Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hBjpDG3qsErZ0l3RFrGZDNvNiPI.cer
File: hBjpDG3qsErZ0l3RFrGZDNvNiPI.cer (raw, json)
Hash identifier: +heNGIgDpyUNYZldqyDhICVpzV+5En6A3L9dNuP/tac=
Subject key identifier: 84:18:E9:0C:6D:EA:B0:4A:D9:D2:5D:D1:16:B1:99:0C:DB:CD:88:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB09062BE79B53792C3770DDAD3FDF2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/hBjpDG3qsErZ0l3RFrGZDNvNiPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.250.0/24
IP: 2a11:88c0::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 06:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:90:62:be:79:b5:37:92:c3:77:0d:da:d3:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8418e90c6deab04ad9d25dd116b1990cdbcd88f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:ee:07:3f:16:3d:36:d5:a2:c4:c0:ce:83:
fb:8f:ef:ae:48:72:47:dd:22:f2:86:9a:0d:f3:cc:
63:7e:a2:56:c7:d8:13:7d:6e:46:ff:cd:69:7c:fe:
67:4f:4a:09:c4:0a:78:71:7a:6f:ea:73:82:58:ca:
f2:ed:2d:94:b5:cf:a2:5d:ad:68:2a:3b:57:36:1d:
e6:c4:ee:20:af:d9:e8:3a:f5:53:03:00:54:6b:72:
6f:7b:71:0d:c2:50:b6:c2:f0:bb:44:7f:4b:80:88:
d3:6f:bc:64:52:83:2b:d7:88:13:69:c5:df:4e:8a:
6b:12:4c:af:ac:23:f1:93:14:38:5a:9d:8c:03:9f:
90:c0:88:b5:2b:7a:30:4d:31:2f:4d:96:be:f2:ea:
1e:29:4e:34:09:c3:b2:c6:68:79:65:92:f3:96:b9:
b9:4c:0c:fa:07:db:ab:9e:d0:85:7b:cf:4d:0d:d9:
bc:e0:6a:5c:a0:bd:6c:d3:2f:bb:eb:69:ec:64:6e:
86:2e:d1:12:b4:ed:d7:75:66:dd:a9:92:87:5b:68:
d6:9c:ff:93:b6:c0:1b:0c:73:f9:8a:39:2d:4c:f6:
14:8e:93:ac:55:2e:b2:5e:1c:9d:94:61:df:79:ef:
20:4a:0c:69:3b:3f:9d:8b:07:fd:14:9f:83:e3:da:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:E9:0C:6D:EA:B0:4A:D9:D2:5D:D1:16:B1:99:0C:DB:CD:88:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b7ee6c-af99-45af-9c34-4569de2644e2/1/hBjpDG3qsErZ0l3RFrGZDNvNiPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.250.0/24
IPv6:
2a11:88c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:10:11:25:4c:cb:d8:3b:51:24:d1:3a:44:a5:91:88:32:55:
20:e6:ed:f5:01:71:1c:42:fb:63:10:7a:30:5f:d5:78:20:ad:
de:05:d1:60:a2:88:76:43:5f:bd:46:14:7e:7d:52:4c:a8:22:
be:fe:da:cd:87:3f:dd:a1:6b:2d:2b:31:50:b0:05:5b:4b:36:
83:4c:67:9f:6e:79:39:d3:4e:bf:1c:70:98:ba:5e:7c:ef:e5:
74:d1:d5:36:de:0a:c9:8d:12:d2:40:85:0f:69:89:4a:92:28:
7e:4f:63:01:a0:da:ab:30:67:4e:aa:4f:f4:27:db:9c:b3:be:
c7:c4:d3:02:91:d3:e0:59:18:8e:b6:cb:6a:26:0f:ac:cc:ec:
c3:5b:5e:da:ff:5c:10:c6:97:84:eb:f4:87:d8:d7:7b:41:10:
23:d6:92:9d:8e:a3:3b:88:73:d1:79:91:48:c3:52:cc:5f:5e:
ca:43:1f:51:c3:3f:07:e7:91:1c:45:73:12:98:8a:15:80:33:
3c:38:2d:cc:48:7c:47:da:88:aa:1d:b3:16:7f:c3:5f:c8:24:
48:f1:2c:59:eb:6f:9b:34:64:ca:9e:f0:8a:42:ea:5a:5e:53:
60:1e:7a:34:a1:8e:78:ff:67:b6:42:df:ea:ac:4a:24:05:c7:
ce:be:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:14 2024 by rpki-client on console-ams.rpki-client.org