Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cRRmmStERLGi8G0BOByvKJhudok.cer
File: cRRmmStERLGi8G0BOByvKJhudok.cer (raw, json)
Hash identifier: TjFhh1186N1VQnLNAqA7FqAjepHo6267yjcunupVfC4=
Subject key identifier: 71:14:66:99:2B:44:44:B1:A2:F0:6D:01:38:1C:AF:28:98:6E:76:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD13375464B70FE3BCF3D29C4CDDF59
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/cRRmmStERLGi8G0BOByvKJhudok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 92.118.200.0/22
Validation: Failed, certificate revoked on Tue 05 Sep 2023 14:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:33:75:46:4b:70:fe:3b:cf:3d:29:c4:cd:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=711466992b4444b1a2f06d01381caf28986e7689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:f5:de:54:fd:85:60:d6:2a:a3:20:65:c9:
e6:88:01:5c:ca:71:1a:35:f4:d5:d8:1d:4b:65:65:
d8:35:86:2f:94:48:6c:07:be:8e:04:6f:bf:2d:92:
7e:b4:85:b3:4c:ee:5e:a1:ce:6a:30:16:a2:58:63:
58:9f:1e:22:07:97:01:80:f2:ca:61:f8:b6:52:d7:
b0:73:47:11:1f:15:2e:70:73:23:1c:46:fa:3f:7f:
fd:e2:9e:a2:64:7c:9c:64:f0:f2:db:f8:0c:c2:80:
c1:15:ab:db:d3:68:a3:58:d9:75:be:7b:7e:9e:11:
f1:84:95:e5:1b:86:53:f5:ec:1d:6c:04:7d:b8:e8:
ba:06:60:e1:fc:b3:af:0f:f4:1b:f6:55:b9:06:7a:
f9:0a:6f:c8:e2:4c:58:39:33:a6:e7:ec:61:62:46:
d1:51:d9:b1:09:e9:86:e4:a8:5d:b6:c7:84:0a:25:
4e:f4:0a:e1:53:67:6a:fe:db:16:90:eb:8b:d0:9a:
23:df:f6:b6:68:7c:31:bb:c9:be:47:94:5a:6f:c6:
f7:1e:e0:17:d4:f1:c2:c1:4d:cd:9d:ae:e9:0a:04:
e9:3f:86:45:7b:4e:08:9e:90:f1:c6:3d:64:48:91:
9b:0a:f4:f8:04:c9:a0:91:af:2b:b2:f2:5b:d2:74:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:66:99:2B:44:44:B1:A2:F0:6D:01:38:1C:AF:28:98:6E:76:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/53e554-76ec-4d57-8d15-897b94116a3f/1/cRRmmStERLGi8G0BOByvKJhudok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:08:85:4c:84:bd:95:6d:55:22:09:81:06:50:da:a3:ee:95:
8d:eb:78:97:17:45:95:f2:18:fa:4e:b5:ea:a1:8d:b5:d3:ae:
2e:b6:1a:83:ab:87:2e:a3:fa:45:e7:16:4a:db:7b:c0:cd:7e:
fd:8c:f9:b0:bc:a9:49:48:13:1c:01:76:0e:b0:d3:1d:57:19:
5c:b9:a1:c3:b5:83:94:39:ae:ff:45:b9:1c:c0:7d:d5:11:73:
44:18:c3:1d:81:84:b7:7e:16:cd:23:b9:dc:de:4c:2f:ae:5f:
b6:c4:58:47:dd:3b:71:81:1d:da:29:3d:9d:93:df:af:cb:5f:
84:1c:13:87:ce:e7:12:d3:de:17:68:f3:d4:39:17:80:9a:c7:
01:04:1c:94:ed:31:47:c5:05:8f:ea:28:a5:b0:23:1c:65:6e:
16:7c:b5:f8:43:52:da:ad:46:f7:82:44:a5:fc:04:14:f1:03:
47:26:d2:0e:f5:c0:a1:8d:3d:c0:3f:39:8f:58:f5:b4:78:1f:
2e:2d:bd:ac:7f:f3:93:2c:13:4f:6e:ca:6e:19:60:1b:95:75:
d9:12:0e:68:a9:9c:98:5f:4b:ba:34:c2:2d:12:d2:1c:42:98:
20:02:39:c9:82:46:97:f3:ab:f9:9d:ef:4d:08:06:5b:2c:ba:
b1:da:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:13 2024 by rpki-client on console-ams.rpki-client.org