8b:4b:06:63:65:e6:9f:64:92:d7:72:
e2:a8:b7:71:79:d0:f0:93:98:6f:e8:8a:89:a2:ca:52:87:21:
de:91:e5:d9:75:47:d4:b6:1b:8e:a3:93:4d:99:1f:78:bd:a8:
e2:6f:29:9f:20:69:0f:14:e3:1b:a5:14:d0:2b:79:59:2b:06:
8b:2d:78:54:18:15:9a:6f:d8:5e:ae:cb:a6:f3:3d:82:03:53:
54:18:4e:3a:c6:b8:ad:da:ea:51:23:c3:80:f7:6f:a5:34:4e:
4c:28:e2:ee:f6:6e:9e:5e:d8:b4:b1:96:5d:fa:52:5e:fa:6a:
65:2d:2a:3b:bd:f7:a6:58:ed:6e:d4:ed:38:b5:21:a7:4a:d5:
98:9b:e9:90:c3:85:96:ef:43:ab:80:fd:78:ab:86:81:b1:59:
01:fc:d4:fc:c2:74:76:64:0e:23:6d:d1:2b:b2:86:8e:b2:9a:
af:1b:c3:3d:13:44:65:44:ba:c7:92:ca:8e:46:23:88:e4:c3:
22:c4:50:a3:82:dc:7b:48:f2:4f:2e:44:80:5c:5b:dd:57:8f:
e8:05:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:09 2024 by rpki-client on console-fra.rpki-client.org