Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rbFvcZdDerZ_dBAhs04LBlkyyvI.cer
File: rbFvcZdDerZ_dBAhs04LBlkyyvI.cer (raw, json)
Hash identifier: GijgO91WKAQOFZniZOYD860AjXf52+1ICYaDjWqC0jo=
Subject key identifier: AD:B1:6F:71:97:43:7A:B6:7F:74:10:21:B3:4E:0B:06:59:32:CA:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF72799671DEBCB6164D09B836B9511
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/347947-584c-4da7-b449-f07c526ad1b0/1/rbFvcZdDerZ_dBAhs04LBlkyyvI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/347947-584c-4da7-b449-f07c526ad1b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.227.114.0/24
IP: 2001:678:428::/48
Validation: Failed, certificate revoked on Wed 13 Sep 2023 11:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:27:99:67:1d:eb:cb:61:64:d0:9b:83:6b:95:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adb16f7197437ab67f741021b34e0b065932caf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:52:15:d8:68:c9:b8:fd:b2:83:06:21:2e:
28:14:4d:66:99:ad:07:a0:a0:55:ef:c9:98:ec:04:
06:b6:ed:d9:78:61:96:5d:da:68:67:5b:97:87:68:
1d:8f:24:91:b6:32:c5:6b:fe:5e:91:25:4b:08:17:
52:9e:af:07:d5:e9:a1:b3:81:13:b3:36:1f:6b:53:
e8:57:33:07:c3:78:83:9f:ce:71:2a:65:c3:fb:56:
fb:c4:76:46:60:3c:ea:2f:b8:2f:c6:71:e7:e5:5b:
48:69:af:2a:ec:75:90:31:df:4f:c6:e4:3e:e2:f1:
0c:bc:a0:c7:f3:db:c4:26:8f:fd:15:91:3a:2c:c9:
22:14:44:44:a9:b1:15:fb:c7:e7:62:ac:0f:01:6b:
4c:97:21:9a:3f:ac:50:37:47:e3:85:3b:51:32:9a:
30:ff:32:79:59:14:25:f3:fc:e8:26:fe:63:45:a8:
aa:33:ab:cb:63:cf:38:f3:ae:45:8d:7e:b8:3e:82:
d2:8a:b5:59:23:68:3d:94:12:30:6e:73:a7:ea:e5:
f9:1e:b9:cd:db:da:15:d6:55:98:59:d9:ab:c7:e9:
fd:ca:8a:fd:6b:92:2a:5b:11:bc:a2:68:e0:d8:48:
5f:ba:f3:94:cd:8b:58:42:5f:ee:2c:fd:27:6a:b9:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B1:6F:71:97:43:7A:B6:7F:74:10:21:B3:4E:0B:06:59:32:CA:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/347947-584c-4da7-b449-f07c526ad1b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/347947-584c-4da7-b449-f07c526ad1b0/1/rbFvcZdDerZ_dBAhs04LBlkyyvI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.114.0/24
IPv6:
2001:678:428::/48
Signature Algorithm: sha256WithRSAEncryption
91:c4:69:d5:a9:b5:8f:82:92:00:20:81:6f:53:4a:ef:4f:40:
a7:5e:28:cc:83:0f:4e:7b:42:ac:ed:26:12:e6:1d:9d:75:b4:
7b:63:b3:c8:4d:af:43:9f:f0:92:07:93:48:6b:5d:f1:32:b6:
75:6f:d2:7c:a7:30:73:45:16:89:3f:1f:4a:e0:a0:2e:4a:a6:
7e:59:16:bc:21:54:b2:aa:f6:de:97:51:95:9f:aa:63:ae:35:
a2:fc:18:4e:a5:d2:97:7f:0d:19:08:00:b9:10:02:51:98:1d:
89:24:aa:f7:68:4a:7c:ec:85:0f:f8:76:89:db:a6:a6:b0:0b:
95:b6:47:f5:e1:1e:6b:c3:24:9e:48:58:58:60:b4:ff:7d:d2:
07:5d:bd:60:6e:35:fc:b9:1c:17:1c:72:f0:ca:69:3f:b7:5b:
4f:72:09:9b:22:15:4e:6b:bf:b3:43:fb:fc:06:e5:73:4c:02:
83:ab:9d:0c:c6:79:35:ae:1a:03:cc:fd:eb:c2:76:8f:81:74:
48:2e:eb:4e:ea:80:59:b2:aa:3a:a8:d9:ef:61:f2:c5:19:22:
f4:0f:e0:7a:59:85:97:5e:0a:fd:f3:d0:50:14:9b:5a:d1:bf:
fa:e0:05:15:cc:68:fe:68:ed:10:7c:96:da:a1:3e:e0:b6:49:
c2:98:7d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:40 2024 by rpki-client on console-ams.rpki-client.org