Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
File: TcPBj0fqXt1xNd8keGjhF8aByH8.cer (raw, json)
Hash identifier: G7ES3JDdHJglFuAWnoQN6QYME1++2Qmi/wSReGA1npw=
Subject key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8913FFAA114096C2A48A483F30315C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:32:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 190.92.168.0/21
IP: 193.30.117.0/24
IP: 2a10:e6c0::/29
Validation: Failed, certificate revoked on Thu 30 Mar 2023 10:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:13:ff:aa:11:40:96:c2:a4:8a:48:3f:30:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:e5:1b:86:47:a6:87:63:22:52:17:e2:5e:
53:a1:fe:60:f2:9d:4e:52:a4:f6:01:fe:4c:bc:78:
f7:a0:7a:6e:04:a7:28:f5:78:d7:b0:e6:74:f6:a4:
2c:98:d1:04:24:06:a7:2b:33:81:61:0a:95:27:64:
cc:32:f9:c4:de:48:7b:54:41:e6:da:2f:4a:d0:87:
fd:38:4c:cd:e3:9a:97:4c:3d:b6:30:ba:84:4c:ea:
76:e4:6f:93:35:e0:8c:96:fa:66:72:6f:e6:e7:ee:
f8:cf:cf:32:33:1e:b4:f0:62:d9:76:2c:4d:07:e8:
7a:b7:05:77:b6:67:09:d5:e1:13:ff:f1:f4:50:69:
01:98:91:6f:de:8c:18:82:87:97:97:4b:24:a0:5a:
59:b6:a0:d7:11:10:9c:4a:2e:83:5c:de:b6:9b:f6:
bd:9b:d1:78:81:12:35:47:19:cb:98:80:95:33:3f:
55:ed:8a:57:2d:f2:1f:72:9a:52:e0:47:9d:38:22:
48:34:a0:1b:e1:0c:62:17:70:13:4c:7a:57:a6:f2:
d1:73:d0:ea:d0:20:0e:e8:f9:1f:32:08:fe:21:56:
a9:f6:98:3a:84:95:5b:83:89:29:36:2a:95:12:e2:
81:65:22:bc:a5:f2:e5:8c:64:ec:f6:bb:f2:17:b2:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.92.168.0/21
193.30.117.0/24
IPv6:
2a10:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
20:bb:bc:87:dc:04:ff:cd:62:1e:d7:9c:cd:ac:63:9e:5f:dd:
d7:b7:f6:97:62:ad:55:5c:bb:fd:90:97:d1:4f:e7:f5:4e:35:
90:4c:b6:56:ae:91:b0:aa:4c:89:82:8d:5c:b8:35:66:ba:05:
bc:49:f9:56:e5:21:67:2c:3c:05:89:6d:ca:75:c8:1d:56:81:
10:fd:53:0f:a9:7b:9c:58:5d:66:6e:bd:a8:ef:65:6d:ce:68:
df:f2:c6:3f:4e:d5:c8:83:98:d3:83:1c:8b:45:7a:a1:b8:80:
80:aa:1b:c7:bd:de:79:f4:ab:f6:c8:7e:57:b2:e3:be:62:9f:
8a:43:5d:8b:b6:74:56:7e:12:29:67:cf:45:9a:06:cc:e2:b4:
9a:d2:00:ab:32:32:05:71:e9:42:6d:dd:b1:88:1a:04:cb:ff:
44:b5:af:fe:15:9b:a3:82:87:38:58:08:a1:16:d7:34:1b:8c:
57:6d:6c:db:87:e4:db:c7:48:4a:cc:4c:e0:f9:66:f6:88:47:
7f:ae:d6:6b:a8:99:9b:00:22:6d:49:05:f6:bd:de:bb:6e:73:
a3:51:27:3d:03:76:54:8a:65:37:cb:9a:df:3e:dc:c9:94:61:
2d:9a:69:3d:07:f9:86:19:4f:d6:95:17:86:1a:d5:c7:21:50:
d5:a3:db:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-fra.rpki-client.org