Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n1oEGvXIykVobB6qxcqkaHYk0tg.cer
File: n1oEGvXIykVobB6qxcqkaHYk0tg.cer (raw, json)
Hash identifier: 7m5Ret5pfHsx98FJFQVV/K8+jZmN9yN1crZML1jAC0g=
Subject key identifier: 9F:5A:04:1A:F5:C8:CA:45:68:6C:1E:AA:C5:CA:A4:68:76:24:D2:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB119F8E00AB56F590802EF49E507F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/n1oEGvXIykVobB6qxcqkaHYk0tg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.0.62.0/24
IP: 2a12:2b80::/29
Validation: Failed, certificate revoked on Tue 05 Dec 2023 13:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:11:9f:8e:00:ab:56:f5:90:80:2e:f4:9e:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f5a041af5c8ca45686c1eaac5caa4687624d2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:23:ef:8b:42:43:57:9d:60:8e:b0:71:5c:
ed:8d:3a:b6:92:1a:14:a8:49:67:c0:3e:2c:52:fa:
cb:21:93:62:ad:f3:9b:57:5d:50:88:1b:ae:90:48:
55:1a:c7:86:fa:07:b9:95:1b:ca:ce:32:5f:c8:22:
8c:a5:1d:16:15:d3:c6:33:ba:be:b5:5a:69:c2:ba:
f3:c1:bf:29:2d:0b:70:a6:83:bc:49:0b:ba:47:9c:
3c:f6:e0:c7:db:28:7d:24:49:dd:d4:de:67:0b:67:
51:d0:91:12:22:08:6d:4d:31:00:d2:f7:a9:22:b0:
63:37:44:4e:ac:87:60:be:6a:96:40:82:75:36:5f:
bb:a8:97:18:1c:73:38:4d:46:61:59:76:26:a4:c5:
56:6c:a0:1c:dd:63:ff:f7:87:e9:7b:8d:9f:8b:7d:
6d:c3:eb:93:4c:f2:91:2e:9b:05:f7:59:f7:98:d9:
a8:d4:f0:54:dc:e8:23:93:39:aa:a8:4b:ca:d6:f1:
23:66:af:06:84:12:cb:4a:a2:47:52:35:59:72:a4:
61:b5:85:3d:c3:f1:05:73:f8:7e:e1:5c:ac:3c:0f:
7a:e9:af:64:95:20:ce:e1:19:4a:69:6d:33:d7:4a:
9d:7c:b7:43:ff:cd:98:af:6d:5e:30:63:4a:28:9e:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:04:1A:F5:C8:CA:45:68:6C:1E:AA:C5:CA:A4:68:76:24:D2:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/050e29-b5ee-4c28-901f-79e5f0bc5f90/1/n1oEGvXIykVobB6qxcqkaHYk0tg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.62.0/24
IPv6:
2a12:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
a1:e1:43:ff:d5:d2:1d:15:16:f9:4b:0e:be:20:e2:ab:56:db:
d8:3e:de:e9:10:ec:f4:91:c7:2d:23:cc:ce:99:47:13:df:f8:
b4:37:ac:33:56:9c:00:8f:91:0c:22:c9:60:d9:18:c4:aa:23:
a8:64:a0:b7:f2:38:82:ce:18:91:8b:68:6f:15:0b:7a:0d:1f:
9e:61:63:d7:fd:eb:d4:59:83:0c:6e:b3:9a:58:cc:78:a0:4d:
f9:d9:31:86:e8:1d:e4:f4:96:3a:46:ce:3c:4a:5c:3c:b9:84:
d1:06:bc:2d:e0:6d:2d:07:0e:74:22:51:ae:c7:f5:9b:7a:e7:
ce:f3:78:c1:3e:35:04:d6:1e:cc:80:ee:20:fd:55:6f:71:f0:
5e:27:d0:e7:5c:fb:42:e1:f1:52:98:2e:64:2c:60:c9:7e:7a:
f8:d6:2c:f7:df:f8:a7:4a:b2:7a:5e:db:92:7c:e5:13:65:82:
fb:f0:68:0f:ca:f9:55:b6:62:49:a5:0b:4e:cf:72:c1:72:e8:
2d:b9:4d:f3:52:9c:ca:cf:7c:2f:d6:bc:43:87:43:4b:01:d5:
55:63:26:47:d9:c9:af:b6:28:3e:3a:1b:17:ec:98:62:6d:37:
fb:c7:5e:37:cb:ee:9f:20:05:49:6f:cb:82:16:ec:c2:4c:f4:
ba:6e:88:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:22 2024 by rpki-client on console-fra.rpki-client.org