Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RnT1B_W_8z_IE0FiP2kZUnSuEYM.cer
File: RnT1B_W_8z_IE0FiP2kZUnSuEYM.cer (raw, json)
Hash identifier: OuL89yw+kMHAC8BOrXBIJ/vfE9pt7IJe5OGZ9FUeO34=
Subject key identifier: 46:74:F5:07:F5:BF:F3:3F:C8:13:41:62:3F:69:19:52:74:AE:11:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1AE2271431567F3805ACFBC99D7CE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/RnT1B_W_8z_IE0FiP2kZUnSuEYM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.190.120.0/24
IP: 2a11:7380::/29
Validation: Failed, certificate revoked on Thu 24 Aug 2023 08:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:e2:27:14:31:56:7f:38:05:ac:fb:c9:9d:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4674f507f5bff33fc81341623f69195274ae1183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:80:04:9c:d3:54:f7:48:d1:02:c8:b1:44:
ef:d1:0c:3e:d5:2c:65:b6:6e:3f:c1:14:8e:ad:1d:
ab:df:08:76:64:f7:3b:47:7a:ce:64:bd:ed:e1:ca:
a3:57:9c:99:d5:f4:98:d1:6f:94:57:0d:7c:83:c0:
32:f8:24:e5:3c:f0:c6:7b:13:27:03:2f:91:bc:61:
aa:e5:01:4a:52:79:d4:3d:ca:ea:62:ea:74:20:91:
58:06:c8:a5:f2:66:41:e3:49:48:7f:ba:95:ab:db:
1d:1d:d3:b5:89:f0:9d:1e:c8:27:0a:35:dd:2f:03:
6a:18:f4:7e:38:52:b2:ce:03:fd:b6:f2:09:2e:bc:
a5:a8:42:7e:bc:85:e5:c9:ae:74:80:81:06:9a:62:
e5:30:05:9d:1d:00:a5:69:f5:5d:c4:bc:92:df:5e:
56:32:e6:24:2b:f5:29:b8:38:51:c3:c8:4d:62:0d:
90:a1:27:41:a6:a8:f3:bf:e7:f6:94:c9:42:42:11:
5e:98:45:3e:5e:14:4a:d8:4c:d0:9c:95:67:5a:d9:
a7:23:b4:ef:e0:26:b5:10:1e:ca:1d:14:6c:4c:03:
30:27:89:5c:26:bb:5a:3d:cc:fb:6b:98:e6:8b:72:
51:68:81:9a:dc:10:24:55:39:36:8a:aa:4f:6e:32:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:74:F5:07:F5:BF:F3:3F:C8:13:41:62:3F:69:19:52:74:AE:11:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/RnT1B_W_8z_IE0FiP2kZUnSuEYM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.120.0/24
IPv6:
2a11:7380::/29
Signature Algorithm: sha256WithRSAEncryption
91:17:9b:23:15:1a:17:fa:d1:bc:31:f9:53:41:48:95:14:35:
af:c6:d3:36:6e:2b:46:29:fb:1e:9d:9d:af:74:7f:72:68:98:
5c:7b:38:46:ee:29:36:f1:ce:c2:e1:3e:a5:19:0b:cd:64:a7:
b2:79:33:50:08:dd:b4:68:9d:50:54:6d:de:f5:d2:06:6b:cf:
e5:d3:19:c1:3c:b3:9d:e7:d2:da:f6:eb:48:47:96:f6:c1:52:
17:93:17:56:0b:56:64:d3:f8:fd:d8:c6:aa:81:d4:59:3c:f7:
c0:0b:1e:8e:f0:9f:03:81:8b:74:81:8b:28:3d:f4:2b:9c:6e:
d5:85:b2:55:ea:b1:29:c8:71:a1:aa:dc:a8:d7:93:4b:59:6e:
5e:f9:4f:d9:8d:8d:32:c2:53:3c:3a:41:d7:68:5e:4c:0c:e2:
ad:cf:33:47:ac:0c:ee:6e:a5:f5:cf:12:a3:8e:f6:90:a1:cd:
d4:1c:4f:1d:45:87:c6:cb:ef:05:11:4f:27:de:ce:5d:75:c1:
10:a4:ad:63:01:4a:a9:57:92:8c:f2:7f:28:02:9a:88:79:89:
3f:71:87:13:2a:7a:bd:cb:41:47:f4:16:7a:5e:ad:00:16:70:
d8:15:9b:08:b0:4c:b5:75:a2:ad:0a:eb:5c:dd:95:c5:3a:05:
2e:83:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:35 2024 by rpki-client on console-fra.rpki-client.org