Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6MWhgNzHyoMkQK2paLkQmrQV60.cer
File: b6MWhgNzHyoMkQK2paLkQmrQV60.cer (raw, json)
Hash identifier: GbJevUwQuTCg6pWE8/Xf3hrDF30wDdW7BwoRWZZfXbQ=
Subject key identifier: 6F:A3:16:86:03:73:1F:2A:0C:91:02:B6:A5:A2:E4:42:6A:D0:57:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAD4B85982BCCFCED6CC8E45B9DA13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/b6MWhgNzHyoMkQK2paLkQmrQV60.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.103.190.0/24
IP: 2a11:45c0::/29
Validation: Failed, certificate revoked on Wed 11 Oct 2023 07:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:d4:b8:59:82:bc:cf:ce:d6:cc:8e:45:b9:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa3168603731f2a0c9102b6a5a2e4426ad057ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:dc:15:34:cf:b7:b8:c4:da:22:7a:44:e3:
d3:1d:d7:61:10:bf:d7:c5:f8:8d:b1:8b:3e:f7:cc:
b1:8d:27:ca:f5:dd:e2:44:9f:8a:4b:96:c6:54:d5:
60:21:fa:ea:df:b6:10:ad:c9:ec:b1:54:68:86:ab:
0e:fd:e0:d8:b4:a5:84:21:f7:d7:e0:d4:74:6f:cd:
4c:0b:76:20:2a:9a:70:3f:e7:d5:7c:87:5b:00:37:
35:c6:30:8e:82:db:dc:9f:55:ed:93:b0:21:56:ca:
d3:e0:fe:20:d0:65:cc:bb:c0:44:75:55:64:94:ca:
5f:53:1a:9b:70:6c:b1:9f:31:41:d4:e0:6d:34:09:
2e:23:35:b7:9d:2f:ca:e0:e6:4b:f0:7f:30:73:5f:
12:02:59:f9:6f:f2:bc:d4:d3:61:b8:65:89:53:30:
df:08:8c:86:67:56:7e:41:05:fa:17:b5:f2:d0:b3:
bc:52:07:2d:50:b8:23:48:94:ad:3f:7d:4a:80:ba:
4c:c1:27:19:6f:15:68:f7:6a:81:dd:07:22:5c:87:
c5:91:e1:81:70:c4:74:60:14:5e:ca:42:9a:3f:39:
9f:9c:d9:e0:7e:c3:26:ca:5d:64:c3:90:5e:dd:11:
cb:70:ab:58:89:5c:eb:0c:55:b0:d0:d0:ad:51:0e:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:16:86:03:73:1F:2A:0C:91:02:B6:A5:A2:E4:42:6A:D0:57:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ff7c3f-7f69-464a-83ef-1b2e50d7de0a/1/b6MWhgNzHyoMkQK2paLkQmrQV60.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.190.0/24
IPv6:
2a11:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:dd:61:4d:f0:25:a6:33:42:33:bc:b5:ef:2e:a4:16:37:dc:
a3:7f:b6:4b:30:bc:25:be:95:4d:85:df:b8:a9:44:02:d0:35:
b4:95:5a:b3:f5:a7:23:d8:ea:88:17:5d:94:00:16:da:4c:7e:
ea:98:6c:05:84:0f:a0:eb:f6:a8:cd:77:d5:d1:fc:ae:15:3d:
18:bf:1e:df:9a:1d:6e:f1:74:00:5c:0b:1f:e7:9e:bb:51:fd:
d8:67:fb:51:69:a6:43:f7:c6:83:6d:11:29:e9:f9:a1:26:00:
c6:1a:cf:10:ac:e4:37:34:4c:4f:02:86:f7:17:f4:95:47:6c:
ab:60:91:23:05:d8:b7:30:45:ac:64:9c:53:1a:d0:6d:19:f7:
00:6f:28:85:f0:cf:e4:9a:1c:70:59:62:79:9a:03:12:48:6f:
81:52:41:78:79:b3:04:c2:cc:36:7a:2c:f4:49:ca:29:19:89:
3b:c2:f7:19:4a:5c:74:34:be:84:dc:ca:98:e8:40:53:73:85:
c2:6f:67:e1:a2:66:86:69:eb:59:35:2d:b3:31:1f:9f:13:4a:
66:94:bf:82:2f:5c:ee:fe:3d:41:b8:d5:f2:54:4b:12:e2:15:
6c:1b:7d:44:eb:4a:12:aa:3c:70:79:e0:c5:ea:15:60:72:d5:
4a:da:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org