Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer
File: a5NU1otv9Ml-UAr8LUKTdbSQsLc.cer (raw, json)
Hash identifier: 0Kl9Uw2SKS9QDzZarjR0h5WTBESrwNS2zhSzOH8OWis=
Subject key identifier: 6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC8AADEA20EE0691159616B4F0ABF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.221.80.0/24
IP: 2a12:5f80::/29
Validation: Failed, certificate revoked on Wed 31 Jan 2024 08:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8a:ad:ea:20:ee:06:91:15:96:16:b4:f0:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b9354d68b6ff4c97e500afc2d429375b490b0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:05:73:2b:44:f6:bc:83:20:7e:31:66:a0:
28:b7:c6:c1:0e:3f:62:67:7b:65:b3:ad:a1:d8:8a:
57:9d:b2:2b:13:79:2e:52:25:25:db:51:65:f8:bd:
11:e7:58:52:94:ba:6f:36:b4:61:61:fd:06:b9:97:
56:df:07:84:66:e6:e8:70:37:4f:f6:ff:06:53:4f:
fd:35:6b:83:61:5d:0b:2d:2e:24:90:cf:41:ad:09:
63:a2:a1:8f:d8:46:ab:da:28:90:e9:6e:52:6d:c5:
8a:a1:d1:71:4f:5e:99:9e:27:37:73:fb:82:28:72:
51:e1:ed:7a:4d:e6:ca:e6:02:32:94:57:e4:3d:d2:
7d:c7:f8:8d:52:49:74:12:01:f1:26:00:bc:cc:fe:
6e:00:73:74:20:a1:b8:20:cf:ea:af:41:6d:2c:9c:
ca:a3:ee:1c:2d:96:f8:9b:1d:e9:45:e2:4b:11:51:
29:9f:89:8a:9f:a8:ab:46:96:d3:8f:41:e4:93:94:
20:5e:5b:f5:41:00:ab:08:fc:63:bc:cd:0c:10:bf:
36:5a:d4:01:6c:d5:fb:a2:56:8e:21:5a:9d:61:f1:
46:1c:26:cb:b5:d7:e1:66:ac:c1:88:85:58:61:16:
a0:32:cd:2f:f4:f9:87:9c:25:db:92:b3:fa:b3:7d:
f9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:93:54:D6:8B:6F:F4:C9:7E:50:0A:FC:2D:42:93:75:B4:90:B0:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/488805-38c1-4dde-ae3e-0e5bb8164b63/1/a5NU1otv9Ml-UAr8LUKTdbSQsLc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.80.0/24
IPv6:
2a12:5f80::/29
Signature Algorithm: sha256WithRSAEncryption
39:4d:bc:99:9a:94:8e:1e:11:7a:60:fb:59:3e:75:c9:a9:08:
9e:b0:81:0e:11:38:33:1b:a3:0a:02:da:f9:07:d1:19:7b:3f:
6f:33:c9:02:f3:43:c8:fb:78:2a:fc:44:26:66:dc:12:0e:7d:
1e:28:80:1e:b9:d3:15:07:ac:2c:f5:50:34:8e:65:e1:19:46:
da:21:fb:74:68:a2:4c:b3:52:20:1c:cb:d2:c6:af:22:77:22:
1f:94:3e:7f:47:32:f5:41:c6:76:4b:d5:d4:7c:99:c1:b0:f0:
c1:9b:5a:63:8f:05:c1:39:6e:45:80:52:22:61:62:32:ef:56:
1b:ea:49:74:33:97:75:e7:70:07:62:49:a5:28:56:22:28:6b:
e1:f2:be:64:73:ca:20:61:4d:8f:a2:51:fb:95:b5:f5:18:13:
6a:3d:91:ae:ad:69:d9:f6:a7:20:b8:31:6b:4e:96:26:2f:57:
90:25:80:56:3d:94:10:0e:5d:85:a9:67:90:fa:71:2d:fd:f9:
9c:63:84:37:0b:87:db:1e:da:7c:54:b9:45:73:73:3b:13:fc:
a7:70:d0:01:97:07:07:7d:63:da:2f:23:4f:83:a6:1e:18:b9:
03:f1:ef:6f:7e:62:47:22:c3:84:c0:f4:4c:d6:81:46:53:e9:
a3:60:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:43 2024 by rpki-client on console-ams.rpki-client.org