Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer
File: RqjMYd4gqQBIgx-sriL6Nw5XaTY.cer (raw, json)
Hash identifier: uAd1xKtsR//EcLHzdlOqRGuFB5gbRmP7olxUqfEnTFk=
Subject key identifier: 46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4EEE35A615691C388350C074F39F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.63.0/24
IP: 2a11:c140::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:ee:e3:5a:61:56:91:c3:88:35:0c:07:4f:39:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46a8cc61de20a90048831facae22fa370e576936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:67:a6:5e:f8:da:0a:05:be:f5:c6:6b:ed:
03:fd:56:60:cd:2d:b5:9d:de:a4:f3:4e:b8:37:65:
2f:b1:3b:b1:9b:80:2a:bf:43:b7:be:20:32:d3:11:
c0:21:0d:c9:b6:68:69:67:e0:83:b3:5d:be:d2:79:
05:e6:69:68:90:f9:39:39:34:c5:26:e1:5d:99:58:
b3:34:05:bf:03:0d:db:fe:a4:90:11:e5:d5:38:af:
c1:33:13:ff:92:51:3a:01:f0:cb:57:bf:10:8b:04:
38:60:62:aa:eb:29:66:31:a4:55:c1:0a:bb:8e:18:
b2:69:8e:7c:39:ca:25:e0:96:a8:b8:53:37:9c:b3:
80:9f:c4:f4:f3:3d:3d:c1:90:68:af:f6:bc:8a:97:
ef:17:a1:94:09:e4:fa:88:36:9c:c4:ea:f0:bc:e7:
2a:47:53:bc:7d:c9:cd:cf:b7:6a:ee:99:bb:a9:d8:
0b:31:d7:aa:5f:fa:44:72:9a:e1:61:95:63:ed:31:
f8:83:f5:99:da:f1:7a:f1:c1:07:c6:81:f8:99:3b:
b3:c5:e4:09:d7:63:73:b1:aa:1b:3b:92:da:01:e2:
f5:53:86:e0:51:53:4a:30:be:c0:c3:c1:6e:2b:28:
1c:53:93:ca:08:ba:86:96:82:66:39:35:10:6a:56:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:CC:61:DE:20:A9:00:48:83:1F:AC:AE:22:FA:37:0E:57:69:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a75f60-058e-43c7-9ca5-71d472748b53/1/RqjMYd4gqQBIgx-sriL6Nw5XaTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.63.0/24
IPv6:
2a11:c140::/29
Signature Algorithm: sha256WithRSAEncryption
99:87:3c:7e:48:10:6b:03:95:25:3b:70:91:a8:48:52:08:e9:
57:34:97:68:90:7a:2f:ae:0a:a1:75:36:ec:eb:82:6a:48:8b:
b8:61:e5:b1:b4:d1:5a:1e:42:a6:89:54:a7:64:d2:fe:7d:2b:
e9:52:0d:4d:39:83:aa:07:de:4c:e3:d3:22:bb:54:d8:70:1a:
c1:b2:cd:d7:7c:0a:ae:3d:ae:11:aa:4e:17:b0:d1:83:a2:59:
d4:c2:30:96:06:0c:6e:3f:fd:61:85:c3:39:ab:1c:b9:54:56:
8c:e9:f4:b0:86:4f:f7:92:ff:0d:5e:0f:af:c3:73:51:0e:f2:
d2:94:b8:94:7c:df:25:31:0e:c6:7e:40:6c:a4:3f:5a:f1:35:
f9:71:9f:08:2b:4c:05:9d:56:dc:21:d5:d4:55:8f:92:94:78:
ad:40:7e:a8:ba:6d:67:ed:4d:77:67:e9:f6:8f:65:ba:35:96:
71:a4:2c:e3:0f:85:2f:df:54:37:84:e1:f9:4b:47:2f:96:0c:
e7:c3:42:cf:4f:e6:23:57:43:67:0b:c0:04:9b:80:46:00:72:
82:5a:78:65:a5:83:51:c1:f4:ce:5d:65:d5:3d:82:3c:e9:1d:
12:28:09:84:09:18:48:10:35:d9:da:70:44:b3:6a:d4:2f:ce:
95:30:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:35 2024 by rpki-client on console-fra.rpki-client.org