Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rpC_Z68_k7OzfUr8WUrVfSXP3VY.cer
File: rpC_Z68_k7OzfUr8WUrVfSXP3VY.cer (raw, json)
Hash identifier: MtIZH58AA4YQQW2R0u5zwJEl0YkRsy+9EOaoZKoiAzU=
Subject key identifier: AE:90:BF:67:AF:3F:93:B3:B3:7D:4A:FC:59:4A:D5:7D:25:CF:DD:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBACE28F1FF0DDBBC34238220DE8E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/rpC_Z68_k7OzfUr8WUrVfSXP3VY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 95.130.226.0/24
IP: 2a11:8c80::/29
Validation: Failed, certificate revoked on Mon 28 Aug 2023 06:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:ac:e2:8f:1f:f0:dd:bb:c3:42:38:22:0d:e8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae90bf67af3f93b3b37d4afc594ad57d25cfdd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:4c:c7:b6:0e:f9:99:58:c1:a9:c3:78:a8:
e6:81:04:21:78:bf:fd:0e:a4:40:3a:19:68:46:66:
4c:31:87:f8:a2:2b:51:c8:5b:9f:75:42:f8:74:5a:
c4:bf:b2:a5:42:fc:30:68:0e:c2:b0:11:5b:9b:7d:
80:7b:0a:a3:d0:2f:fb:70:94:50:a3:ae:a4:7c:cf:
ec:8d:af:81:0d:07:71:d3:76:3e:b5:26:7e:20:21:
95:72:8a:98:b3:c0:09:1c:50:1b:97:db:cb:a8:c3:
ce:b4:df:40:ec:ba:99:0c:4f:51:e9:68:d9:37:c8:
db:02:dd:65:0b:80:3c:c2:d0:9c:4d:2b:16:7f:d9:
c4:c6:d3:b1:94:ff:5a:3d:19:2a:a7:2b:e5:8a:3e:
53:f4:6a:ab:e9:bb:d2:4f:70:cf:32:af:1c:76:29:
83:60:07:40:5e:a5:c0:a4:10:ea:7f:16:8d:e5:bf:
50:d3:87:e7:cc:62:fe:c9:74:13:1a:d6:85:9b:be:
0c:b0:f9:65:d9:01:b1:a7:53:d0:da:95:28:7f:eb:
6e:d0:4f:12:ba:07:e9:42:ba:c2:de:85:6a:bd:4a:
63:ea:b9:ad:97:9f:a2:92:33:c5:a0:b2:c4:2f:a4:
c6:dc:b6:2c:43:91:14:07:6d:90:6a:d3:b2:b6:76:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:BF:67:AF:3F:93:B3:B3:7D:4A:FC:59:4A:D5:7D:25:CF:DD:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/173b0a-36e4-4ed0-88ac-b01bfc60231b/1/rpC_Z68_k7OzfUr8WUrVfSXP3VY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.226.0/24
IPv6:
2a11:8c80::/29
Signature Algorithm: sha256WithRSAEncryption
0d:87:8b:6d:f6:cb:57:ac:13:02:a5:5b:50:72:36:97:25:86:
1c:a6:bf:56:86:aa:86:8a:ad:a4:04:6f:a2:2f:04:bc:b9:06:
11:cc:c3:3d:c5:d3:41:80:ac:13:d3:58:2c:c8:35:fc:30:8c:
17:50:50:11:8d:90:06:c0:da:0b:0c:d2:c4:a2:ab:aa:a8:b7:
df:70:55:0b:d1:c9:04:5b:18:19:3f:8e:11:9e:6b:6b:3b:2f:
c5:22:2e:63:42:1d:c9:19:db:06:8d:0b:b4:ca:c7:83:a8:48:
8d:47:e8:03:af:ce:44:95:4d:13:31:96:4b:93:5d:89:af:04:
ec:eb:b4:60:7a:fe:1f:32:7f:a8:8f:bc:94:bd:36:a2:7c:34:
96:1c:af:d1:b2:3d:a2:49:46:2d:a2:da:f5:64:aa:35:dd:1c:
1d:c6:44:c6:3a:fb:f7:47:be:a3:0f:b2:c0:7d:05:7f:02:4b:
84:1e:5a:1d:ca:b9:00:03:52:42:79:4f:76:1e:a0:14:70:af:
36:62:12:41:37:f7:18:c6:d2:3b:b3:6c:7a:e3:25:1d:05:55:
1e:3b:c2:2f:09:ff:6e:77:6b:16:27:74:32:a9:16:e8:3e:e0:
aa:d0:84:04:3f:da:79:18:3a:a5:09:a8:42:26:23:f1:07:26:
15:af:3c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:42 2024 by rpki-client on console-ams.rpki-client.org