Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer
File: jQCgA81eiUjhsS0mfQ6lZ6IhFnc.cer (raw, json)
Hash identifier: d5C++jzxaU4y9+OFMOSa/kjsYHZ/NhRrcA7uccteC+w=
Subject key identifier: 8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBB49890D8C93CEE7B3C43EF1F6042
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 130.255.172.0/24
IP: 2a11:a280::/29
Validation: Failed, certificate revoked on Mon 11 Sep 2023 13:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:b4:98:90:d8:c9:3c:ee:7b:3c:43:ef:1f:60:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d00a003cd5e8948e1b12d267d0ea567a2211677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:10:c4:90:4c:cc:55:fc:10:1f:73:da:97:
3c:f5:7f:36:a9:ec:6e:6a:6c:b0:7f:f7:9a:44:89:
d6:c0:1e:dc:56:97:8b:e8:9b:74:22:8f:d0:31:d9:
cc:01:e5:10:2d:99:66:d6:75:58:d6:e4:fe:83:9b:
70:67:60:2f:44:44:95:9c:11:79:a5:64:eb:1c:49:
95:c9:f9:f9:af:2e:aa:28:eb:40:d8:83:9c:67:1a:
9d:98:3d:3e:4b:5e:cb:9b:e1:8c:53:1d:20:fb:46:
cd:8c:f7:50:62:d6:96:05:34:7f:f5:c1:7a:bd:43:
2b:cf:90:34:e3:a3:6d:8c:58:1a:c9:e6:5a:44:38:
53:6a:2b:3b:68:28:5d:c0:95:82:21:73:2d:8d:51:
80:2e:b8:6e:14:4b:0a:dc:5f:e8:a6:6e:84:20:d6:
b0:4d:06:54:9b:a1:fa:00:59:5a:bb:95:b7:f5:52:
b8:a2:60:8a:df:0c:6d:f7:15:bc:26:8f:49:ef:60:
ee:b7:66:2d:62:b0:16:13:e6:cb:f5:d6:f2:25:d2:
8a:fb:40:b3:a4:d1:cf:65:ac:b2:37:d2:6e:dd:c9:
08:26:45:fd:31:4c:61:30:46:38:7b:ee:da:19:66:
5a:bc:ac:c8:3c:66:fc:4d:ac:9e:55:9a:0e:ff:b0:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:A0:03:CD:5E:89:48:E1:B1:2D:26:7D:0E:A5:67:A2:21:16:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bfe0e3-4518-4ba2-be4f-d90b7ae113c5/1/jQCgA81eiUjhsS0mfQ6lZ6IhFnc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.172.0/24
IPv6:
2a11:a280::/29
Signature Algorithm: sha256WithRSAEncryption
32:e3:eb:fd:5e:68:aa:de:4c:9d:61:42:d6:0a:07:1a:75:32:
be:8d:44:c3:20:a0:d8:f8:42:7f:a7:21:d7:19:d5:a9:37:c8:
66:62:aa:4b:a7:73:67:c6:80:21:7d:da:df:63:f6:25:64:9b:
c6:29:7c:21:7b:60:5b:8a:e8:08:e3:11:89:ce:e9:39:60:e0:
a8:6d:82:a6:2c:0c:7f:a1:ce:f1:a7:a3:89:a4:7c:71:77:40:
14:68:d8:1d:0b:fe:5d:db:bf:96:74:d9:8b:75:54:69:d3:12:
2a:48:59:3a:d4:07:50:af:77:28:6b:d4:ea:e6:d6:83:d1:5c:
26:de:81:6f:ae:36:33:aa:5a:8a:a8:4d:af:3e:51:25:27:2d:
c6:01:03:9e:99:53:29:4f:fe:91:97:c8:15:fc:fb:5b:bb:7a:
bd:59:e6:4c:eb:10:51:1f:24:09:47:39:8b:19:67:97:e7:09:
ee:82:23:2b:18:3c:2c:03:1c:ad:99:0e:3f:36:6c:a1:fc:85:
27:ef:53:fc:40:48:e6:13:59:d3:25:69:4e:ac:39:49:5f:e8:
6b:13:2a:08:f1:70:44:94:a6:82:28:3f:c4:a3:d4:72:e2:6d:
97:98:7e:bf:28:5d:e6:29:28:e5:69:14:cd:0b:e1:14:71:06:
b5:64:79:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:39 2024 by rpki-client on console-ams.rpki-client.org