Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pT5G7QRzDRXJ106sQQ3enNw2PPA.cer
File: pT5G7QRzDRXJ106sQQ3enNw2PPA.cer (raw, json)
Hash identifier: an3wIpxTkWi//+2mJFf5YpiqUSae7q7w+aDRBTiQnLQ=
Subject key identifier: A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF79688EA6335C2792AF109DA1E8434
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/pT5G7QRzDRXJ106sQQ3enNw2PPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.111.170.0/23
IP: 193.111.196.0/23
Validation: Failed, certificate revoked on Fri 06 Oct 2023 14:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:96:88:ea:63:35:c2:79:2a:f1:09:da:1e:84:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a53e46ed04730d15c9d74eac410dde9cdc363cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:d7:bb:e2:c1:da:31:d7:ff:42:0a:5b:8a:
ad:85:75:96:d7:1a:88:cf:e7:d9:7c:30:ce:b5:df:
68:04:9e:cd:f0:49:3c:c4:ad:50:9b:c6:5d:16:82:
5e:49:19:f2:9e:af:33:51:99:cb:99:8d:ad:d0:c9:
5e:ba:3b:c9:00:59:df:a1:9d:c8:08:86:2d:8d:44:
d7:6e:bf:83:61:5d:4b:2c:85:27:ef:33:97:67:3f:
84:c7:c2:c7:52:77:e0:cd:99:88:c6:06:a1:e0:b9:
c9:bc:43:8a:3e:7f:54:58:e7:14:a8:8d:b7:be:f1:
b3:77:0e:6d:13:6d:0d:01:36:fe:40:fb:46:76:6f:
1e:fd:63:e8:8c:7a:8d:4d:b7:57:13:31:6e:d8:2d:
9b:f4:fb:9d:71:7a:60:91:22:40:57:ba:65:9a:c9:
d9:18:bc:aa:fb:7f:f1:de:b4:bd:9e:ba:e7:6a:a9:
5d:bc:fb:2a:8f:da:ec:5e:08:f2:35:24:85:e5:1f:
c7:12:f5:72:ba:27:99:f0:b0:51:30:44:0b:0a:00:
1d:5e:4f:78:3d:53:43:02:12:9a:4e:2f:cc:fa:5c:
96:1d:62:42:e7:60:de:51:8b:c1:1d:77:91:fe:90:
18:67:5d:eb:a1:e8:2e:5d:07:b4:5d:cc:3e:6f:13:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:46:ED:04:73:0D:15:C9:D7:4E:AC:41:0D:DE:9C:DC:36:3C:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/533596-2176-47d8-bbda-48a70d3f72f8/1/pT5G7QRzDRXJ106sQQ3enNw2PPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.170.0/23
193.111.196.0/23
Signature Algorithm: sha256WithRSAEncryption
35:63:3b:77:59:64:91:20:13:25:90:c9:ee:bb:88:51:41:d4:
af:e3:2a:d0:0a:e0:bf:f4:c4:f7:87:d9:a7:fd:cd:9a:3d:06:
4a:f3:8d:6e:83:96:6e:c4:b4:70:be:41:1e:0a:cc:ed:cd:28:
e9:87:24:15:58:9c:81:6c:20:b0:d4:f8:11:c0:a9:95:24:84:
24:88:6f:e6:3e:1c:73:8a:c0:68:90:c8:11:c3:5f:e8:b4:b7:
9c:0d:6b:dd:01:17:03:22:f4:df:6d:2d:66:6c:1a:ba:c0:6c:
8e:f0:66:9b:fa:08:0b:e9:ee:80:4a:f1:5e:a6:0e:94:3c:99:
d5:c8:31:f7:33:74:6b:38:94:dc:ee:13:46:07:ad:f0:57:2d:
93:99:3f:4e:0d:cc:75:37:05:47:a2:7b:3c:b0:1e:d4:d1:64:
b5:1d:84:e8:bf:f1:cf:87:9a:ec:f9:7f:51:5e:ed:9d:cf:98:
85:19:f4:30:0f:32:a7:32:cd:ff:f4:fc:22:1a:b4:cf:97:bf:
76:15:0a:5a:73:e3:ac:97:ab:21:2d:73:b2:24:e2:ff:5e:68:
8f:68:3a:6b:87:21:13:10:d9:e0:2c:46:fa:8e:4a:27:72:08:
1d:d7:22:d0:c9:f1:4e:17:39:3b:ab:f9:7e:9f:0b:c3:cd:0d:
2e:d1:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:00 2024 by rpki-client on console-ams.rpki-client.org