Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VCyekOjtGRnJQf1qJTjp8SAh83I.cer
File: VCyekOjtGRnJQf1qJTjp8SAh83I.cer (raw, json)
Hash identifier: 8DEQUx676vnfpDwcH0ynwTeCKnxgoSicUHJHjsAJmgU=
Subject key identifier: 54:2C:9E:90:E8:ED:19:19:C9:41:FD:6A:25:38:E9:F1:20:21:F3:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E5A5E8E8AFD0ED7107DC748209651
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/VCyekOjtGRnJQf1qJTjp8SAh83I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.238.0/24
IP: 2a11:ae40::/29
Validation: Failed, certificate revoked on Tue 24 Oct 2023 07:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:5a:5e:8e:8a:fd:0e:d7:10:7d:c7:48:20:96:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=542c9e90e8ed1919c941fd6a2538e9f12021f372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4d:d6:15:0b:f8:ad:57:2c:c7:51:02:94:08:
a1:94:9b:58:13:a2:98:f8:ec:af:2b:7c:52:0f:ca:
47:8a:4d:bc:0d:0b:d4:cb:73:26:99:cf:53:6c:5b:
5f:e0:28:99:11:17:df:08:72:a2:8b:0d:1a:25:cb:
de:b8:60:7d:21:1f:62:a3:b6:a7:df:16:0c:b9:c3:
26:b3:36:1e:14:11:54:8f:58:2c:54:8b:ca:b8:49:
a6:cb:6a:7a:a9:31:e4:5a:be:2e:fa:b7:18:e1:71:
1e:7c:f2:c7:14:47:57:99:d9:1a:1c:13:88:8e:d0:
0a:dc:2f:ef:2e:61:68:d9:bb:9d:da:e4:23:48:40:
ff:3e:c7:d0:d8:ff:60:7e:8d:69:4b:67:52:f1:be:
41:df:40:cd:4b:4d:da:29:28:30:80:8b:88:af:6a:
86:64:24:90:e9:9f:0b:3e:4e:6c:74:62:b1:08:55:
0e:f0:15:2d:85:61:d8:45:80:ac:80:a4:a4:2c:e4:
18:e5:d1:aa:ae:0d:7c:7b:02:ee:01:e4:54:9e:12:
88:1b:84:8a:0f:44:f2:54:bf:7d:6c:d2:1a:c5:30:
15:bc:53:65:48:c2:9c:10:5d:c2:89:11:08:34:b2:
5d:31:fa:77:34:93:68:54:14:3e:39:b9:d4:a8:d8:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:9E:90:E8:ED:19:19:C9:41:FD:6A:25:38:E9:F1:20:21:F3:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9f1909-2190-4c1e-b74d-f0aa454f204a/1/VCyekOjtGRnJQf1qJTjp8SAh83I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.238.0/24
IPv6:
2a11:ae40::/29
Signature Algorithm: sha256WithRSAEncryption
8e:0c:0e:06:3e:b0:b6:2e:12:38:9c:37:63:5c:b7:25:a0:36:
96:b1:18:a5:9f:9b:26:a2:70:ff:2e:36:4f:22:47:82:38:fd:
ff:3c:98:7e:fc:93:cc:89:5f:14:07:66:aa:6f:30:09:e5:69:
ac:53:06:7d:fe:3e:3b:b1:c5:04:d8:08:28:d7:b3:77:49:0a:
18:52:8a:90:b6:e3:83:de:d7:6c:3c:3c:77:68:14:21:4e:14:
26:70:84:21:07:d5:12:13:41:b3:26:33:7e:69:49:5e:d4:8e:
9d:b3:8f:a4:85:78:f2:35:9d:3c:1e:b5:3d:c8:b0:0f:63:bd:
f1:7d:6e:3a:37:08:84:1e:d1:8b:4c:0e:c2:fa:1c:f4:86:47:
2a:7b:30:5f:2a:2b:e0:87:77:c1:f1:0f:42:75:93:0b:fc:2b:
72:09:f1:ee:ee:f0:bb:1a:64:50:64:92:d6:3a:11:a7:d1:e0:
bb:90:2e:2f:d9:f4:b8:34:90:dc:e4:10:3d:d7:1a:a7:fd:e5:
4f:61:85:62:47:d1:2b:bd:1c:5f:f4:5b:b4:7d:66:cc:53:1c:
5d:bb:ad:a1:73:df:f2:c4:09:99:3a:b1:c0:cf:bd:64:47:0a:
e8:43:ca:a6:20:68:8e:a4:e2:56:f6:82:97:b8:3d:a8:96:9b:
b8:c9:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:45 2024 by rpki-client on console-ams.rpki-client.org