Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/abxuX0hsmtickq4wO9vhbIX5fsg.cer
File: abxuX0hsmtickq4wO9vhbIX5fsg.cer (raw, json)
Hash identifier: 6u1BbE30vxroAemNPSXmuFdfIsC2Nij9mJJwjW0Cxyg=
Subject key identifier: 69:BC:6E:5F:48:6C:9A:D8:9C:92:AE:30:3B:DB:E1:6C:85:F9:7E:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B631424E865E4AFE7D4CA4670E1DFF1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/abxuX0hsmtickq4wO9vhbIX5fsg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.205.0/24
IP: 2a12:2800::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 09:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:14:24:e8:65:e4:af:e7:d4:ca:46:70:e1:df:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69bc6e5f486c9ad89c92ae303bdbe16c85f97ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:c0:0c:3d:00:86:6c:b3:0d:52:88:2f:98:
76:47:3f:5a:76:e9:b4:38:9e:39:41:dd:2a:52:b5:
54:84:f4:b1:d7:39:ac:12:aa:d3:82:73:6e:9b:91:
46:0d:65:78:a3:84:2e:d3:47:3d:f4:56:0b:a1:d5:
6a:28:e9:2b:6b:a0:6a:05:48:c9:c2:67:21:4c:4f:
93:2e:41:fc:1c:ab:df:b4:a3:f0:4f:27:33:dd:76:
ac:7c:87:7a:2a:72:44:87:e0:86:ce:58:31:84:6f:
3d:2b:2f:1f:d2:a6:7a:af:cc:10:86:ec:1f:05:63:
71:49:0e:51:59:b9:0c:3e:a6:76:e8:9e:16:59:da:
2e:4e:8a:df:10:86:29:31:d2:96:2b:c0:75:94:08:
aa:c2:3a:26:50:ca:29:70:a4:3e:4b:29:2d:05:00:
e2:e6:f9:5e:21:c0:fc:58:c1:fa:5e:1e:fc:c7:82:
38:50:ce:d5:18:02:d4:9d:3b:5f:2c:96:21:26:df:
c9:33:2d:64:b0:5f:68:ee:f2:33:54:68:ab:49:67:
13:7d:76:47:da:0f:ce:6e:b1:72:82:c5:d8:75:af:
11:48:b0:e6:2c:de:8d:d7:a1:9e:2a:c1:f0:4a:65:
45:79:41:61:67:ee:53:53:86:1d:da:50:93:b0:f3:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BC:6E:5F:48:6C:9A:D8:9C:92:AE:30:3B:DB:E1:6C:85:F9:7E:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9dda18-1a92-40da-90c4-bdbef72322cc/1/abxuX0hsmtickq4wO9vhbIX5fsg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.205.0/24
IPv6:
2a12:2800::/29
Signature Algorithm: sha256WithRSAEncryption
33:15:a8:d6:ce:cf:20:e8:07:d5:55:f3:0c:41:1c:08:a6:50:
d6:05:c6:fa:1e:20:b9:a8:b7:d1:26:98:7a:96:a5:e1:c3:80:
bb:31:0b:50:35:21:6f:ee:ac:ef:f8:19:67:d9:8e:19:64:34:
1a:a9:dd:8f:b4:30:45:51:ee:19:b7:4e:d4:b8:0e:04:95:a9:
5d:0d:f7:a6:b7:45:78:a7:c6:df:ea:4d:8e:f5:51:cc:7f:23:
ba:65:37:3a:e4:8d:d8:05:dd:3f:5a:a4:b7:f9:71:a2:62:35:
50:cf:04:3a:c7:b9:93:52:98:98:e8:c4:48:d7:a2:bd:c6:a6:
66:de:dd:6a:10:20:89:a4:99:a9:dd:1f:9c:17:d5:c2:02:52:
bc:c7:b1:e9:78:1f:15:c9:43:41:34:73:94:f6:06:91:bc:4f:
4d:8a:3c:4c:2e:26:80:73:f1:76:75:93:12:f9:91:47:c4:35:
b7:f6:d3:d1:eb:50:35:ad:0b:e1:8d:15:2a:1d:94:d3:2a:e3:
ee:6e:9a:ce:29:db:70:10:03:86:11:f6:81:f0:4a:ac:f0:4a:
17:1a:6b:57:92:8f:b2:b8:7e:02:5b:01:4a:4e:e7:a5:9e:bb:
7c:f1:3e:89:c8:c0:3c:04:bc:3a:b6:20:79:50:43:21:c5:ae:
a7:0d:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:58 2024 by rpki-client on console-ams.rpki-client.org