Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
File: VDsOblBlUEM1elUtS2wrMC3ll_A.cer (raw, json)
Hash identifier: DCl/gw28JIE2DNqAnKufmVJLKVhQXZvbuzxMl5KW1EA=
Subject key identifier: 54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A2499B5ED1BEC4694D1E485C78E47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:31:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.167.0/24
IP: 2a12:8000::/29
Validation: Failed, certificate revoked on Wed 29 Nov 2023 10:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:24:99:b5:ed:1b:ec:46:94:d1:e4:85:c7:8e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=543b0e6e50655043357a552d4b6c2b302de597f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:2c:10:c4:4f:ed:2c:e5:4f:83:c7:cc:fb:
ac:aa:bd:3d:4a:5e:6f:d1:d3:9f:14:43:f0:8f:aa:
c9:f3:63:ce:bb:cc:e2:11:1f:3f:a5:a5:7f:49:34:
52:a4:9c:43:b4:0e:72:bf:a1:d7:bb:6f:b0:c3:cb:
58:b1:f0:c9:27:ac:c0:5f:65:a6:17:bd:46:a6:8d:
a8:2e:f5:69:4a:f4:a3:cf:4e:ca:21:70:2d:47:2f:
bd:a2:aa:f0:08:cc:44:59:3a:16:0e:7f:51:07:e7:
6c:a7:a1:6f:ac:39:4b:9f:e4:5b:8f:1e:21:9c:ca:
9c:fa:fe:8f:8d:3d:f3:08:67:7f:fc:79:ee:f1:f4:
74:a9:f3:c7:ee:52:b5:00:3d:8a:5c:5e:59:d8:7b:
63:d3:ed:74:ef:6c:65:4e:6f:75:65:ac:a6:01:80:
f9:ef:e5:9c:87:a1:c6:19:40:15:4d:2c:f0:3f:5e:
43:da:3a:1e:49:44:68:e8:c0:00:02:32:2c:c8:96:
ec:75:ad:74:3d:ca:1b:18:03:9a:ab:32:44:34:26:
96:4a:fd:07:40:3e:46:f5:3f:33:b4:44:45:44:fe:
5f:fb:36:14:bc:d7:f9:67:a9:0c:55:13:f9:ea:fc:
8e:34:ff:4e:a1:da:bc:4c:0e:44:36:62:57:fd:82:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.167.0/24
IPv6:
2a12:8000::/29
Signature Algorithm: sha256WithRSAEncryption
47:4f:e9:8b:54:18:4c:f8:12:b0:cf:51:6d:fe:df:21:f7:5c:
b3:a1:69:5b:1c:23:dc:bf:b2:dd:d1:1f:fa:49:15:ae:e9:bb:
6f:8b:72:2a:0b:05:4e:ff:9a:17:60:9c:32:51:2b:43:2b:c4:
f0:82:3f:e3:fe:41:eb:90:8e:ff:17:94:61:88:54:80:64:fe:
5f:be:3d:13:8c:db:be:7a:ee:e7:a7:5a:02:69:c5:9e:08:19:
84:35:c9:fa:03:2a:69:83:08:42:34:cb:05:3e:04:12:eb:c6:
c8:bd:b7:b5:be:1f:ab:25:37:01:04:99:e4:d7:61:42:3e:10:
00:a4:ff:7f:e8:ff:f4:7e:7f:e2:e0:08:cb:b3:da:2e:e0:fa:
67:2a:d5:17:fb:6d:fd:0e:3e:07:df:0f:83:2b:e3:3c:cf:08:
8d:fd:1d:7a:f5:30:b6:ce:1c:a2:a1:f5:1c:20:39:92:c8:fe:
7f:58:4a:de:ce:68:b7:8d:b5:68:9a:5d:66:d5:e2:84:4b:9c:
f9:94:19:a7:cb:1a:43:e6:92:79:b4:8f:e1:48:ce:5a:d6:1d:
96:41:11:d0:ae:c0:4a:8d:8f:38:ee:b9:8c:d3:0c:4c:fe:d3:
e8:ad:49:bd:3e:ba:eb:70:f0:33:e7:65:1b:03:6c:14:07:af:
51:de:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:46 2024 by rpki-client on console-ams.rpki-client.org