Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_Ggr1p-kgd846KYjXl20fXHSxk.cer
File: p_Ggr1p-kgd846KYjXl20fXHSxk.cer (raw, json)
Hash identifier: K7vtCpcD7b2jyRMQmc/5nVmhQ6RRQ+Rys9UIhvlGtiA=
Subject key identifier: A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B7B9BB61EF06B8EBC76367F9896F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.109.236.0/24
IP: 194.29.56.0/22
IP: 195.234.129.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:7b:9b:b6:1e:f0:6b:8e:bc:76:36:7f:98:96:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7f1a0af5a7e92077ce3a2988d7976d1f5c74b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5f:31:cb:0c:cf:d3:ab:a6:a2:ad:68:66:7e:
5b:64:cf:fc:69:79:4f:a0:b5:2c:e4:a9:b3:30:07:
51:5b:19:28:30:46:1e:e2:ad:86:82:bb:b2:0a:7a:
65:3d:76:8b:6b:1f:2c:32:a3:1b:fa:2f:ec:ac:74:
f9:0c:fd:00:dc:87:71:0c:d9:86:98:79:e7:d4:38:
e4:11:60:6d:91:07:2a:b4:9e:29:ca:1e:84:34:2d:
ea:5d:a8:b5:7d:bf:87:85:2c:d0:45:6f:0e:13:62:
f8:d1:b4:04:c1:cd:36:8a:7d:96:0e:9c:d1:2e:ec:
eb:18:a0:ca:c8:d9:3a:36:5a:5e:73:4b:ac:04:04:
e5:1b:e9:f9:94:19:3f:31:4c:b2:50:fd:7e:a4:3f:
44:e9:7e:58:d2:26:85:b7:9d:88:08:bf:39:3b:be:
e8:19:1c:c7:6f:d7:46:14:1c:c9:9a:6b:d3:8d:a5:
7d:8f:3f:5b:79:9a:a2:78:07:19:5c:67:b6:6a:b0:
c8:5b:17:63:97:7b:f4:50:0b:3a:cf:e3:8b:f0:a3:
20:0c:6d:ca:e2:d5:7a:db:d4:88:36:b7:84:24:ea:
ed:5f:ec:30:e4:bf:6f:9e:90:f7:15:83:bf:72:94:
3b:a4:e0:ce:b2:23:b1:2c:b6:ad:9f:ea:58:b3:dd:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:A0:AF:5A:7E:92:07:7C:E3:A2:98:8D:79:76:D1:F5:C7:4B:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/916670-1d0a-4e6d-af4a-27c6820a23fa/1/p_Ggr1p-kgd846KYjXl20fXHSxk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.236.0/24
194.29.56.0/22
195.234.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c5:c6:f1:96:9a:37:ad:b9:4b:01:4a:66:30:99:ed:da:ee:
1f:a7:ad:18:e3:a4:94:91:8e:f3:92:41:fd:78:86:43:62:f8:
0c:9b:bb:ca:f9:ce:38:5e:e8:fa:73:52:c1:2c:13:db:0a:f5:
8b:23:d6:cc:54:0a:09:9b:61:ed:ce:bf:c7:9c:2b:7a:5a:ce:
a4:d9:04:f7:e1:66:95:e3:da:a6:1e:e6:a5:04:3d:7d:b9:ed:
4f:bd:c0:d5:49:9d:82:dd:bb:0d:dd:c2:14:fa:6c:75:d8:6f:
40:41:0a:7e:d6:ff:ad:c9:e0:54:04:52:f0:cc:7a:3c:b0:f1:
9e:9d:14:35:49:53:5c:ad:ea:34:9f:c4:b7:3d:2c:fd:8a:e3:
a1:90:d6:21:4d:6f:f6:ab:c0:fd:12:ad:25:6e:f2:8c:99:c6:
09:1a:4a:1c:8b:cb:27:bd:c4:0f:4a:1a:83:f7:9b:9b:ea:71:
58:59:16:bd:bf:b4:a1:8a:9e:94:c8:84:67:8c:2f:f3:57:8a:
38:2b:1f:71:23:3f:ae:14:24:30:d8:5a:69:42:6d:db:90:4b:
d9:38:be:f5:9c:8d:4c:81:68:65:57:33:06:10:24:0c:a0:19:
47:2d:2c:07:c8:7c:6d:30:7b:62:ce:23:bd:20:29:ef:3b:af:
e7:4c:70:3c
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 16 14:05:31 2023 by rpki-client on console-ams.rpki-client.org