Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iBsI8VG94Ks4kM-SN0RVzdwLqPQ.cer
File: iBsI8VG94Ks4kM-SN0RVzdwLqPQ.cer (raw, json)
Hash identifier: nvzX5fR5iiXI5evck8vYG68AtEL36rFcO01dQYoQyzM=
Subject key identifier: 88:1B:08:F1:51:BD:E0:AB:38:90:CF:92:37:44:55:CD:DC:0B:A8:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAF2AF0EC2C7BA9208B005DEA9C115
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/iBsI8VG94Ks4kM-SN0RVzdwLqPQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 77.75.48.0/22
IP: 84.39.204.0/22
IP: 91.195.64.0/22
IP: 185.229.80.0/22
IP: 185.231.28.0/22
IP: 185.247.44.0/22
IP: 193.36.164.0/22
IP: 194.49.88.0/22
Validation: Failed, certificate revoked on Tue 07 Mar 2023 15:28:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:f2:af:0e:c2:c7:ba:92:08:b0:05:de:a9:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=881b08f151bde0ab3890cf92374455cddc0ba8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:28:e5:fc:07:f9:61:17:8a:a1:c0:ef:e0:
20:d6:72:a1:a5:91:0d:24:29:29:77:c4:30:49:b6:
b7:22:75:69:a4:6e:da:e8:19:fd:b4:c9:49:1f:dc:
e3:e6:ab:d0:ff:09:ae:1f:47:7b:52:f4:c2:e8:d0:
b4:79:5f:95:90:ce:e6:bc:fb:41:84:73:64:17:46:
b8:d5:79:15:91:a8:5a:34:5e:bc:fd:f5:fa:f0:03:
56:06:7b:9c:9d:4e:bb:6f:ed:aa:4e:02:06:1f:b5:
e5:ce:b6:27:ec:3e:ec:45:59:ab:da:c9:b9:60:41:
f5:04:0e:93:c9:8d:3e:f4:c1:b6:f9:c5:64:9a:e6:
76:bc:c3:54:9e:04:1e:92:6d:97:0a:62:29:fe:48:
2b:d2:1d:da:42:c4:0d:cf:5f:f0:35:92:7f:04:cf:
46:d2:49:df:52:fa:88:5e:56:4c:1a:55:77:5c:a2:
da:3d:a1:df:be:8c:1b:60:71:d2:4a:9e:d7:6b:b2:
a8:a3:cf:7d:ab:e8:7e:76:26:25:4d:38:ec:be:ee:
37:8f:92:cc:6e:5b:67:5c:f0:1b:d8:37:5c:44:dd:
ed:63:f2:33:22:d5:eb:46:e2:9a:6f:19:30:81:ee:
cc:9b:35:f7:c7:c4:db:a2:e0:2d:03:da:8a:1f:83:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1B:08:F1:51:BD:E0:AB:38:90:CF:92:37:44:55:CD:DC:0B:A8:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a9de90-39d4-4108-b652-6e60b3a91fd7/1/iBsI8VG94Ks4kM-SN0RVzdwLqPQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.48.0/22
84.39.204.0/22
91.195.64.0/22
185.229.80.0/22
185.231.28.0/22
185.247.44.0/22
193.36.164.0/22
194.49.88.0/22
Signature Algorithm: sha256WithRSAEncryption
62:c5:2b:98:44:48:04:fe:f0:f8:2f:ab:a9:e9:0f:e4:f3:0c:
4f:94:d4:ea:5c:1d:d8:19:f4:0b:cd:5e:ae:42:2a:01:b2:f2:
ff:e8:a7:d3:d3:4b:39:88:85:b1:fa:8c:4c:e8:e4:3b:33:98:
8e:65:de:a4:73:f5:3a:51:d7:77:8b:dc:92:e8:d3:fd:87:bd:
69:76:29:76:f8:7a:f0:5c:fb:96:a4:4c:c1:a8:4a:87:32:a4:
97:ee:3a:33:83:8a:f8:cb:4c:13:34:5a:79:76:f9:59:6c:f8:
63:a2:2d:81:26:28:89:9c:20:94:2b:e4:06:9b:85:71:86:28:
60:5c:98:eb:42:d4:48:b3:8e:2b:86:5b:b9:a1:05:80:33:69:
70:86:c8:c8:4a:4d:03:7f:0b:3b:f5:49:ab:a5:76:96:46:3e:
c3:52:bb:d9:e5:f4:14:ec:60:2b:46:1f:1f:6d:01:16:d5:a8:
c1:80:6e:a1:d4:96:be:82:cc:91:e2:f7:d4:04:e1:b0:fd:e5:
aa:53:2b:fd:09:5d:4b:30:9c:9b:dc:6e:37:68:fa:25:40:f0:
9f:59:cb:ee:3a:4b:7c:31:48:e9:f4:3d:dc:46:90:73:57:90:
36:25:b4:ba:a3:dc:d0:b4:dc:e5:91:32:c0:6f:51:2e:07:88:
40:9f:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:24 2024 by rpki-client on console-ams.rpki-client.org