Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer
File: auvJU4Gvh6NK7kLmhUzGCKkLSsw.cer (raw, json)
Hash identifier: wfykgTlcfyfnC05d99qA2C0vwKxLNWOrjNWLXgLtQcw=
Subject key identifier: 6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189D43BB325DB52FA83A8727B55A03DB6DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/auvJU4Gvh6NK7kLmhUzGCKkLSsw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Aug 2023 08:20:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.30.160.0/21
IP: 82.193.96.0/19
IP: 91.224.24.0/23
IP: 93.188.32.0/21
IP: 176.115.96.0/21
IP: 185.223.112.0/22
IP: 193.0.216.0/22
IP: 193.106.136.0/22
IP: 195.64.148.0/23
IP: 2a02:2610::/32
Validation: Failed, certificate revoked on Thu 17 Aug 2023 08:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:3b:b3:25:db:52:fa:83:a8:72:7b:55:a0:3d:b6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 8 08:20:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aebc95381af87a34aee42e6854cc608a90b4acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:99:bc:11:24:10:06:05:a9:8c:63:85:d4:
81:d6:41:8a:1f:fe:01:95:0d:a5:df:1b:bd:83:0a:
7d:24:9d:ea:b6:98:19:ff:69:cd:46:9e:e6:33:ad:
90:52:f5:83:6b:93:d5:ae:c7:60:14:5a:5a:bf:87:
8b:94:f8:c3:18:cf:66:e6:44:f8:52:ca:3d:f6:b0:
4b:60:ea:e6:fc:4c:65:e0:34:46:76:ce:34:f7:c2:
41:21:b7:3e:90:5c:73:39:fd:14:ac:77:32:a9:90:
89:18:58:f2:a0:d3:86:a9:42:a8:8b:46:70:da:99:
75:5d:47:7a:0f:c5:57:83:b9:b6:55:8d:43:6e:ab:
6c:7a:e7:f1:12:69:b8:62:8b:ff:63:0c:48:fa:07:
d0:bc:9c:af:d2:4b:89:d2:c0:1d:ff:6b:22:1c:39:
56:37:c8:92:7d:33:2f:1c:f0:19:f4:9a:b7:df:52:
41:35:1f:27:a7:f2:ea:25:3b:0e:08:af:ad:d4:2f:
31:b4:7e:23:40:10:bb:28:5b:07:06:e8:ea:9c:7f:
ff:80:91:5c:3d:d6:3a:e4:cf:f5:d7:6a:74:7c:57:
52:09:d5:00:96:1f:32:ca:f4:bd:22:28:e2:a8:41:
b4:30:92:cb:de:b4:b0:ff:d7:c7:51:53:5f:ce:91:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:C9:53:81:AF:87:A3:4A:EE:42:E6:85:4C:C6:08:A9:0B:4A:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4d6ede-77fc-40fa-8767-84efaf90486c/1/auvJU4Gvh6NK7kLmhUzGCKkLSsw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.160.0/21
82.193.96.0/19
91.224.24.0/23
93.188.32.0/21
176.115.96.0/21
185.223.112.0/22
193.0.216.0/22
193.106.136.0/22
195.64.148.0/23
IPv6:
2a02:2610::/32
Signature Algorithm: sha256WithRSAEncryption
8f:e6:b6:df:bb:1e:4a:7a:5e:1a:9c:59:ab:26:c5:ea:16:1d:
d4:2e:58:c8:7d:45:17:11:99:e0:bb:aa:b4:5c:85:fa:f0:81:
57:4d:b0:9d:8f:b7:fb:3c:64:a0:c7:da:7d:0e:ca:98:3a:a5:
76:d5:93:ee:9d:b0:99:d7:7e:ee:a8:f1:fb:9e:18:4b:30:08:
0e:1a:d6:6d:b9:98:13:65:78:d1:9b:39:13:c8:f2:98:3a:15:
dc:c9:6d:a4:25:a6:72:b1:cd:33:78:ae:b0:23:36:02:67:64:
1a:5f:67:99:3b:35:9e:51:a5:ce:95:ee:93:92:4f:ac:93:80:
ed:9e:05:6e:12:55:0b:e4:18:3e:b6:24:d0:4b:e9:69:d0:7b:
c0:bf:2b:b6:76:c5:47:8b:57:0b:3f:9d:6e:42:0a:66:3f:c3:
30:81:79:d8:fe:3d:3c:2b:4d:c4:60:34:42:a3:33:c4:0a:24:
f3:20:08:2b:47:8f:20:52:9f:b3:2c:1c:b5:c4:cc:f8:67:f0:
55:68:09:73:89:1f:e6:76:c7:b7:b8:c2:b7:ab:46:a7:32:83:
07:c3:49:7d:41:2f:cb:fb:9a:06:2c:d5:4c:2d:5c:67:c6:9c:
5b:0e:fc:79:40:09:b9:9d:a1:02:78:f5:5a:91:38:f5:a9:4f:
a9:59:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:59 2024 by rpki-client on console-fra.rpki-client.org