Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
File: bJo0xSHqYHPgnCBJNPfODqCGuhs.cer (raw, json)
Hash identifier: BEYgNaWgQbk+kO95Vwvst/7oshZ8U881+I7M7LddDdo=
Subject key identifier: 6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF535E67165B3E8E087D47B083982FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.184.0/24
IP: 2a12:7200::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 15:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:35:e6:71:65:b3:e8:e0:87:d4:7b:08:39:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:3a:ad:ab:3f:e7:e1:22:5f:58:06:8b:82:
2a:78:7c:ed:60:57:10:64:14:d9:31:c8:f7:47:75:
38:31:19:57:e6:bf:da:4d:66:bf:4c:d8:be:04:35:
19:ef:00:75:09:5a:06:17:cf:fb:ba:da:7b:74:66:
d5:2d:e1:de:35:6a:24:a1:39:ea:9c:d4:a7:55:3e:
8a:c2:c2:5b:ac:74:cf:8f:ae:a7:42:cb:80:52:29:
d3:a2:28:85:9a:63:70:9b:e8:b5:61:84:4f:40:f7:
ec:ba:1d:59:84:b6:9a:4a:52:15:87:fe:39:1e:2c:
ac:ca:f0:f4:aa:05:eb:85:91:ff:e4:ee:b8:fe:4e:
36:27:35:a4:40:6d:b5:ff:12:e3:6c:c4:20:28:27:
cf:4e:a4:6f:2b:ec:be:6c:9d:b9:f8:64:3f:79:7e:
d6:42:7d:79:0f:a0:89:ee:53:4d:dc:d7:6f:28:8b:
54:3f:e8:7f:0f:32:db:28:ed:82:bd:80:1c:99:56:
bd:df:5c:81:5e:a1:54:57:2b:50:0f:ca:ad:f6:64:
57:84:2f:9e:d1:59:25:43:3c:45:d2:1a:4e:3c:a1:
e1:35:dd:93:61:3d:e1:a6:52:94:cd:e6:84:e1:5f:
be:54:cd:e5:2e:a0:7f:37:73:cd:f7:38:39:2a:87:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.184.0/24
IPv6:
2a12:7200::/29
Signature Algorithm: sha256WithRSAEncryption
ac:d9:40:01:d4:6a:3c:ee:1a:94:49:51:96:bb:e0:db:0f:27:
6e:a1:c1:81:0a:a2:f2:b2:56:e2:4e:c3:af:63:82:bc:4d:f6:
13:2f:2e:07:b4:c2:0c:1c:71:63:04:5b:cd:18:d1:96:e7:b2:
26:31:a5:16:68:73:33:23:77:50:6c:2d:33:59:71:b8:a5:d5:
34:6e:fc:53:ff:60:18:a1:2f:3b:98:45:a3:c2:bd:0d:f8:d2:
b7:e3:96:cb:1f:b3:ea:8e:35:8e:43:da:71:3c:ee:c2:dc:a9:
0b:4e:44:f8:4a:ca:13:9c:e2:7a:64:3e:fd:07:1a:f2:64:6c:
57:74:ab:7d:4a:18:df:5c:5a:b3:28:69:ae:4e:7b:15:05:60:
ec:0d:ae:11:f6:b7:a2:2e:2d:f9:2f:2d:96:96:0d:5b:fb:8b:
bb:66:be:8f:48:8e:91:51:ff:c6:6d:4f:4a:ac:69:0f:fe:aa:
39:9d:5f:a9:c3:88:62:7d:39:9b:4d:2a:56:50:87:7d:84:ed:
f4:74:34:06:cd:70:c7:fc:c1:f3:4f:e6:83:bd:3e:5a:a9:19:
82:15:61:8f:20:1b:9e:c3:03:c3:5e:5f:c0:05:9d:30:f4:4a:
bb:3e:b9:8a:54:fe:82:b5:64:cd:07:e0:b9:8b:55:f6:63:5a:
6e:23:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:23 2024 by rpki-client on console-fra.rpki-client.org