Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.cer
File: g7MeSVaoTmsqQSRAFqy8Q86Bq7w.cer (raw, json)
Hash identifier: c3m/5GP6V39+uX1iJdDHnz5vS9OfJ4ZGQhDDiS+/wjU=
Subject key identifier: 83:B3:1E:49:56:A8:4E:6B:2A:41:24:40:16:AC:BC:43:CE:81:AB:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7272956C2A20A11ED5D8CD5EEFCEB28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 22:31:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.193.148.0/22
IP: 195.206.226.0/23
Validation: Failed, certificate revoked on Wed 12 Jun 2024 11:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:29:56:c2:a2:0a:11:ed:5d:8c:d5:ee:fc:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 22:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b31e4956a84e6b2a41244016acbc43ce81abbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:95:e0:58:35:88:21:5c:a4:fa:f4:c6:2c:
7d:de:66:96:14:5a:02:33:1f:8f:8f:de:ed:27:9b:
30:48:c0:1a:ff:bb:e4:07:58:cd:1d:7c:73:a7:9f:
0c:11:c1:df:dc:d4:b8:22:7d:9a:ed:63:77:66:2b:
6e:d7:34:46:b9:81:a5:8b:b5:bb:27:46:bb:18:16:
e0:38:9c:2a:7b:e2:97:01:9c:df:e8:94:d0:8a:09:
e3:f1:29:b1:31:d1:8c:e3:0b:4b:7c:f0:27:31:8c:
82:67:e9:52:c4:74:39:ac:17:65:0e:c6:da:24:63:
a4:d7:c2:dd:3f:75:75:7b:7b:7a:5e:67:37:f1:0a:
24:30:54:51:19:26:76:b0:e9:50:8e:7c:ee:d5:2e:
94:fb:20:98:6b:28:78:35:e6:4d:d9:3f:1a:83:83:
1c:fe:45:69:19:36:75:3f:00:40:7a:ea:1d:fc:36:
1a:4e:a1:c7:11:c1:79:a0:7d:f2:0e:e5:c4:da:da:
0f:9b:f3:3e:64:5f:ee:df:e7:b2:6e:f2:a8:32:74:
9a:28:67:b1:99:50:f9:0a:ac:7f:2d:8c:1c:17:58:
cc:9b:77:94:e0:30:1a:a6:89:c6:9e:e6:ac:76:69:
25:5b:bb:88:00:98:b3:2a:bf:9e:03:1b:76:6e:3b:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B3:1E:49:56:A8:4E:6B:2A:41:24:40:16:AC:BC:43:CE:81:AB:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7a681a-60ae-4ef3-b957-7a994dd3d32a/1/g7MeSVaoTmsqQSRAFqy8Q86Bq7w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.148.0/22
195.206.226.0/23
Signature Algorithm: sha256WithRSAEncryption
50:3c:cc:09:29:83:fe:c4:61:6f:68:70:d1:c1:58:1a:bd:33:
2e:4b:01:54:a2:cd:b0:1c:f5:c5:ef:a3:f1:d6:51:c0:d0:d0:
0d:83:7d:f2:0c:cb:78:eb:ee:fe:54:7a:17:4a:01:20:22:c9:
53:6b:3e:07:b2:d3:68:60:42:e3:4a:60:88:5c:87:f8:4e:55:
21:e0:d2:36:c0:50:29:09:77:b7:0e:5d:fd:78:da:e3:48:25:
ca:ed:ae:79:cf:58:53:2d:7d:02:30:1f:6d:98:8b:ed:a8:30:
96:a7:5d:17:24:4b:20:86:09:81:22:fc:d6:a2:39:3b:ff:79:
e8:9e:36:6d:e2:23:39:11:e5:cf:fa:3b:b0:e3:01:9d:72:ae:
67:d8:9b:c1:e0:71:ed:d3:46:83:c9:6a:6a:99:19:8e:69:f9:
b5:b9:19:a1:97:d7:05:fd:52:3b:b9:e7:2e:fc:0c:d1:76:d4:
fb:c6:86:57:c9:8c:00:15:f1:a4:5a:72:98:d6:06:29:65:22:
73:bb:10:ab:df:6f:bf:a8:4f:e3:a7:51:cb:62:16:8b:dd:ad:
9f:97:6a:af:fd:77:5e:70:a8:b5:8c:e6:40:3f:88:fd:03:7d:
45:a1:92:cd:5f:2c:4a:31:aa:8e:4b:b5:e3:50:6d:f0:81:9e:
da:08:fd:0f
-----BEGIN CERTIFICATE-----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Generated at Wed Jun 12 15:47:33 2024 by rpki-client on console-fra.rpki-client.org