Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oqZfr8L9GfVuGR57h9gHnbRaIpw.cer
File: oqZfr8L9GfVuGR57h9gHnbRaIpw.cer (raw, json)
Hash identifier: OAaS9RHKsi3vFOwDbmG0MUHhPe92j6U4IN5cS3zV2xA=
Subject key identifier: A2:A6:5F:AF:C2:FD:19:F5:6E:19:1E:7B:87:D8:07:9D:B4:5A:22:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFA75C145FA6CEB62A6140C09D400A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/oqZfr8L9GfVuGR57h9gHnbRaIpw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.204.39.0/24
IP: 2a11:9340::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 15:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:75:c1:45:fa:6c:eb:62:a6:14:0c:09:d4:00:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2a65fafc2fd19f56e191e7b87d8079db45a229c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:9d:50:19:08:4e:84:2b:8c:56:23:c2:30:
fa:c0:d8:11:26:7e:b1:b0:6c:fa:67:d9:fe:f7:b7:
d0:17:9f:75:09:36:8b:ae:98:2d:92:96:a7:ba:88:
0d:d4:47:5f:68:65:66:89:a3:f5:51:2b:75:cf:d5:
0f:e7:0d:98:eb:7d:ef:67:34:21:89:98:ca:1b:d0:
4a:4f:9c:16:73:7d:83:49:a3:f5:db:eb:0a:6d:2e:
0e:33:18:fa:11:1c:0d:6e:fb:af:2c:f6:8a:0f:22:
51:01:d7:51:5c:25:30:c2:e1:d5:46:d4:d6:19:e8:
a3:57:f8:b2:5c:79:ae:c6:00:a0:58:29:22:d3:0d:
4b:db:b2:d3:fe:64:44:49:9c:75:75:1f:ea:0f:39:
ba:b2:fd:64:b6:7f:00:1b:bd:3b:47:e6:d7:10:80:
98:79:66:86:18:0f:07:18:14:5e:e4:b3:1b:ba:67:
db:1e:9f:d6:a8:df:bc:7f:1c:43:e0:e4:96:2d:80:
30:2c:30:36:e8:45:f0:27:9d:eb:dc:ea:a7:a4:02:
f7:e9:92:f3:a8:24:c1:29:36:76:76:1c:57:f8:b2:
3b:aa:28:11:72:2d:fb:ca:f9:af:c6:73:2c:6a:42:
2a:57:bd:df:ff:11:53:c6:58:17:da:66:02:b7:f8:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:5F:AF:C2:FD:19:F5:6E:19:1E:7B:87:D8:07:9D:B4:5A:22:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5e91ef-a0e0-46c8-8ebb-c5f2ab047177/1/oqZfr8L9GfVuGR57h9gHnbRaIpw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.39.0/24
IPv6:
2a11:9340::/29
Signature Algorithm: sha256WithRSAEncryption
53:2d:cc:9b:75:24:9c:77:b1:04:3e:95:fa:9b:04:4d:fa:ad:
5d:30:74:12:75:6a:a4:63:91:87:e3:9e:e1:a5:8e:12:9a:5b:
37:f6:d8:2c:e3:25:47:22:11:a0:ea:a2:b2:69:5f:ea:30:8a:
bb:bd:b0:d6:a8:cc:bb:84:c9:c2:d5:16:12:8f:00:e9:46:d5:
ea:5b:b2:14:97:94:10:55:38:df:3d:a7:1d:aa:21:d6:0d:75:
33:c1:24:0a:d5:29:a9:6e:c6:4a:df:ef:1b:6a:23:0d:a9:bd:
a1:dd:df:fc:ca:0a:c7:3f:02:77:13:6d:18:99:a3:bc:e1:fb:
8e:20:0a:6b:d9:f8:35:87:60:d3:2c:f6:97:6a:d6:8d:06:70:
36:7a:66:c7:39:d9:db:59:eb:fb:67:eb:f4:af:b8:3c:d0:36:
92:b7:ad:92:75:51:90:f6:23:5f:7c:4a:cc:aa:3c:5c:0c:10:
59:58:83:67:3d:94:ee:70:87:d0:5d:a2:83:90:2b:ae:64:8b:
a8:c0:96:a0:93:88:7a:b5:d4:a6:1f:56:4f:43:15:7e:fd:83:
2b:77:6a:9d:99:32:f1:2a:7c:8c:ef:11:d8:ef:db:89:3a:3f:
4b:ac:2b:9a:c0:a1:e1:df:43:ac:61:8e:42:c0:20:2f:fe:93:
f0:6a:82:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:40 2024 by rpki-client on console-fra.rpki-client.org