Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.cer
File: jKyHfOTfa9gi5KA-eRu9Mx5aUTY.cer (raw, json)
Hash identifier: tt5uZqtZvW559xBm1FiWqCQBryq9CHWtLiuJGRT6lro=
Subject key identifier: 8C:AC:87:7C:E4:DF:6B:D8:22:E4:A0:3E:79:1B:BD:33:1E:5A:51:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6335E31E891ED25BBE66CC1697C610
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.154.115.0/24
IP: 2a11:4740::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 10:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:35:e3:1e:89:1e:d2:5b:be:66:cc:16:97:c6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cac877ce4df6bd822e4a03e791bbd331e5a5136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:20:ae:6a:50:fe:0e:e5:89:b5:18:5a:5e:
36:8d:70:00:2b:0f:03:45:1d:3c:e3:c2:49:3d:35:
bc:2b:76:db:70:52:f0:06:ea:df:8e:84:bc:d3:97:
68:0a:79:ad:17:93:be:01:20:9f:9c:53:a0:ec:52:
99:6a:31:0d:89:f2:e0:37:d7:95:e6:36:17:88:1a:
62:45:1a:40:b8:f6:1f:dd:f6:d9:65:1f:a2:84:27:
be:41:d8:ab:08:c2:58:72:38:d4:9a:05:7e:d3:b5:
13:6b:68:45:d1:70:64:a8:fa:bf:30:63:96:eb:f8:
88:c7:f2:9d:e6:e6:13:ac:0c:42:5f:b5:ed:45:8a:
29:9b:9c:df:d9:80:61:ed:e0:05:4b:12:ce:68:4b:
92:fa:75:56:8b:d3:16:69:85:1f:88:30:36:c0:d6:
b6:7a:2b:1b:f7:91:5d:e8:a6:11:c0:91:e1:50:02:
61:6c:7d:66:e6:94:0d:bf:09:98:f2:e6:f0:04:31:
a8:e1:50:71:25:69:de:d1:ad:d6:5b:a8:59:64:71:
a8:59:cb:a9:34:7d:ae:9a:3a:8c:bb:07:21:0b:3b:
6a:8d:73:b5:14:30:8c:a2:95:71:0b:29:e2:ea:f7:
7b:48:d9:22:41:09:f1:f5:0a:57:66:dc:4c:c4:9a:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AC:87:7C:E4:DF:6B:D8:22:E4:A0:3E:79:1B:BD:33:1E:5A:51:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cc39d3-b98d-4b6d-9bde-c7148b5aef4a/1/jKyHfOTfa9gi5KA-eRu9Mx5aUTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.115.0/24
IPv6:
2a11:4740::/29
Signature Algorithm: sha256WithRSAEncryption
1b:31:0e:a2:0a:6f:9d:52:35:bb:c0:1e:81:cb:39:74:9a:f5:
50:26:20:68:4e:8e:66:d8:df:bc:7b:d0:35:c2:f5:dc:37:fd:
53:fb:b4:10:b7:f7:dd:7f:51:c2:00:be:a2:90:b9:0f:c0:3c:
b6:03:3b:01:f6:2a:fb:cf:d3:e4:c0:52:46:0f:35:94:9d:60:
f5:00:00:3c:e6:0e:82:3e:a1:39:17:ab:0e:b3:1b:96:98:a1:
c1:be:16:3a:4a:04:6e:31:cf:5b:b9:3b:7a:8e:46:29:c0:ff:
73:b3:e0:a7:28:80:bc:31:10:dc:30:55:50:f4:97:67:b9:3f:
8a:87:c8:06:3e:bf:00:26:ce:60:ba:a7:43:d6:89:8a:02:13:
7d:4d:a0:6e:c6:68:cd:18:dd:17:42:88:27:fa:40:76:84:a1:
2c:80:b6:2a:7c:1b:9b:38:0a:67:72:ce:21:67:ef:46:6b:50:
5d:f8:76:0d:e6:ee:9b:4f:66:31:f3:46:6d:8b:13:3e:38:76:
ab:93:83:78:c3:bf:e8:8c:c4:44:f4:c2:98:8a:7e:04:a2:20:
57:06:eb:4b:cb:47:6a:ce:d6:ee:c0:b1:11:a6:2d:be:b8:be:
39:77:de:a0:8f:bb:8f:ac:5d:c7:ef:24:06:3a:24:23:87:3c:
29:50:78:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:37 2024 by rpki-client on console-ams.rpki-client.org