Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer
File: aoGFt4Y_wsW1T-TNJtet_2oOEoE.cer (raw, json)
Hash identifier: /nD6xj23Kelo7x6iST8/PbE4fIJWrO/cBbNJNhahO8U=
Subject key identifier: 6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A6D678B25A53C6DB52A126CF59FB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/aoGFt4Y_wsW1T-TNJtet_2oOEoE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:06 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.255.217.0/24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 12:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:6d:67:8b:25:a5:3c:6d:b5:2a:12:6c:f5:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a8185b7863fc2c5b54fe4cd26d7adff6a0e1281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:94:bf:ee:52:dc:97:d9:ab:53:48:d2:9a:
16:ba:dd:85:33:68:04:c6:02:46:5c:01:3d:7d:73:
0e:3f:54:b5:06:c8:0b:b6:c1:ee:3c:f0:9a:3f:81:
ec:49:b3:83:ee:8a:8b:1c:f9:6a:61:82:fa:4f:2d:
86:1e:b2:c6:86:30:69:13:2c:4f:43:eb:b5:bc:42:
d3:ec:92:c4:ba:37:da:06:c1:89:80:a3:65:a2:7f:
a9:cb:51:24:1a:5c:de:c6:6c:0d:7d:e5:ad:b0:2f:
72:ff:6a:16:14:3c:4f:1e:00:06:a9:34:0f:50:a8:
97:d6:50:6b:20:2d:f1:38:9f:37:28:82:74:66:b4:
42:fa:d0:37:3a:0a:e9:80:e8:c3:59:68:c3:c8:d5:
2c:5c:30:a8:ef:ca:02:f9:2f:87:33:50:cb:b6:f1:
93:65:70:87:c3:e1:49:ec:60:52:ea:d7:98:07:ca:
f4:40:eb:7f:4b:9d:be:6f:2a:17:76:f1:3c:26:5a:
99:db:70:a4:26:ca:4f:74:f1:74:d1:81:e4:40:f4:
62:42:08:be:bb:69:a0:3f:df:ac:be:90:b5:62:d8:
ce:c1:e4:63:8c:61:f6:04:64:10:ad:24:16:4a:58:
a4:87:6f:f1:c0:d2:ea:16:95:35:43:10:c5:f6:f0:
7f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:81:85:B7:86:3F:C2:C5:B5:4F:E4:CD:26:D7:AD:FF:6A:0E:12:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/55244b-8bb5-4367-b924-4429040f3817/1/aoGFt4Y_wsW1T-TNJtet_2oOEoE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.217.0/24
Signature Algorithm: sha256WithRSAEncryption
88:96:7f:79:b0:8d:12:b7:59:9b:35:ab:39:fc:da:03:16:1f:
ca:3a:53:67:0d:3a:5c:c6:dc:63:67:11:6b:1a:a3:62:a0:9e:
8d:54:42:6c:15:60:0d:35:d3:0e:ec:9b:3d:38:03:e0:c0:62:
05:5c:fa:54:c9:29:f7:89:8a:b9:16:74:02:e9:b2:ed:5d:a9:
0f:13:1e:35:c1:8b:00:57:c5:ee:1d:5a:82:8c:d6:45:46:a0:
d8:fa:23:7f:d9:08:9f:29:a3:b3:c4:43:2a:8c:a6:e9:04:cc:
92:88:b3:a0:ab:8e:5d:96:98:01:97:24:bf:e0:17:ce:8a:0e:
6a:b9:fd:a1:b4:60:df:3f:f0:7f:e5:4b:e2:86:c4:46:4c:83:
81:2d:96:f6:b5:3e:6c:80:d1:4c:32:29:cb:43:6b:d7:53:25:
57:86:88:ef:e1:b5:2c:21:ea:95:fd:61:0c:75:fe:8a:33:09:
73:ae:7c:87:a7:9b:f4:e2:60:95:ed:33:6a:1a:a6:e7:f2:94:
97:63:c1:0f:37:81:68:3c:62:3f:86:60:95:b2:cd:76:52:1c:
2b:6f:ab:56:62:9e:07:e8:64:9e:a5:3a:4b:08:af:08:3a:f6:
aa:cc:fc:04:79:c1:6b:bc:f4:40:81:74:32:3d:e9:50:98:44:
0b:09:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:57 2024 by rpki-client on console-fra.rpki-client.org