Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8JOYRyWeO3cXme1wy6NRD1mOYU.cer
File: a8JOYRyWeO3cXme1wy6NRD1mOYU.cer (raw, json)
Hash identifier: /0AFS/gAAJKFmOKp1vO7BzB68FC7+zZC8GFlj1/w5lI=
Subject key identifier: 6B:C2:4E:61:1C:96:78:ED:DC:5E:67:B5:C3:2E:8D:44:3D:66:39:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168F33E6B836EE1899E5CD8B2E0BBAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/a8JOYRyWeO3cXme1wy6NRD1mOYU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.157.106.0/24
IP: 2a11:7180::/29
Validation: Failed, certificate revoked on Mon 11 Dec 2023 13:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:f3:3e:6b:83:6e:e1:89:9e:5c:d8:b2:e0:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bc24e611c9678eddc5e67b5c32e8d443d663985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:4e:e9:c3:81:b2:32:b7:93:b2:0b:bd:13:
09:43:05:ff:49:d1:0e:44:a6:5a:06:75:df:af:36:
52:83:a4:d5:a5:ea:84:f6:11:fd:04:1d:84:8e:9b:
e4:4e:5d:10:3b:86:04:dc:05:33:6b:be:a1:d6:06:
c9:1f:5a:8e:18:9b:6d:63:1a:13:22:1f:0f:b5:78:
6e:4f:39:e3:6c:f5:0f:a2:de:e4:f8:8f:16:cf:a7:
d8:a8:c1:13:c7:48:49:80:a7:35:e7:61:7e:9b:14:
82:68:65:b3:13:c0:4c:47:ef:32:98:78:9f:56:9c:
1a:b3:a7:43:67:63:0b:79:29:56:52:4c:16:7e:21:
2e:78:a6:23:63:6f:2c:1a:5b:fe:09:72:a1:54:0d:
c0:0e:f5:15:fc:8f:e8:cf:64:5d:c8:14:4d:eb:78:
dc:71:52:b1:26:c4:94:12:fa:32:b1:58:7b:fb:a4:
e9:70:2e:87:84:a6:e0:e3:a3:a8:c7:f0:f8:3a:97:
46:18:d4:18:b6:4e:ad:99:a9:c4:74:fa:93:f0:af:
45:b4:ac:82:43:fd:4f:a3:b3:59:4b:57:d3:eb:6c:
93:5e:e2:ca:58:81:9a:b3:d5:76:97:84:8c:96:1f:
d4:74:0c:a4:a3:89:41:22:35:b1:8b:10:11:76:a3:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C2:4E:61:1C:96:78:ED:DC:5E:67:B5:C3:2E:8D:44:3D:66:39:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/a8JOYRyWeO3cXme1wy6NRD1mOYU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.106.0/24
IPv6:
2a11:7180::/29
Signature Algorithm: sha256WithRSAEncryption
02:a2:dc:19:2b:97:18:fd:c2:c8:2a:be:46:46:17:e1:73:24:
0b:67:f4:d7:36:fd:cf:41:99:33:93:01:de:e0:61:13:90:17:
26:d3:78:6d:05:10:48:46:d3:00:b8:5c:62:32:a8:55:44:cc:
da:3d:04:16:82:c4:84:98:38:99:f1:b5:bb:04:50:37:58:ec:
01:01:06:41:22:b4:38:32:26:01:5d:77:c4:a0:ec:1b:06:f8:
60:71:4d:95:dc:9b:de:76:13:95:dc:c5:f7:ca:21:4d:fa:a8:
21:c6:85:cf:61:e7:f8:04:89:5c:10:23:44:86:3a:42:c4:e6:
3c:fe:ed:0f:3f:4c:77:03:28:25:47:37:74:73:62:86:d3:db:
a9:27:45:17:78:12:69:e8:61:f7:d2:32:63:2a:63:75:18:92:
8e:af:17:db:80:7f:db:2d:47:57:95:6c:10:ff:5d:47:ab:a5:
27:57:22:5e:7d:43:40:61:80:16:b4:fa:7f:b3:8f:ee:e3:e2:
77:75:14:a9:b7:7c:e5:f5:88:a6:e6:ec:1c:77:4e:f1:b3:46:
e2:65:20:7c:30:d9:ce:9e:c7:56:4a:94:d1:94:3e:5c:06:6d:
82:10:ba:b4:97:72:2e:d6:4e:01:98:e7:15:0f:c8:97:36:d5:
d4:13:25:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:18 2024 by rpki-client on console-ams.rpki-client.org