Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o12q5Ug2gT_rctW0XtQEIjeqC9Y.cer
File: o12q5Ug2gT_rctW0XtQEIjeqC9Y.cer (raw, json)
Hash identifier: JshVxgGxcK9DTS3eqmPALKq6QvJV8ys3MYSeEWVIug4=
Subject key identifier: A3:5D:AA:E5:48:36:81:3F:EB:72:D5:B4:5E:D4:04:22:37:AA:0B:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3EC3063CC499CBEF6965149E9BAA4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/e55af7-b7fb-40f3-bad3-203d5e009223/1/o12q5Ug2gT_rctW0XtQEIjeqC9Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/e55af7-b7fb-40f3-bad3-203d5e009223/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.128.240.0/22
IP: 2a0f:79c0::/29
Validation: Failed, certificate revoked on Mon 27 Nov 2023 08:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:c3:06:3c:c4:99:cb:ef:69:65:14:9e:9b:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a35daae54836813feb72d5b45ed4042237aa0bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:b4:22:51:f4:6f:68:cd:8a:3f:e2:c3:f1:
ef:d1:4e:12:a0:5e:18:e9:64:75:5e:df:27:cd:f2:
12:bf:ba:4c:e4:a6:a0:0e:c0:63:5e:32:54:9c:d9:
bb:4f:55:39:b9:22:82:50:cd:9f:e7:be:23:89:fc:
f2:d3:67:4e:fb:80:79:22:e9:e8:53:38:79:40:23:
30:3b:9c:5d:97:aa:9a:48:ee:f0:ff:da:07:50:ee:
da:e3:40:da:c2:a8:8f:60:40:d1:9f:a2:50:72:e0:
4d:ea:7f:c3:13:2b:40:92:c5:92:14:c8:b6:53:c8:
17:f9:db:82:31:ed:2b:ed:4c:7a:de:33:41:24:c9:
5f:dd:09:ff:1f:0e:bb:45:31:61:bf:b3:f3:21:23:
7d:27:4c:a1:ec:70:4f:85:93:1c:4e:84:47:42:81:
ae:b4:e8:d7:e1:92:9f:95:61:b9:f4:5b:dd:41:d0:
9a:7c:ec:36:c5:d5:75:5a:69:01:ae:7d:4a:e2:64:
92:21:0b:3e:1b:4a:08:37:2b:93:da:d3:b1:01:d9:
c8:de:8f:c3:28:35:31:ff:ce:2f:0a:96:38:1f:aa:
42:81:53:bf:22:96:58:70:e7:2d:99:9a:ce:ac:1a:
cb:11:9d:22:10:37:cf:b5:27:82:9f:ba:e9:05:4d:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:AA:E5:48:36:81:3F:EB:72:D5:B4:5E:D4:04:22:37:AA:0B:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e55af7-b7fb-40f3-bad3-203d5e009223/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e55af7-b7fb-40f3-bad3-203d5e009223/1/o12q5Ug2gT_rctW0XtQEIjeqC9Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.240.0/22
IPv6:
2a0f:79c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:77:55:32:d9:0e:48:f0:09:63:bf:3c:a6:2a:85:d8:ba:b1:
5c:dc:af:21:0a:22:4a:d4:51:8b:8e:3b:6a:bd:eb:0d:5e:53:
fb:fe:1a:68:80:61:06:46:2d:86:28:24:1b:8f:93:b7:74:a6:
8a:a1:e5:3f:ea:d1:de:3f:09:e2:8a:01:5b:4a:a7:39:d0:0f:
30:53:75:4b:cd:58:40:6f:3c:60:6e:cf:ea:3b:ca:41:5f:32:
3e:de:ab:8f:b5:c4:af:52:10:c7:71:4f:31:0b:e6:f7:94:6a:
08:90:c2:62:eb:ee:4f:5e:d9:79:7b:b8:a5:e2:da:66:f2:98:
4c:40:08:1a:ee:52:47:c5:60:d7:09:fb:c9:6e:d6:1d:d9:0e:
fe:74:cd:ff:0d:8c:97:cb:16:de:cd:6f:b5:c2:4f:cc:7c:00:
3c:6f:72:c2:af:9e:86:bb:33:f2:5c:aa:70:dc:29:bd:15:80:
59:56:a2:56:35:ab:43:9d:c8:1c:fc:7a:2a:13:2c:5e:a9:c4:
3e:3f:ae:d8:14:79:b9:d3:71:0f:43:52:84:3e:68:a5:07:c1:
d1:7a:b3:a7:76:c1:6c:89:7c:24:0c:80:e1:09:3c:1d:5f:90:
a5:d5:43:28:24:8f:52:75:2e:c8:cd:20:c8:e5:d2:1b:8c:b1:
ac:d0:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:32 2024 by rpki-client on console-fra.rpki-client.org