Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
File: YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer (raw, json)
Hash identifier: dT+j+Z1IyOop47730djC4TfdkngCpf52hAhM8ClEcXk=
Subject key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571689538B7E7CE271818D63229A80A55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.202.100.0/22
IP: 2a0e:a0c0::/29
Validation: Failed, certificate revoked on Fri 22 Dec 2023 15:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:95:38:b7:e7:ce:27:18:18:d6:32:29:a8:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:fc:f9:c3:45:e7:52:30:39:74:af:3f:8e:
23:9f:60:72:37:0a:09:41:19:41:60:d2:db:78:14:
a1:53:1b:3f:81:09:eb:d2:21:23:44:f3:98:be:42:
07:c1:9a:61:18:6e:b0:21:8f:e8:a9:5a:ad:fd:1f:
9a:7b:53:31:5e:22:55:98:87:7d:6a:81:81:5b:a4:
eb:0b:76:2c:3c:32:35:c5:9b:c8:b4:aa:4f:d0:6c:
60:40:aa:2d:a4:34:1f:e0:d9:7a:5e:16:5c:d9:45:
e4:68:cd:15:18:2b:d7:2f:86:10:21:72:15:d9:a6:
b0:88:bd:88:7b:be:c6:d9:e2:0b:2f:d2:d3:0b:f8:
55:0b:3a:16:7c:d5:a0:ef:87:3b:9b:07:36:d5:ac:
f2:d9:19:69:7c:a0:8c:21:11:70:61:93:bb:45:8c:
e7:16:f3:ee:e5:60:42:e8:d4:93:42:9b:d1:bc:86:
0e:56:a8:89:8d:c7:1d:60:86:69:49:c6:86:02:1d:
37:54:09:d8:b9:11:8a:58:f7:04:9a:2f:76:84:ec:
e7:aa:3e:d1:b1:c7:6a:41:0c:d5:d2:a2:d9:d5:3c:
9d:64:6b:7a:ab:ad:4e:bc:57:29:75:19:a2:02:65:
26:88:f1:21:9d:af:7f:2f:0e:55:dd:34:a7:49:77:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.100.0/22
IPv6:
2a0e:a0c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:cb:cf:62:79:98:ec:c6:36:20:38:3f:87:73:2b:23:c9:99:
b2:3f:64:73:36:ed:56:cf:b3:05:46:42:71:1b:01:53:ec:94:
67:3a:56:f9:7c:a9:96:a9:df:b6:c4:c7:60:ab:3f:d9:a9:0e:
8a:d2:c9:8a:16:11:b8:f5:e4:55:4d:3e:44:24:ec:e8:37:03:
e3:19:a1:d1:48:7d:91:40:51:a2:c7:46:83:90:7e:08:42:09:
00:e8:ed:25:97:a6:15:b5:bd:c6:6a:81:33:36:c7:2f:0c:31:
f8:20:8f:f6:73:40:35:0d:83:41:c2:48:93:d4:90:a6:a0:a5:
35:b4:75:07:62:9d:8c:4e:cc:76:7c:69:b3:c5:22:6e:8a:da:
c4:01:b9:55:5f:8f:b6:37:c5:4b:f2:07:45:8e:d1:cd:8e:c8:
52:35:f8:38:2f:c8:91:c7:32:e7:3f:94:a8:ce:fd:4e:89:87:
66:8b:46:53:7a:f4:fe:45:ba:d6:cf:56:fc:f6:6c:b6:fd:7a:
8c:54:d3:b3:83:fc:36:7f:d6:e9:31:ce:cb:50:cd:ed:67:af:
a0:e4:ae:fe:4c:65:61:f6:20:a6:18:19:48:f6:b3:9d:18:58:
e8:83:3f:49:96:53:91:98:07:21:76:26:55:87:4e:bb:6b:d5:
0b:a1:83:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:01 2024 by rpki-client on console-ams.rpki-client.org