Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5v1TUF4woQNUhtQ8lkLajCvT68.cer
File: b5v1TUF4woQNUhtQ8lkLajCvT68.cer (raw, json)
Hash identifier: HJ1OE0kfoB1ZQtcQcAuj6GLDvhwaan4fkTIOMZEEtC8=
Subject key identifier: 6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD1023EB37219895278869EE9E2B3A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.114.40.0/24
Validation: Failed, certificate revoked on Tue 17 Oct 2023 09:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:02:3e:b3:72:19:89:52:78:86:9e:e9:e2:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f9bf54d4178c2840d521b50f2590b6a30af4faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:32:82:63:f0:d3:19:0e:8b:3b:cd:d4:d7:
d4:20:9f:d7:8e:a3:45:51:38:5e:d0:4a:e2:93:25:
64:6e:16:77:75:02:5c:14:10:30:dc:fe:0b:84:25:
88:0d:31:1e:16:c9:bc:ae:3d:07:67:ad:05:c4:e3:
b9:5f:e3:6e:43:4f:27:3f:76:98:7e:d2:ce:5e:07:
9f:1b:86:f9:3f:8c:61:5c:d5:78:9d:92:d1:d8:1a:
0e:e9:ce:f7:ec:da:1d:1b:52:f4:d4:f8:ac:4d:69:
f5:7c:67:66:33:53:c4:c4:9d:e5:46:b3:b2:d7:ee:
e6:f9:39:cf:8a:bb:97:13:32:d6:51:b0:a5:9e:dc:
7a:f8:56:29:76:b9:44:36:74:ea:52:4c:7c:f6:a3:
62:40:f3:9f:45:b4:50:66:60:20:b2:6e:cd:c6:59:
3c:4b:8b:3a:ed:d9:81:fc:4d:c6:ee:4d:9e:a2:9e:
e6:ed:d5:7b:d6:1e:7d:fa:fd:f3:26:38:f1:d5:ca:
34:a4:3f:4f:f8:3e:7d:73:ba:57:60:48:3a:8b:cf:
9a:84:23:fa:9f:ff:d5:77:dc:0a:88:a6:14:22:64:
19:eb:e3:3d:e1:f8:ce:87:e6:ae:ec:86:39:1f:e6:
6f:cc:82:5b:e3:fd:3f:a7:23:53:d8:56:a1:a2:a3:
81:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9B:F5:4D:41:78:C2:84:0D:52:1B:50:F2:59:0B:6A:30:AF:4F:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bea562-3cf4-43b0-a5f0-b803ba564de6/1/b5v1TUF4woQNUhtQ8lkLajCvT68.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:77:2f:38:81:8e:e6:31:97:90:28:eb:28:34:b0:e8:3c:74:
f5:dd:78:4e:e9:bd:a1:56:5d:87:7b:84:b9:b9:3e:d0:56:ff:
4b:2d:bf:6b:31:3e:bc:0d:4a:34:89:59:58:c7:7c:b0:44:2e:
73:cd:c7:eb:1f:b1:8b:b2:b5:05:32:0f:23:86:10:7a:11:88:
0b:c1:56:78:54:7b:7b:0f:80:94:2e:27:71:37:18:4f:c0:5a:
f6:52:67:44:de:5a:81:39:b3:3d:95:af:56:3c:61:2f:71:78:
4c:cf:26:e4:db:4b:dc:57:24:29:87:7c:54:90:62:7d:86:30:
15:0a:3d:1e:3c:57:17:28:c5:44:49:1e:ca:8e:68:ab:e0:32:
ea:b2:b0:75:e0:07:00:bd:eb:7e:f4:a5:75:93:24:24:28:d3:
76:2f:61:1a:ca:1b:b7:e3:d4:64:b8:34:aa:0c:c4:7a:19:a7:
c2:f5:8d:c2:81:1f:c3:a6:b0:2c:0f:e7:6e:16:e3:ea:12:40:
0b:50:b2:57:95:8a:da:de:59:a8:4a:40:27:c5:c5:34:d8:1a:
97:13:7c:74:3d:58:21:5f:27:52:ea:49:3c:a2:ca:48:9c:5a:
96:47:da:89:fa:d6:4c:ba:a6:04:c5:65:a7:d7:85:89:af:37:
b9:11:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:54 2024 by rpki-client on console-ams.rpki-client.org