Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDEjuveOPXZeFFD4PZRkfOvM4jM.cer
File: aDEjuveOPXZeFFD4PZRkfOvM4jM.cer (raw, json)
Hash identifier: HchB9y5xj0kA1uY08CCZmnEGSps03yOP4+j3josJJQY=
Subject key identifier: 68:31:23:BA:F7:8E:3D:76:5E:14:50:F8:3D:94:64:7C:EB:CC:E2:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAE95CCC67C3511E9C004EEFD25F112
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/aDEjuveOPXZeFFD4PZRkfOvM4jM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.41.252.0/24
IP: 2a11:2f80::/29
Validation: Failed, certificate revoked on Thu 31 Aug 2023 07:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:95:cc:c6:7c:35:11:e9:c0:04:ee:fd:25:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=683123baf78e3d765e1450f83d94647cebcce233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:0e:43:73:48:31:71:83:8a:2e:2c:a6:84:79:
45:4a:82:a8:0e:49:2e:45:a2:4f:dc:a6:70:1e:36:
6b:66:46:de:b7:40:60:8b:ce:11:3d:1b:7c:0a:03:
55:63:d6:1c:1c:b8:ab:93:70:88:85:6b:55:53:41:
cf:f7:dd:b7:74:22:b3:8a:e4:19:66:3b:de:c5:23:
96:1b:a6:33:cc:bb:77:17:f3:bd:f1:c2:ca:8e:9d:
8d:dc:5e:82:12:41:a1:6f:9f:51:5d:dc:50:49:b9:
34:a5:ed:d2:e5:77:8a:8d:3a:75:30:42:fa:e9:c5:
75:fa:b0:06:23:bc:31:6e:b5:7c:e5:3d:17:b0:31:
8a:8f:85:ac:90:51:cc:83:63:38:1f:ff:f2:e9:dd:
4a:bd:50:74:5d:71:12:3f:71:52:9b:54:fc:97:2d:
1a:e7:cb:29:07:0f:0f:b2:95:d0:0e:b5:3f:de:8e:
20:32:39:a3:4d:a4:52:10:d9:ef:7e:db:d1:39:65:
a7:ab:0c:e3:92:8f:40:84:87:e7:50:1b:69:b0:27:
15:be:88:9f:2e:b3:1a:f7:aa:dc:1f:ae:d7:4f:bf:
fb:e3:20:a8:cf:7d:2f:2d:f8:1f:72:c0:34:cb:5d:
16:7d:23:13:a2:71:a2:86:99:b6:9d:46:61:33:15:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:31:23:BA:F7:8E:3D:76:5E:14:50:F8:3D:94:64:7C:EB:CC:E2:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/95d525-ac33-40bf-a6ca-ae155fd98d47/1/aDEjuveOPXZeFFD4PZRkfOvM4jM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.252.0/24
IPv6:
2a11:2f80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:45:2b:df:0b:c5:25:c3:aa:4c:0d:78:51:0f:71:00:9f:6b:
37:01:22:8a:5c:14:24:07:3c:cc:45:0a:30:e4:44:da:e6:43:
13:f5:42:90:fe:f8:d6:39:14:23:d0:21:7b:20:c2:28:58:37:
c4:b2:ba:d8:a2:db:47:10:c3:75:6a:68:81:8f:18:dc:9b:99:
ee:b7:ed:93:a8:14:48:9c:d0:7c:13:f6:69:bb:33:5b:e0:fb:
4a:f7:2b:a7:b2:63:da:e1:21:83:56:48:34:7c:45:71:ea:4a:
72:e5:53:9b:77:f7:55:47:7b:4e:1f:20:53:d7:86:ba:ec:1b:
33:c3:83:67:d3:82:cd:c6:c1:a6:ec:24:02:0b:c9:cf:2b:d8:
91:ea:f6:f8:1f:8a:51:d7:5a:be:1a:01:64:76:4a:46:1f:36:
41:55:1d:a7:b5:cb:f4:5f:1c:4c:59:d9:f5:bc:b3:08:8e:1f:
28:bc:41:33:ef:06:7f:99:4a:b2:fd:33:b3:a6:ed:a2:43:3a:
7d:33:b5:d6:03:f7:62:d4:52:e1:08:7d:5e:61:09:70:6e:af:
bf:d8:31:bd:d4:1c:99:74:10:a6:8c:23:22:69:99:bf:86:ce:
4c:95:5b:ff:14:71:77:32:17:d8:17:ac:46:2a:ac:e8:3e:2d:
b6:94:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:29 2024 by rpki-client on console-ams.rpki-client.org