Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer
File: Sp34CZpMHEIgHaBWeKPt8r4z_yQ.cer (raw, json)
Hash identifier: No8T45anb7aBfaO31jlMZzKcgVEbSimwg2SvbtcrHII=
Subject key identifier: 4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571691DB310E16E0C9D6A68A5A3F4E215
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.39.8.0/24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 07:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:1d:b3:10:e1:6e:0c:9d:6a:68:a5:a3:f4:e2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a9df8099a4c1c42201da05678a3edf2be33ff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3f:1c:fa:61:6f:1c:8a:bd:5e:5f:12:44:59:
2b:41:ba:8b:40:45:d0:fb:9c:6e:5a:4a:bd:c3:9e:
19:fd:05:90:53:a4:56:f7:8c:de:ca:f4:b6:4e:1d:
50:0e:b0:57:8e:f5:91:8f:b5:48:ac:bd:0b:80:a6:
a5:b7:c9:73:6a:9a:8b:d0:a3:20:09:31:4b:23:b4:
59:ba:bd:92:75:10:6f:4f:c8:9b:36:6a:22:2c:89:
d8:1d:1a:f1:d3:48:34:25:20:4a:75:30:d6:2d:dd:
8f:31:d3:78:55:69:b9:45:ba:a3:b4:7d:f6:be:29:
67:8b:d0:9c:f5:1b:c7:57:e2:cb:d4:5e:c8:95:44:
c3:9f:7a:e1:e0:ae:dd:48:7a:67:a2:bf:c3:d7:76:
15:9b:27:5c:ba:68:97:df:57:e9:eb:59:c6:45:99:
02:cd:92:36:60:79:e0:f0:fd:ac:eb:21:98:f9:ea:
63:ff:99:f1:26:36:af:f5:27:42:92:e5:13:d0:03:
1a:86:d9:bc:3a:49:f3:23:4b:68:60:ff:5e:4c:f4:
ac:65:92:11:00:c3:47:05:eb:dc:28:74:e0:0e:0e:
7a:05:9f:08:9f:0d:37:94:56:28:a1:ba:b2:6a:85:
6f:15:73:7e:69:03:78:85:92:88:e6:d7:fa:3e:56:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:F8:09:9A:4C:1C:42:20:1D:A0:56:78:A3:ED:F2:BE:33:FF:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/89d44d-4f43-4680-a0b2-949848375ada/1/Sp34CZpMHEIgHaBWeKPt8r4z_yQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.8.0/24
Signature Algorithm: sha256WithRSAEncryption
24:9f:d9:ea:41:4a:e7:1f:29:e6:91:9d:b5:ee:93:21:48:6b:
61:60:9d:fb:93:7f:cf:09:91:91:81:e3:d0:e4:63:c4:bf:20:
6c:21:98:10:da:9f:8a:d4:28:db:72:82:db:ee:a6:a3:ab:e1:
b1:a5:6d:b1:be:75:04:cf:a6:37:d4:9b:75:b8:37:a1:35:f3:
99:16:8c:e6:32:76:bf:fb:52:aa:fb:fc:64:43:4b:15:30:65:
c1:22:60:9b:01:e3:19:76:57:e2:87:93:28:7f:a1:b9:4f:2c:
34:ee:80:b6:d0:60:bd:c2:71:19:2c:b0:5b:91:b0:b5:f4:a8:
05:f8:12:9e:3a:1c:72:a9:64:40:7d:d0:5b:43:fb:10:9f:69:
b0:ae:84:93:a0:22:3c:44:1d:38:81:27:c7:fb:6f:19:2b:b7:
5c:81:bb:27:89:d9:88:db:4f:5a:9d:05:e8:95:18:44:3a:e4:
9b:66:13:97:75:22:5c:a6:d7:5c:2c:85:03:f1:06:1e:63:3e:
05:ee:f5:11:fe:20:4d:ce:d7:49:7b:b0:bb:52:24:89:7d:bf:
08:35:32:6c:c0:e6:bb:7b:46:2c:ae:79:92:fd:6c:12:cf:1d:
91:6d:d9:d1:47:ed:99:cc:c5:40:d7:89:e9:ee:5d:fe:06:85:
9f:d8:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:50 2024 by rpki-client on console-fra.rpki-client.org