Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer
File: TbwMBjPL7y6X_OrHl2M9SRL3b5Y.cer (raw, json)
Hash identifier: zP0Q8b35JzFfonG4WdU3y4dCy2udJWVc1MhaDSiucfE=
Subject key identifier: 4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB01D71D25AEC52F8AEB6365BD808CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.246.4.0/23
IP: 193.246.102.0/23
IP: 217.198.187.0/24
IP: 2a0f:f080::/29
Validation: Failed, certificate revoked on Thu 09 Feb 2023 08:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:1d:71:d2:5a:ec:52:f8:ae:b6:36:5b:d8:08:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dbc0c0633cbef2e97fceac797633d4912f76f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:e5:5f:77:92:59:85:74:3d:22:04:77:a9:
67:15:5a:0f:f3:d3:5c:55:57:f1:c2:76:6e:b1:dc:
3c:9c:f3:96:f1:cb:19:28:06:ff:7f:03:83:5a:a5:
1f:a4:e9:6b:e5:23:4a:3f:0f:0b:d5:a4:93:ce:fd:
ed:1f:17:09:a8:49:86:7b:c1:49:98:0c:98:59:d3:
2e:a9:1c:50:53:46:f1:10:16:6a:b8:b8:f2:51:4a:
a2:db:0f:89:53:54:40:d7:c2:12:10:b3:33:18:a3:
a6:d8:86:22:fc:c1:ee:d6:7f:c8:4b:1e:af:fd:56:
40:94:89:78:12:35:c0:64:db:a8:e1:8c:ae:7a:1c:
43:82:99:9c:f6:3a:09:04:9a:c5:63:07:f9:93:5b:
97:14:18:51:44:45:84:b2:ba:69:5e:a5:86:93:36:
a0:32:32:47:c8:5b:20:35:29:8b:44:68:33:a7:4a:
ff:f8:c6:fd:62:16:5b:28:59:b1:b4:36:b6:0d:4a:
13:c1:c1:95:02:e8:26:5f:9a:57:87:68:79:69:b6:
ea:3e:96:78:90:bd:71:86:7e:be:29:61:c5:27:74:
6b:82:fd:3a:dd:57:41:72:47:43:71:6c:a6:66:eb:
5b:d7:81:3c:23:54:49:93:e3:d3:70:fc:08:74:7e:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BC:0C:06:33:CB:EF:2E:97:FC:EA:C7:97:63:3D:49:12:F7:6F:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b4b509-4a06-4bc4-9384-53e410825676/1/TbwMBjPL7y6X_OrHl2M9SRL3b5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.4.0/23
193.246.102.0/23
217.198.187.0/24
IPv6:
2a0f:f080::/29
Signature Algorithm: sha256WithRSAEncryption
15:04:42:1c:0f:8f:70:e3:d6:4b:de:51:3f:fa:2f:f0:74:a2:
e5:11:30:fc:42:22:96:b1:2d:c0:c9:2c:bb:37:20:f5:3d:3e:
cc:4a:72:0a:fe:07:70:28:b5:d4:f9:76:41:e1:17:a8:63:0d:
3a:c1:7d:d7:f6:63:f2:7b:16:6e:d6:e2:18:f8:af:97:07:c6:
e4:d8:81:02:27:e0:09:09:36:98:06:71:29:5c:d4:47:c8:cf:
53:65:bc:2f:b3:44:82:f7:85:6c:ed:79:0d:da:87:aa:31:96:
78:25:6b:c0:76:a0:6b:0a:9b:40:5d:a5:86:a2:f4:0c:9f:f5:
8b:10:65:08:29:c3:ba:2b:60:07:ad:72:61:e2:19:a3:3a:53:
4a:0f:c6:a8:7a:04:77:23:3d:f7:ef:97:b1:44:27:09:74:c4:
70:b3:8d:12:4b:28:40:0b:3b:70:47:a3:e5:04:7d:80:54:9b:
d7:e9:bd:2b:9b:d0:e5:e3:1b:b5:b6:4d:39:43:bf:65:66:54:
7c:e3:99:ca:46:1f:77:30:08:69:4a:8c:ee:66:9d:66:82:71:
0d:64:83:d0:6e:47:15:e5:10:1b:19:7d:13:07:3a:61:8d:0c:
77:11:4f:0f:ae:00:06:fa:cb:83:f8:74:91:63:cd:b6:33:ff:
d7:1f:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-fra.rpki-client.org