Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eYMLwqGl8zLNTAT1zpNGfS8txnU.cer
File: eYMLwqGl8zLNTAT1zpNGfS8txnU.cer (raw, json)
Hash identifier: WyGBXeT2nxyNRehX9iRZniAf4NUltGtor1Oh4t9EdYE=
Subject key identifier: 79:83:0B:C2:A1:A5:F3:32:CD:4C:04:F5:CE:93:46:7D:2F:2D:C6:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E0706F7C5BDF6D342E883330D7102
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/469d49-f970-4d23-b832-3a6ac00cb1b3/1/eYMLwqGl8zLNTAT1zpNGfS8txnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/469d49-f970-4d23-b832-3a6ac00cb1b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.220.152.0/21
IP: 2a05:ea00::/29
Validation: Failed, certificate revoked on Tue 14 Mar 2023 14:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:07:06:f7:c5:bd:f6:d3:42:e8:83:33:0d:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79830bc2a1a5f332cd4c04f5ce93467d2f2dc675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0d:33:6a:90:0d:58:ce:75:a8:ab:39:19:de:
e8:52:a6:00:30:b3:c4:0a:8f:0e:f4:61:bf:ae:cd:
d2:2a:d8:bf:08:44:d5:1c:14:2b:16:2b:05:58:8d:
36:44:85:1d:50:20:bc:9e:a3:63:45:7e:62:ac:b9:
00:fc:13:66:df:12:d4:03:c9:1f:e8:a0:f6:23:0a:
56:34:51:a1:0b:f4:e9:9e:0f:29:3c:79:bf:6d:b2:
3c:fe:78:3f:56:6f:27:7d:38:10:57:91:36:23:c5:
c2:60:e4:52:be:be:6f:36:5e:64:62:e2:62:95:d3:
e3:44:bd:01:7f:f3:77:38:36:20:54:04:26:98:b1:
98:e3:92:ea:d7:bc:58:05:4b:b7:0f:03:0b:6c:38:
5c:a9:0f:41:fd:50:33:32:36:b2:3b:b8:31:c7:be:
f6:22:d7:fd:e1:a3:5e:2e:0e:8a:50:81:da:9a:9c:
a8:74:f1:1e:9a:73:4f:4f:49:0f:50:e8:df:0a:8c:
e2:7c:ed:67:35:ca:7c:35:bb:9e:c7:65:9e:60:35:
e1:8b:46:f9:38:d4:a9:64:18:0c:cc:50:87:fa:6e:
bf:7e:66:26:e1:7d:08:2f:66:dd:87:bf:29:da:de:
cb:51:55:e0:74:f8:ba:77:2d:3c:93:74:dc:69:ff:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:0B:C2:A1:A5:F3:32:CD:4C:04:F5:CE:93:46:7D:2F:2D:C6:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/469d49-f970-4d23-b832-3a6ac00cb1b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/469d49-f970-4d23-b832-3a6ac00cb1b3/1/eYMLwqGl8zLNTAT1zpNGfS8txnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.152.0/21
IPv6:
2a05:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
aa:09:2f:c8:83:ec:34:21:30:e0:11:f8:d1:bf:55:6c:56:32:
43:68:d4:76:0e:80:8e:e5:d6:7a:5e:09:cb:88:23:51:24:4e:
db:34:b8:6f:33:4d:d5:6e:1c:04:d9:43:8a:d7:6b:df:90:ba:
7c:3e:72:87:19:fe:8a:d6:1c:90:3d:b8:eb:6d:ae:26:2d:a8:
76:a5:22:ac:a2:fd:7d:e8:3d:f2:c3:fa:f1:1d:36:06:40:f5:
d6:2b:7d:c6:d8:88:f7:75:cd:5e:ea:c6:ba:bf:0e:b7:40:e4:
5d:6f:21:73:14:40:07:23:b1:7c:9b:ca:bd:00:02:5d:54:e2:
6a:7a:0c:c5:c3:0c:d8:5e:23:73:85:fa:8f:b1:3a:35:eb:00:
0d:9c:4e:6d:2b:ef:43:77:9d:9f:04:2b:c5:50:66:5a:11:75:
19:71:e5:1a:c0:44:b0:b6:f6:b7:9b:8f:13:44:72:5e:bd:1f:
69:99:0d:9e:a9:dc:1f:58:83:fd:e6:1c:0b:81:ed:1e:74:8e:
be:3e:2e:bb:72:80:b1:1b:f6:3b:6e:32:c9:13:bd:5e:9c:14:
1f:cd:50:48:31:39:24:28:69:ca:a8:74:8f:eb:38:58:89:18:
1f:1a:76:e1:48:cf:d3:f7:c0:cf:b8:7f:61:49:b0:d1:61:ba:
f2:f7:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:16 2024 by rpki-client on console-fra.rpki-client.org