Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ipqwptxd57rsqtZtrB2UO9j9ke8.cer
File: ipqwptxd57rsqtZtrB2UO9j9ke8.cer (raw, json)
Hash identifier: 82Yjrbr50gPl/78NWbNPQYgVoT2OXPamKxVdeEinsW8=
Subject key identifier: 8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B638000BE201FBAC01AB912A6E2BBA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/ipqwptxd57rsqtZtrB2UO9j9ke8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.213.195.0/24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 09:38:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:80:00:be:20:1f:ba:c0:1a:b9:12:a6:e2:bb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a9ab0a6dc5de7baecaad66dac1d943bd8fd91ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:ef:bb:11:3d:25:57:a6:70:9a:2f:6b:18:
f2:02:19:59:92:b1:65:64:58:78:db:5a:73:d9:17:
ba:a6:84:fa:28:ce:27:01:50:44:a0:c0:f2:a2:eb:
17:e5:60:d4:22:da:07:be:8b:89:88:89:11:80:39:
86:78:14:d2:8d:17:d5:a2:9d:24:6b:2b:c9:81:2b:
a6:ab:1d:3d:64:d8:f9:62:b5:bc:b9:3a:af:e7:96:
d5:ae:36:69:76:be:b3:57:70:7e:05:8a:d6:50:57:
05:49:ce:82:9e:8b:e9:5a:a5:71:e0:40:57:ab:16:
92:f0:02:db:3d:63:9b:9a:4a:20:2c:85:e9:9c:cd:
9d:df:55:42:ac:85:e7:80:da:d7:66:8e:b1:b6:b5:
35:65:60:d1:93:04:83:a3:f4:6e:96:2f:33:db:22:
80:f1:ae:93:8f:63:db:4f:2b:b9:9a:cf:2d:97:0c:
2f:32:ed:05:52:0f:e5:5b:c9:f5:d8:92:99:8d:b6:
02:c8:80:fe:35:eb:81:70:df:62:9c:2f:d1:1d:1e:
9e:78:24:b8:0e:ed:6b:93:0e:49:b9:19:38:cb:b6:
b8:a6:0c:42:e4:7c:13:37:d5:f0:2e:8d:73:22:dd:
4c:5e:48:6c:66:bd:10:34:90:fd:68:19:28:1e:15:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:B0:A6:DC:5D:E7:BA:EC:AA:D6:6D:AC:1D:94:3B:D8:FD:91:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e1f2f2-3ad7-4cd2-b76a-e856eff9ab0d/1/ipqwptxd57rsqtZtrB2UO9j9ke8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:9e:27:cf:b0:7c:bb:94:72:8d:90:e4:aa:86:39:08:c6:7d:
c7:32:c4:00:f1:b1:dc:88:55:b9:cd:ab:d0:12:48:10:d2:bb:
41:dd:7c:c4:db:2d:4c:99:6a:49:54:90:d9:39:9c:82:9b:5e:
5a:44:3f:b3:0d:54:36:f6:8b:3d:fe:0b:9f:5d:dc:98:b6:5a:
9d:83:cc:11:42:c0:c6:ed:09:76:59:6c:6f:69:f0:9f:ed:b4:
4e:19:dd:0e:dd:b6:78:14:d6:cb:80:22:89:3f:a6:f4:6e:e0:
ec:e9:de:27:0f:98:9d:71:b9:fd:82:dd:45:ac:09:0c:59:cb:
2f:85:67:45:6c:76:e8:20:87:4e:59:c4:fa:73:2a:ab:a7:2e:
1a:0a:9f:29:53:bf:2e:a2:52:eb:f2:e3:3d:56:b1:db:a9:ad:
05:8b:14:da:9e:a1:e3:64:81:e1:90:b2:a1:31:1e:d9:18:8f:
65:80:0d:04:17:16:a7:08:a0:27:4c:72:6f:11:16:13:a6:95:
5c:c6:3f:91:30:c6:00:da:c2:59:92:48:69:3c:48:04:bf:b8:
f2:3b:bc:77:2c:f4:4e:bf:b3:a9:ca:e9:2f:d9:90:5c:a4:49:
e9:3f:47:74:db:f2:29:d7:dc:bb:10:58:d9:6d:ee:7a:44:7c:
43:b2:69:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:44 2024 by rpki-client on console-fra.rpki-client.org