Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TsqN4BGPZ8F876KztJF8fv0Jl5Q.cer
File: TsqN4BGPZ8F876KztJF8fv0Jl5Q.cer (raw, json)
Hash identifier: B+vOwoJPfOg+ilgQyTJUidRH3yPQSGeqV4lL42Cn2/8=
Subject key identifier: 4E:CA:8D:E0:11:8F:67:C1:7C:EF:A2:B3:B4:91:7C:7E:FD:09:97:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168E0BBBD391007203830484EE944E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/TsqN4BGPZ8F876KztJF8fv0Jl5Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 83.138.55.0/24
Validation: Failed, certificate revoked on Tue 15 Aug 2023 07:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:e0:bb:bd:39:10:07:20:38:30:48:4e:e9:44:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eca8de0118f67c17cefa2b3b4917c7efd099794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:67:dd:91:5d:7a:a5:36:73:74:76:d1:59:
b3:62:df:92:dc:1c:ba:fb:31:17:6b:20:e9:b6:73:
e2:b9:0d:cc:aa:b7:3e:59:cf:46:09:1c:d6:da:51:
fe:c7:e7:4e:6c:f1:05:39:08:fe:14:54:21:13:a6:
52:5d:71:1f:ef:aa:39:ef:e3:9d:dd:53:39:2d:fe:
9b:6e:8f:f8:65:4b:10:e9:68:a8:9e:65:e4:c1:87:
f9:fb:4d:cb:f3:4b:79:07:a9:c3:91:44:2b:58:26:
80:e2:c8:39:3c:0d:28:74:57:17:d8:34:db:9b:7b:
ed:30:a1:31:02:73:23:ef:c6:c8:c4:be:c6:55:81:
f5:65:d5:9a:cc:be:fc:b4:59:34:1d:0e:06:00:ca:
60:67:d7:47:2e:52:37:23:80:85:7c:55:8b:57:55:
9a:61:16:a2:f4:b0:15:46:6c:bb:54:20:b1:b6:4e:
dc:2b:eb:70:9e:d0:95:a2:94:aa:c9:47:fe:c9:51:
6f:18:6e:a2:ac:da:42:3e:42:8f:d9:08:65:b1:83:
4e:f5:ea:22:9c:96:b1:9b:be:28:82:d0:38:a9:d7:
63:45:0b:07:19:12:4c:e3:07:ae:13:09:32:5d:ca:
d4:65:9a:ba:29:b0:f2:c1:1f:7f:e1:80:8b:c8:b6:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CA:8D:E0:11:8F:67:C1:7C:EF:A2:B3:B4:91:7C:7E:FD:09:97:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fb305e-2dff-4e6b-8635-e886e3761127/1/TsqN4BGPZ8F876KztJF8fv0Jl5Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.55.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a5:0a:1b:9c:b0:4e:1e:e1:b3:27:d8:5a:26:43:c1:12:64:
a2:f8:a0:75:31:c4:7f:bf:7b:d0:90:37:c1:0f:83:3e:da:e7:
ea:48:b6:9d:28:25:58:e0:58:38:6b:38:2d:ba:e2:77:ae:1d:
45:18:5b:4a:70:35:01:8d:80:82:79:e8:dd:d9:ff:3d:c8:19:
e1:e7:ca:42:80:42:0a:6b:a8:e7:d9:19:9c:5a:72:4d:88:29:
bf:d0:3d:ef:f3:4e:a0:e4:f9:ec:58:a0:84:b1:a9:c4:17:d2:
02:2a:cd:80:5d:5a:96:fd:96:32:aa:74:84:64:0f:77:c9:12:
5a:fb:dd:1c:52:76:77:35:30:b5:51:11:07:2b:95:75:58:f1:
bd:67:bf:1d:33:59:c3:a3:f2:6d:8e:3e:64:40:64:b7:f8:af:
dd:51:80:34:89:ad:2a:57:b9:47:96:99:f6:cf:2b:d7:35:17:
19:90:57:f1:62:4f:2e:a2:1f:07:ef:9a:50:6d:9b:64:64:8c:
9c:2f:ef:df:28:48:84:09:ae:15:9a:3d:5f:f1:d1:03:0d:62:
39:5d:d7:86:e5:44:5a:c6:e9:d3:8d:73:aa:03:f3:7d:f0:45:
f6:b9:11:d1:3c:00:26:5f:90:bb:53:63:0e:82:6e:c4:c0:0e:
5c:92:93:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:21 2024 by rpki-client on console-ams.rpki-client.org