Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VQIbDZlMSzMNZrCM7waTvTI0bF4.cer
File: VQIbDZlMSzMNZrCM7waTvTI0bF4.cer (raw, json)
Hash identifier: rBMsq43AlX9aOGecIa/HUWNynTe9J5S9/6cWomXFkpA=
Subject key identifier: 55:02:1B:0D:99:4C:4B:33:0D:66:B0:8C:EF:06:93:BD:32:34:6C:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E64CD4D234356ACBED1DCEEF8B0BF12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:32:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.151.0/24
IP: 2a11:6b40::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 12:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:64:cd:4d:23:43:56:ac:be:d1:dc:ee:f8:b0:bf:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55021b0d994c4b330d66b08cef0693bd32346c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:e4:c0:b7:ae:f7:8d:c1:e9:6c:cc:00:bc:
63:c9:05:6c:ae:1e:94:1d:c5:11:74:bf:7b:b0:29:
6f:2c:aa:ba:64:31:cd:bb:aa:f0:21:8c:50:9a:81:
d8:94:67:a6:fb:b2:84:eb:b1:ca:9d:cd:ee:6c:4a:
72:ae:64:64:02:c1:a2:34:60:2d:b5:17:c6:cb:a7:
e2:d2:da:d0:28:c1:8b:ed:eb:fd:c7:58:5f:e9:c2:
98:8f:0d:b5:80:75:b9:8b:e7:90:c3:fb:ae:26:25:
f9:c6:71:9a:15:06:b7:fb:0e:04:37:cf:62:a9:84:
8f:88:67:23:b1:c2:9a:0b:94:95:3d:5d:9d:8c:b5:
be:5a:b3:ab:ed:6f:06:17:ca:e1:d7:57:85:b2:1f:
ef:e8:e0:e5:b2:ab:11:8d:36:0b:ec:41:dc:9a:64:
11:0a:87:e2:45:da:91:bd:da:80:d0:a7:89:5d:53:
35:16:9a:4e:12:c2:9a:05:8f:ca:dd:d0:f2:92:d9:
ff:0a:cb:ea:f2:78:5c:98:7f:74:47:53:96:75:d2:
5f:98:f8:7d:ce:7a:d5:2f:1e:8a:68:89:b9:47:0c:
f4:60:d5:d9:a3:14:2c:dc:0d:54:17:f6:90:9c:98:
f0:31:c2:2d:8c:b8:bc:25:e0:28:fe:12:a5:a9:9c:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:02:1B:0D:99:4C:4B:33:0D:66:B0:8C:EF:06:93:BD:32:34:6C:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f40253-7fd7-4426-b4d7-693c1af4043b/1/VQIbDZlMSzMNZrCM7waTvTI0bF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.151.0/24
IPv6:
2a11:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
53:2d:22:9c:83:44:69:cb:d1:92:7b:fd:18:dd:e5:d5:df:4c:
2d:e2:a2:ca:0b:0c:40:92:ab:90:58:86:be:ec:e9:f5:85:56:
6e:f6:67:42:b6:dc:05:1d:77:3c:b5:32:80:63:dd:14:fc:2f:
f7:01:7c:31:9b:e8:1c:83:44:61:3b:4a:41:c2:00:88:b7:0e:
a7:25:d3:00:1d:9c:ca:31:db:e6:49:12:c3:bc:88:48:01:6d:
55:54:76:ac:38:75:2a:9f:7b:bf:45:e5:d0:91:7c:ac:37:90:
2c:b1:2d:00:06:ed:7d:1c:20:46:8c:fe:8c:fb:b9:21:04:51:
4d:3c:9c:a1:65:3e:76:76:e1:73:73:f8:3d:1d:ea:bb:4e:cc:
a4:bc:cb:59:f4:0b:01:8c:ef:11:2c:ca:f6:c1:8f:a1:96:3c:
34:59:68:c2:45:ed:91:88:18:e9:1c:2b:5e:de:88:b2:80:2d:
e2:27:c4:53:d6:0c:cc:7f:6f:4a:4c:6f:a0:ec:84:cc:9b:6b:
c0:f6:9a:c0:d3:d6:d8:51:be:60:af:cf:4e:a8:1b:02:59:e0:
ed:60:e2:a7:bf:90:83:1b:c3:77:92:27:51:4d:27:40:b3:5c:
15:ac:3e:6c:81:c6:98:c7:29:e2:90:93:a1:38:cb:9a:1f:2e:
c8:03:74:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:26 2024 by rpki-client on console-fra.rpki-client.org