Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ar5LK-kk5Wli36QEtHkcIw4UxUw.cer
File: ar5LK-kk5Wli36QEtHkcIw4UxUw.cer (raw, json)
Hash identifier: GJf33nH97Q1dyrAA9X+gjU5OjjIrN49RHI1dQBGWayA=
Subject key identifier: 6A:BE:4B:2B:E9:24:E5:69:62:DF:A4:04:B4:79:1C:23:0E:14:C5:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B634EF040515488196988BE7FA8AB14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/ar5LK-kk5Wli36QEtHkcIw4UxUw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.32.105.0/24
IP: 2a11:1200::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:4e:f0:40:51:54:88:19:69:88:be:7f:a8:ab:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6abe4b2be924e56962dfa404b4791c230e14c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:81:32:61:8a:6d:82:19:2c:51:7e:ac:29:
99:e2:9d:67:19:58:36:67:dd:08:8a:2e:55:f7:aa:
77:0a:64:f5:b5:b0:9a:2c:6e:43:2a:08:5e:52:ce:
00:fb:b8:e9:a0:7e:f2:71:d8:a3:df:aa:97:3c:87:
76:b2:ea:ae:59:c4:ab:e1:75:ca:6b:51:03:fd:f3:
dc:24:8c:1a:ce:63:c6:f9:1d:20:39:1f:63:1c:8c:
e5:1e:02:91:91:1f:d1:8b:67:e5:ca:30:d3:f5:8e:
c8:43:2a:10:4f:22:b5:ab:5f:29:38:10:7d:b2:d9:
6f:ef:a3:0c:f1:27:c4:3e:cc:92:1d:30:48:f1:60:
9c:43:6d:56:19:a2:1d:12:26:67:b1:17:7e:54:26:
9e:a4:40:b9:e0:df:9e:4e:32:f4:2b:de:79:a1:78:
04:df:27:9c:b2:17:f2:5c:d5:cf:29:1a:44:6a:e5:
24:c8:e8:93:af:3f:a4:1f:f9:e4:4e:41:85:b0:a7:
33:76:a8:02:ce:d6:6f:b0:9e:6f:54:ad:8b:7d:cd:
10:c8:be:d8:ea:f3:1b:1b:e1:45:46:78:a8:31:80:
f3:f0:36:c1:6d:76:81:1d:18:33:df:33:07:63:33:
5b:81:16:03:4d:99:7c:0a:62:48:14:ac:27:50:47:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:4B:2B:E9:24:E5:69:62:DF:A4:04:B4:79:1C:23:0E:14:C5:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/464662-f400-41aa-ba12-b4d209ec3a73/1/ar5LK-kk5Wli36QEtHkcIw4UxUw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.105.0/24
IPv6:
2a11:1200::/29
Signature Algorithm: sha256WithRSAEncryption
7a:8d:f3:4c:ed:b8:98:19:4e:f9:3b:d8:3e:92:c4:2e:13:70:
81:fc:c6:b9:7d:b3:71:61:5a:24:3b:04:9a:9d:c4:ad:91:48:
12:92:7b:06:79:4a:5b:99:8d:bd:04:ca:43:4e:3e:d5:0f:3e:
b1:f2:7f:17:bb:7b:92:04:b4:fc:f9:3b:ee:e7:73:ba:cf:23:
41:60:32:37:45:ad:19:c6:b0:19:0f:5e:3b:ab:a0:15:17:3f:
dd:72:f5:ad:eb:21:95:73:38:e5:9f:71:04:c1:e9:b6:9c:5e:
b3:23:44:ea:22:7f:c1:b2:7b:fa:42:de:fa:65:14:6c:ec:bf:
b3:ca:d5:be:86:c9:2d:bf:83:08:f7:d9:2b:25:73:5f:d2:71:
ba:13:55:cb:48:6b:ae:3c:5f:1f:6b:cb:8e:6a:e9:42:b2:ba:
46:33:28:4b:0b:99:ab:be:10:f7:34:94:9e:63:be:b6:50:bf:
c6:c5:ab:99:15:b2:48:8e:10:a4:5b:8c:ad:34:2b:59:86:2e:
ce:7b:db:ae:48:2f:9b:32:b7:72:dd:97:99:24:c9:5d:61:e5:
e9:f9:3d:b5:74:06:d7:23:cb:7b:0e:a1:35:23:a3:76:02:08:
09:2c:99:1c:21:86:f6:ae:51:a5:b5:4c:79:81:b7:bb:28:cd:
75:92:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 14:55:21 2023 by rpki-client on console-fra.rpki-client.org