Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rj9hclnw6hqnlagjpBB5cdVQrVo.cer
File: rj9hclnw6hqnlagjpBB5cdVQrVo.cer (raw, json)
Hash identifier: 6Bsgts4nfcAvSI9NqTEkliZpxWsqFQsPwrKwWqtogHQ=
Subject key identifier: AE:3F:61:72:59:F0:EA:1A:A7:95:A8:23:A4:10:79:71:D5:50:AD:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185C6CA2233AE08435B118F9212B1F8D8E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Jan 2023 21:30:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a13:8000::/29
Validation: Failed, certificate revoked on Mon 30 Oct 2023 08:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:ca:22:33:ae:08:43:5b:11:8f:92:12:b1:f8:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 18 21:30:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae3f617259f0ea1aa795a823a4107971d550ad5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:67:a6:1f:e7:04:89:db:17:7e:44:89:7a:
cf:bd:f5:a8:43:86:a3:15:83:b0:79:1d:d9:2e:c7:
3f:ed:bc:e6:9e:96:02:db:b2:14:98:d8:16:99:93:
67:de:8a:a8:64:21:59:9b:61:97:88:05:3c:c6:6f:
ef:8b:31:3d:62:b6:f3:d1:b3:d0:59:2d:d7:8d:28:
4b:31:e8:da:b0:b7:9e:f9:3d:c4:84:4d:b1:f9:75:
be:81:05:cf:c4:ee:3f:74:91:22:71:2d:74:75:2c:
e4:1f:99:61:f1:63:43:ae:8d:64:c4:54:00:2a:1f:
c1:a1:0a:e7:21:90:12:ef:fc:2e:19:08:36:a2:e3:
ab:41:ee:e8:40:3f:d8:b2:7c:f2:b7:91:98:ba:c0:
2c:c2:c9:29:2f:0d:8e:c7:5b:02:7c:2f:87:c7:70:
f6:e1:75:14:24:b8:9b:f4:ca:a3:b3:4a:58:3c:5c:
83:63:a2:28:bc:99:e8:90:c3:d6:67:b0:f3:3b:d1:
ac:0f:89:ea:e0:0f:c1:23:03:8d:82:56:bf:83:6b:
89:e7:eb:d5:95:60:6b:fa:f4:be:60:c9:32:f1:a0:
1f:5c:cd:5d:01:ff:51:9e:59:4b:75:6d:49:06:ae:
2a:c1:d8:3f:3b:14:a3:c5:3f:52:b8:e8:22:05:ef:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3F:61:72:59:F0:EA:1A:A7:95:A8:23:A4:10:79:71:D5:50:AD:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6f03fd-5217-4e52-a159-781280fd2412/1/rj9hclnw6hqnlagjpBB5cdVQrVo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8000::/29
Signature Algorithm: sha256WithRSAEncryption
4d:d4:43:a6:3a:c3:15:66:d8:ac:d4:d6:b5:4b:ff:a3:8d:3f:
5c:46:e3:40:5a:1d:d2:80:58:36:0e:20:a6:17:74:e0:07:6f:
41:ed:f9:d9:6a:b8:6a:84:20:17:b0:d7:69:a2:85:53:3f:81:
eb:68:4c:f6:e7:b7:31:4a:e0:d0:11:9b:10:c7:ea:50:a5:d1:
ad:d0:11:15:52:90:e6:61:bd:92:ba:b7:26:65:9b:17:a3:4d:
85:c4:b5:ee:c3:57:e8:ab:79:9a:7c:85:bc:2f:54:de:df:98:
24:27:5f:70:0e:80:d2:ca:81:4d:a2:ec:22:34:cf:28:5a:9a:
85:3b:c4:d2:db:90:dc:bb:bc:1f:8f:e0:8e:ab:25:01:cb:3d:
50:41:b8:99:b5:10:ea:d4:53:00:3c:f9:a0:2c:d6:54:f8:aa:
f9:0b:b7:ac:2a:18:88:10:1b:18:72:bf:11:c2:c2:e4:e3:04:
64:38:03:f9:0a:62:9b:2b:1e:80:37:13:63:72:a2:9f:25:c0:
6a:2f:1e:76:98:cd:b6:ed:84:d3:20:bc:de:98:26:f1:28:63:
0f:2d:c1:be:83:6f:7b:52:21:c0:0f:4e:be:ab:c2:2a:f8:b5:
50:19:5e:06:3f:c8:28:0d:36:3c:e4:7c:70:f8:4e:d6:87:9a:
06:35:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:41 2024 by rpki-client on console-ams.rpki-client.org