Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jaFSmDJA6QSV92BcRCVH2QKD4eA.cer
File: jaFSmDJA6QSV92BcRCVH2QKD4eA.cer (raw, json)
Hash identifier: PTotsvX/YS0bIZcT8B44wilrvOg49dMGvp0B81Xtmes=
Subject key identifier: 8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1AE720EA730679CF6D988F345AFF98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.52.12.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:e7:20:ea:73:06:79:cf:6d:98:8f:34:5a:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da152983240e90495f7605c442547d90283e1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:50:f5:92:b6:c4:73:75:e4:f7:66:80:2a:
de:ab:f4:62:87:da:de:c3:85:7e:9d:75:12:bb:75:
87:09:39:19:ac:96:91:79:aa:3b:b1:4f:ba:5c:53:
81:5d:c8:1a:b8:ac:3f:9c:7f:70:3d:7a:d1:44:b0:
d9:7f:81:11:8b:d1:de:7e:a0:7d:26:69:ba:8b:f2:
4c:32:2a:4e:99:e7:b4:b0:e4:e0:c3:00:ac:8b:b1:
5f:35:14:5b:95:3f:ea:3b:a0:c1:c7:fe:0f:bc:49:
44:1b:08:c4:6d:e9:07:3b:66:3d:46:26:db:31:7d:
78:ef:b6:75:47:c8:37:e7:fa:53:83:ce:a0:79:1f:
40:76:ae:29:ed:43:ab:e2:44:f4:26:32:67:54:4d:
16:3d:4c:ad:16:08:d9:08:6a:d7:3e:df:7e:19:3a:
5d:40:bc:36:62:4f:e2:95:92:97:35:4c:13:c6:9f:
71:cf:bd:dc:33:7e:50:9e:0e:dd:38:07:8d:0e:26:
b8:ac:6a:22:70:3d:a2:69:53:c8:4f:a9:ff:0e:df:
92:16:32:15:df:96:d2:72:29:1e:ce:ab:34:41:22:
63:13:1a:1d:f7:92:e1:69:73:bf:c2:c0:8b:27:4c:
ae:3f:32:76:6e:e3:f8:3f:5b:7d:f4:7e:45:93:1d:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A1:52:98:32:40:E9:04:95:F7:60:5C:44:25:47:D9:02:83:E1:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9b1281-00b5-4ffd-a0bc-dda73502d131/1/jaFSmDJA6QSV92BcRCVH2QKD4eA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.52.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ec:ea:b6:94:44:75:b7:3e:c7:f7:15:a6:d8:c3:cb:0e:a1:
91:4a:c0:47:9f:df:ea:0d:ae:b7:87:05:4b:45:f9:dd:1e:0f:
9f:6d:6b:fc:3d:5b:c1:2d:3a:27:0f:65:cd:79:b9:a7:ae:31:
2d:ef:01:60:3e:83:48:34:45:17:de:be:85:7d:0c:8d:55:4f:
cb:a6:5b:d9:3d:17:32:7b:47:1d:7b:00:bc:67:ad:53:48:aa:
5d:79:b8:ed:1d:01:f3:97:0c:ec:e2:9e:f9:18:f7:46:8e:98:
e8:53:79:18:b0:68:34:03:ae:93:de:b6:d9:fd:26:e6:a0:3a:
2e:42:c0:df:a6:9e:4f:9f:cb:2d:1f:07:a8:9f:0b:1c:cd:9e:
cb:df:11:37:d2:9d:f9:57:9a:39:40:b8:66:23:b1:cc:7d:4f:
6b:6a:9f:a9:ba:04:bc:76:ee:74:12:00:b2:d0:a9:5c:1e:1c:
54:43:b7:c7:ee:ab:5f:11:f6:67:a5:5e:7c:53:1d:37:1b:d9:
16:49:15:7a:40:a4:3f:fc:81:65:e4:03:de:f4:f8:cb:63:30:
61:2d:2f:64:d0:55:26:32:31:d6:77:ba:78:4d:8d:c5:bd:0e:
c5:0e:4e:02:ab:3d:cf:01:a2:75:a1:53:8b:58:23:ed:dd:28:
f3:84:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 13:47:52 2023 by rpki-client on console-fra.rpki-client.org