Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5VMmvJuxmohvYUFbAQnz-UFZSU.cer
File: a5VMmvJuxmohvYUFbAQnz-UFZSU.cer (raw, json)
Hash identifier: lpxcwTTf3APZknNfHAzGiO4HkFEpvUJNrACGTK320gU=
Subject key identifier: 6B:95:4C:9A:F2:6E:C6:6A:21:BD:85:05:6C:04:27:CF:E5:05:65:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01896474B96534ADE8CDF5A3884E53F38BCD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/a5VMmvJuxmohvYUFbAQnz-UFZSU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 15:25:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 87.236.150.0/24
IP: 2a11:4080::/29
Validation: Failed, certificate revoked on Mon 28 Aug 2023 06:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:74:b9:65:34:ad:e8:cd:f5:a3:88:4e:53:f3:8b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 15:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b954c9af26ec66a21bd85056c0427cfe5056525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:33:f4:db:43:a8:d3:1f:77:49:84:10:27:
a6:c1:dc:f8:01:87:e5:22:1e:7c:a2:6e:a3:91:93:
1c:13:1f:24:2f:15:a8:62:76:62:08:80:e0:69:1e:
42:db:eb:b9:57:ee:45:12:55:1c:bb:0b:59:ef:fb:
7e:a6:e9:a8:62:65:6c:32:a0:30:78:59:23:20:84:
d9:ed:7d:c1:82:95:44:fb:ab:4f:dc:9c:66:23:70:
4c:62:6c:aa:e2:dc:ec:d5:f4:9b:e1:c8:49:f9:93:
6c:00:79:a7:ce:11:57:84:5f:67:c2:27:d2:d6:84:
1a:ad:44:79:8f:14:be:73:3c:f7:11:b4:88:e6:6b:
ac:af:12:98:99:7a:af:dc:72:7c:5e:a5:f6:a1:8c:
fd:f0:fa:b7:24:4a:60:6c:44:5e:a1:cf:9c:b2:3f:
a8:ab:e8:e8:28:cf:89:17:5f:f3:a5:c9:96:d4:3a:
4a:0b:df:a3:53:09:91:66:29:a2:08:aa:08:a1:fa:
2c:9d:e0:08:22:c9:4d:56:d6:6c:29:60:87:9d:28:
f4:8e:8b:5b:d0:a6:79:54:46:84:1d:81:19:51:46:
ab:46:71:c8:95:b2:2d:7b:89:ae:a3:18:72:2c:87:
95:77:dd:ce:2d:7f:f1:9d:d3:d6:fe:d0:ee:d3:05:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:95:4C:9A:F2:6E:C6:6A:21:BD:85:05:6C:04:27:CF:E5:05:65:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/15ab68-6de3-49cc-a99d-42a86d541870/1/a5VMmvJuxmohvYUFbAQnz-UFZSU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.150.0/24
IPv6:
2a11:4080::/29
Signature Algorithm: sha256WithRSAEncryption
6f:dd:c8:f2:32:8e:df:76:9b:19:5d:91:41:e1:e1:f6:18:f3:
8c:23:07:dd:8c:da:a7:be:a8:2f:be:ea:c0:4e:9f:72:20:48:
b6:da:eb:d2:78:ce:18:79:2d:97:9d:3b:df:9c:45:ea:0e:00:
b5:7b:2b:1f:dd:6b:10:94:b5:9b:b0:8a:43:bd:bd:b7:9f:f1:
2b:a2:b7:fa:d4:9e:97:f3:7f:89:7e:c6:a6:c0:e5:59:9a:4a:
27:73:d2:79:f4:f9:eb:04:20:cb:77:5a:21:9e:61:61:c5:65:
55:d8:c7:8e:5e:80:b4:cf:8b:c2:19:0c:6c:c5:12:7c:7f:8c:
e3:90:4e:3c:66:2b:23:f0:37:4f:64:cf:fa:33:cd:bb:b4:4d:
2e:ee:df:04:06:8f:b9:c9:ba:8e:24:9a:23:22:30:68:15:12:
c3:e2:43:d0:1f:2b:94:94:7f:e7:41:29:a0:b6:f4:61:98:9f:
7a:1d:53:f1:70:60:62:6b:d5:d1:40:44:d0:80:77:60:0b:04:
2f:5b:39:3d:10:93:4a:56:b3:b5:e8:cb:96:b6:c5:7d:89:9f:
1e:c3:d5:83:45:e5:a6:29:13:e2:5d:c4:2a:05:21:b9:2e:a6:
d8:14:12:2f:2a:38:57:70:11:96:ba:b6:7c:32:c7:70:d0:93:
3a:3d:a7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:43 2024 by rpki-client on console-ams.rpki-client.org