Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T6D2pa7hXoRUooSEf6bdGuvCOTI.cer
File: T6D2pa7hXoRUooSEf6bdGuvCOTI.cer (raw, json)
Hash identifier: I/jVj8usPpp4urEo53lruaZwGnJUBsgjcPAw7BVDdww=
Subject key identifier: 4F:A0:F6:A5:AE:E1:5E:84:54:A2:84:84:7F:A6:DD:1A:EB:C2:39:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFA8F79BBC7508C8D30FD80DDEBE7C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/T6D2pa7hXoRUooSEf6bdGuvCOTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.243.88.0/21
IP: 109.237.128.0/20
IP: 185.3.232.0/22
IP: 2a02:2b80::/32
Validation: Failed, certificate revoked on Tue 28 Nov 2023 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:8f:79:bb:c7:50:8c:8d:30:fd:80:dd:eb:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa0f6a5aee15e8454a284847fa6dd1aebc23932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:55:ec:77:64:31:6e:df:38:55:57:a2:ea:
33:aa:89:d1:9d:30:ec:29:e0:56:d6:9b:fe:13:0c:
64:9f:65:ce:ca:8f:35:e1:58:d7:5e:8d:14:e5:50:
f8:6c:fd:3d:9c:27:2b:b5:30:51:fd:61:fb:05:17:
9c:50:2e:d0:d8:69:35:14:25:44:b0:8b:be:9f:e0:
d7:6d:fc:83:c0:35:c1:ef:d5:f6:6a:e6:b2:90:4d:
3c:ab:3a:fd:58:84:48:04:41:d3:71:5c:c7:ef:74:
0d:03:50:32:55:eb:23:f4:ab:61:bf:bf:39:5f:87:
ba:ce:2c:ce:6a:8d:41:ea:f6:8f:d7:83:d2:00:5c:
ce:4a:65:74:c4:cf:55:58:64:0b:66:60:54:7d:2a:
03:e0:e4:6d:c9:cb:79:df:b5:70:93:40:45:16:7f:
3e:f7:a7:0c:e2:b9:dd:5f:93:d1:45:9b:d2:84:db:
4f:56:53:6e:51:d2:5d:1a:d5:62:c2:af:99:e1:f0:
fc:6d:1f:4e:79:ca:ee:bb:e5:c5:95:6a:0a:df:6a:
46:b0:9f:91:d8:53:fc:2e:55:b8:5f:aa:94:03:52:
5b:c4:79:93:fb:93:1e:19:3a:87:ab:9e:91:0c:5d:
e6:25:98:2c:16:4f:c5:24:55:6f:56:64:83:a3:40:
d0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:F6:A5:AE:E1:5E:84:54:A2:84:84:7F:A6:DD:1A:EB:C2:39:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/T6D2pa7hXoRUooSEf6bdGuvCOTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.88.0/21
109.237.128.0/20
185.3.232.0/22
IPv6:
2a02:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
08:9f:85:00:e8:9f:5e:fd:b2:bd:b7:99:81:64:3b:4a:de:71:
f1:47:42:d1:ec:27:76:7b:66:34:1e:22:42:18:e1:d9:0c:79:
e5:fe:21:e2:5d:70:19:b2:9f:96:c9:38:92:20:62:9e:da:c0:
4c:71:89:42:1b:34:28:01:d1:98:e4:1f:02:ee:1d:e8:fd:37:
47:83:63:da:3b:50:e6:2d:e9:e4:92:49:be:49:fc:af:1d:05:
e9:21:69:ac:3a:15:07:ad:32:5e:14:03:53:54:4a:98:49:32:
dc:d8:a0:f1:b7:31:be:d0:a8:30:fd:ca:5f:c7:03:4a:0b:ac:
17:3e:31:f2:e1:b9:d5:e4:9b:3c:3b:6d:51:13:5a:7e:50:2b:
9c:d7:d9:30:ae:93:42:23:dc:b4:58:94:ae:78:d2:3e:ab:37:
92:53:c6:61:8d:e0:1d:fe:69:63:3d:ba:a5:c1:33:d6:7f:ed:
d8:84:d0:c8:ab:bd:11:9c:7c:51:38:5f:69:b8:cc:8f:d5:58:
40:c2:42:18:cb:ca:d8:cc:b6:51:c8:ed:3a:0b:f4:9a:70:f0:
97:95:a9:97:75:2b:9a:f4:82:aa:c6:06:b6:cd:59:a4:b2:4a:
9b:31:b1:9a:f7:fe:1c:99:51:1a:6b:aa:e5:5e:8f:9c:73:32:
1b:67:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:05 2024 by rpki-client on console-ams.rpki-client.org