Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/arlFE4i2Inmp-gAqJiAJNAA_DyA.cer
File: arlFE4i2Inmp-gAqJiAJNAA_DyA.cer (raw, json)
Hash identifier: MSyfxsZkB5BZakShlF5+Uy/UA8IX5Pi4Qg4eltZlSoE=
Subject key identifier: 6A:B9:45:13:88:B6:22:79:A9:FA:00:2A:26:20:09:34:00:3F:0F:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6F15DAEF567F274AEE8BDBE054007
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/331644-66d3-446d-aa31-bc94649058fc/1/arlFE4i2Inmp-gAqJiAJNAA_DyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/331644-66d3-446d-aa31-bc94649058fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:67c:21f4::/48
Validation: Failed, certificate revoked on Mon 09 Jan 2023 13:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:f1:5d:ae:f5:67:f2:74:ae:e8:bd:be:05:40:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab9451388b62279a9fa002a26200934003f0f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:1d:48:65:1b:14:4d:1b:a5:ac:8b:93:a5:
c7:28:93:09:eb:f4:11:3b:b3:66:1b:77:d7:d3:34:
7f:62:94:c5:4b:07:6e:d7:d7:68:2e:e4:d9:b9:f7:
5c:f3:42:b0:78:2c:76:ba:4e:3d:48:34:66:ef:b0:
5e:1c:14:9b:18:50:1c:9c:1d:86:bf:8b:52:5f:03:
17:e3:31:59:09:2c:37:56:dd:1d:77:09:07:a8:37:
a1:61:b5:db:e4:81:f4:50:51:87:6c:d3:39:b0:08:
17:ad:a5:24:ac:b6:5c:08:98:00:42:a5:61:44:66:
a0:b2:ef:7e:4d:4e:24:14:65:d4:9b:64:33:a0:c3:
5c:95:33:7a:35:7f:45:da:b3:eb:90:ad:53:14:ac:
53:77:7c:28:02:49:53:bc:60:21:77:67:9b:4b:d9:
e5:7e:61:4a:0b:e4:c2:09:7c:5e:90:5c:92:0c:b9:
d8:e7:6f:b2:5a:a7:56:3c:33:9a:72:57:c9:f0:8f:
f4:cb:4f:1c:2a:8d:83:e4:a9:4a:f7:d8:ea:86:db:
b9:9f:ab:cb:73:dd:a9:88:24:32:f0:c6:a8:53:84:
47:9e:b3:ac:35:50:c9:cf:ba:9c:45:07:2d:a3:f3:
a0:45:0a:22:68:9f:01:1a:85:9e:df:a2:c2:5a:e8:
5d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B9:45:13:88:B6:22:79:A9:FA:00:2A:26:20:09:34:00:3F:0F:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/331644-66d3-446d-aa31-bc94649058fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/331644-66d3-446d-aa31-bc94649058fc/1/arlFE4i2Inmp-gAqJiAJNAA_DyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21f4::/48
Signature Algorithm: sha256WithRSAEncryption
a8:a4:73:a0:f3:02:7c:b6:43:6c:ad:b9:36:6b:8a:3e:25:6d:
d1:14:7e:d7:37:0c:76:60:c1:d0:54:68:69:42:55:68:18:75:
bf:74:33:ac:fd:c6:ed:37:4a:11:f7:8d:8c:8c:14:7b:e1:82:
2a:9f:77:6a:a6:c0:18:fc:09:0a:06:0b:62:a0:aa:af:24:43:
28:6d:28:1c:68:1b:ab:b6:c7:8c:4f:3d:fc:de:13:09:00:18:
62:53:39:b6:39:33:5e:21:19:cb:e0:4c:40:ef:b2:cc:7d:90:
5e:27:4d:23:89:14:22:75:b8:ad:60:83:e0:d5:62:b6:c9:56:
89:6d:02:70:a9:89:5d:49:fe:2f:6b:ff:70:de:76:53:aa:24:
f4:1b:0b:b2:ce:76:f0:5a:02:43:fe:38:70:8e:8f:08:50:64:
2d:83:63:4f:68:ee:4e:30:9b:9b:d8:0d:03:32:13:4c:f2:f1:
8f:e8:4b:d9:e7:22:c5:21:68:35:0c:ae:74:24:b8:d8:35:6c:
2d:ad:3c:15:df:03:9f:32:dc:16:49:bb:fd:14:dd:57:f4:96:
a1:a5:63:13:83:7f:94:66:49:44:37:06:10:10:00:51:38:64:
6d:63:ab:65:69:45:1b:77:a6:39:fe:83:ad:a8:cc:94:a6:54:
26:af:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:58 2024 by rpki-client on console-fra.rpki-client.org