Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bssoXSa94Jl93n24SJqh1uBKxEU.cer
File: bssoXSa94Jl93n24SJqh1uBKxEU.cer (raw, json)
Hash identifier: iAaPH4eR2GAhoQ4bmv9pY3igW0fHq6FWQpYmYLYKuM8=
Subject key identifier: 6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245FEC1B1E208314D940F6982D7BD8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.100.0/24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 08:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:fe:c1:b1:e2:08:31:4d:94:0f:69:82:d7:bd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ecb285d26bde0997dde7db8489aa1d6e04ac445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:43:6e:d5:d8:24:5c:80:a0:97:fc:86:6e:
7c:89:dc:5f:9a:8d:38:8f:91:62:50:66:a4:2f:5b:
e5:76:bf:34:34:44:cd:af:4c:09:99:2d:a0:fa:81:
03:89:ed:ea:7d:09:ab:6c:36:0a:8c:2d:fd:82:71:
11:b0:15:fb:f6:af:f7:22:0d:e6:10:ce:ba:cf:00:
8d:87:4c:68:40:97:83:3c:01:b9:3b:5d:8c:d4:fa:
4b:91:10:a1:fd:21:97:7e:ea:8e:8d:39:83:96:5d:
79:c4:9c:58:c7:ca:da:b2:7a:09:9c:3a:b4:fe:4b:
88:36:2e:e7:9d:ef:8c:06:61:27:7d:6a:30:ae:72:
1c:0a:a6:4e:6a:82:8d:81:b0:1a:a7:0c:3d:e3:4f:
e9:10:6c:cd:a8:dd:db:d8:72:17:bb:4d:50:21:0e:
fc:6d:00:c9:25:aa:c1:6e:74:bc:33:0b:47:04:82:
44:26:7c:14:6f:fc:ef:56:38:da:9c:d4:cf:5e:32:
08:96:02:6b:a5:f3:72:10:5b:11:a0:c5:0a:44:b6:
8b:00:6b:c6:2c:a3:93:e8:73:c6:f1:45:5e:17:1e:
0c:88:23:0d:f8:c8:ed:53:00:4e:59:fb:40:ad:17:
e4:af:56:96:d8:85:72:bb:f4:34:4c:ed:84:3d:56:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CB:28:5D:26:BD:E0:99:7D:DE:7D:B8:48:9A:A1:D6:E0:4A:C4:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e1e232-c378-432e-aeac-9d765f3bce41/1/bssoXSa94Jl93n24SJqh1uBKxEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.100.0/24
Signature Algorithm: sha256WithRSAEncryption
62:af:6d:a9:5b:73:9d:36:ed:af:09:44:05:07:bd:05:02:fd:
1b:67:5b:7e:ce:88:98:c9:5f:a1:fe:e7:94:ba:c6:1a:76:c0:
78:5a:d1:7b:16:82:6e:7d:e5:e5:2c:cc:4c:e8:52:36:9b:63:
a9:3d:6e:5c:27:92:79:c1:e9:ed:d9:00:a1:45:96:95:f1:ba:
c5:1b:a4:2c:fd:52:32:27:89:c2:c9:81:1e:0f:6f:88:c5:05:
61:d9:db:66:59:35:01:53:92:7d:fe:28:15:19:23:f1:03:99:
4b:95:8c:6f:14:8f:80:6c:f4:5a:31:c5:a8:70:58:a1:47:7d:
cb:4a:9d:72:a2:06:24:1c:9b:d7:af:d6:36:25:40:43:b4:42:
ba:f9:8f:db:60:aa:bc:a9:b8:ba:06:1f:21:9b:a8:4a:b7:a1:
05:9e:aa:cf:13:86:9b:a3:d9:ad:dc:80:c7:e9:e6:76:79:93:
62:4e:ee:aa:b6:2b:d6:8e:2b:d2:2f:07:a4:ee:ad:19:05:0e:
63:0d:fd:27:1c:01:91:64:d5:25:35:79:8d:31:0a:58:79:f8:
6a:b3:e6:f3:ef:57:a4:13:c1:48:f7:5b:8c:23:6c:8d:6a:c7:
09:a8:30:35:f5:0f:8d:7d:64:52:49:8a:18:aa:7b:b0:b0:2f:
14:5b:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:19 2024 by rpki-client on console-fra.rpki-client.org