Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sk44_e16pdwXRqJlmiarHsna2i8.cer
File: Sk44_e16pdwXRqJlmiarHsna2i8.cer (raw, json)
Hash identifier: EmibDqZxaTMMp943Jd6QXR+M508kmlihPlIQ8mUS0gY=
Subject key identifier: 4A:4E:38:FD:ED:7A:A5:DC:17:46:A2:65:9A:26:AB:1E:C9:DA:DA:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A1FE5493BF01CB0E0053A62917AA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/Sk44_e16pdwXRqJlmiarHsna2i8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:31:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.159.0/24
IP: 2a12:3c00::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:1f:e5:49:3b:f0:1c:b0:e0:05:3a:62:91:7a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:31:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a4e38fded7aa5dc1746a2659a26ab1ec9dada2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:ac:25:27:59:24:c8:3a:de:50:43:77:2e:
e5:f4:ca:57:16:eb:1d:1f:80:bb:59:bb:0b:d4:a5:
9b:89:86:77:27:ee:bb:93:ea:44:59:62:e1:2a:24:
1e:83:9c:00:0d:67:5d:6f:3b:81:65:fb:4d:5f:64:
42:f9:3a:73:b6:9b:9f:4d:6c:76:54:7f:1b:b6:20:
ad:9d:23:36:17:ef:75:d6:4d:ad:0a:b7:c2:19:ec:
bd:18:db:0d:94:55:c9:f5:cb:76:d5:bc:bf:b6:e1:
fc:89:16:da:72:74:a8:b7:4a:a9:44:ab:cf:24:07:
72:26:47:1c:3a:ab:e4:8a:29:ad:c9:21:cc:c4:e1:
5a:d6:21:b7:87:52:27:e9:ba:cd:6a:de:a7:15:55:
91:bf:cd:9f:0e:9c:23:1f:92:ee:35:da:37:ab:21:
69:ae:f1:ba:3c:5b:3c:3a:82:e4:fd:75:eb:9c:11:
23:97:94:d0:ca:e5:74:04:83:08:1a:c4:d6:0c:03:
cc:a8:e7:8a:b7:93:ba:cc:67:1b:7c:51:54:7e:03:
ce:e8:a8:ec:7b:de:a9:9b:14:f0:b9:b6:4d:33:63:
72:7e:87:fe:6a:cd:40:64:a2:d6:8d:d1:c5:bf:ff:
b4:a3:9b:a0:12:1c:a4:0b:c1:b3:67:f0:41:c0:30:
a9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:38:FD:ED:7A:A5:DC:17:46:A2:65:9A:26:AB:1E:C9:DA:DA:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/64a7ea-3ae1-4e0c-bf70-cd28af2af2a5/1/Sk44_e16pdwXRqJlmiarHsna2i8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.159.0/24
IPv6:
2a12:3c00::/29
Signature Algorithm: sha256WithRSAEncryption
22:fd:9d:8f:2f:83:96:64:a4:ce:51:a3:8f:47:93:a6:26:42:
09:f9:f0:80:9e:5f:5c:30:32:f5:97:fc:d7:07:1d:10:ca:75:
04:53:34:86:6e:40:e9:1f:95:b5:10:e7:3e:ce:22:f0:9b:b2:
7c:dd:2f:1d:41:b0:34:4c:1d:48:a7:96:86:34:32:1f:e5:b1:
4e:19:7b:e3:79:0b:eb:ae:5a:90:77:f2:75:32:3f:eb:ed:ed:
2c:76:57:39:b5:0f:2a:0e:5a:fc:1d:ab:41:19:c8:5d:12:7a:
36:6f:fb:cf:70:14:08:00:ea:8b:b5:cf:c1:a3:77:eb:7b:97:
33:48:00:9a:4d:ae:91:32:39:02:b8:8c:5b:d7:b1:5d:c6:26:
20:2a:63:ae:e1:4d:52:d1:43:8d:d9:ca:71:d8:fd:7c:0e:c9:
0d:9f:8d:6c:4c:2f:87:54:8b:03:48:32:20:40:91:89:55:ba:
c6:67:c6:27:b1:d7:3d:1b:0c:e4:54:06:6d:bf:0c:23:13:53:
6e:f8:1f:d5:d6:03:ae:26:ad:1f:95:73:6f:08:b2:4a:23:8a:
39:fd:40:31:f3:93:56:bc:da:f3:36:b1:02:74:c1:31:3c:b6:
a3:fc:21:84:4c:75:02:19:5e:33:37:77:b0:df:c9:fa:6d:96:
6b:57:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:48 2024 by rpki-client on console-fra.rpki-client.org