Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
File: rs3YvuJLNCsDnWEM48DAxHGaO_k.cer (raw, json)
Hash identifier: G5COOaakUO3Zg/wlsd9xh9EJtHPiO/zLJlVF7qqZM28=
Subject key identifier: AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01877EBA1CBC519C6F1F43FF72554B92D374
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/rs3YvuJLNCsDnWEM48DAxHGaO_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Apr 2023 07:45:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.135.0/24
IP: 2a13:fe80::/29
Validation: Failed, certificate revoked on Mon 23 Oct 2023 08:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:ba:1c:bc:51:9c:6f:1f:43:ff:72:55:4b:92:d3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 07:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:97:b0:b0:dc:a8:42:49:6f:fc:f6:4b:81:
c8:1c:4b:57:94:2f:a3:62:a3:3e:be:e8:2e:b7:16:
2a:55:b6:65:cb:aa:85:ec:5a:42:28:1b:64:cf:58:
db:b2:fc:40:de:e5:3d:aa:d9:e3:40:d2:1e:fd:5a:
2a:e8:f7:2f:0c:af:34:8d:2a:61:8b:a7:4b:1c:b1:
ca:08:95:51:e3:03:f0:c1:ac:1c:17:e3:71:01:8a:
1a:03:06:39:3e:21:27:25:0d:eb:6e:94:28:fc:88:
d0:df:6e:22:8f:6b:5a:c7:1b:62:51:26:d3:f7:86:
77:64:ea:b4:76:4a:80:d8:ff:7d:b2:7e:07:c5:47:
dc:31:74:7e:bf:ab:57:b7:a7:ae:34:38:d1:0c:b6:
a8:94:69:f3:94:89:ba:20:ea:81:a3:79:83:2c:3f:
7d:0c:b7:b2:91:44:38:51:90:da:a5:ea:b5:f4:c4:
93:b7:4d:9d:da:32:50:9e:c8:02:a8:4a:90:a7:45:
e5:bd:a5:8c:1b:8f:3d:63:32:74:47:9b:99:9d:62:
90:d7:7d:1c:c8:22:3a:58:d1:a9:0c:d2:31:fd:e3:
8f:4d:89:d8:1e:ce:b3:86:ea:34:3e:43:35:51:c9:
b5:64:67:0f:dd:ea:18:4a:3d:99:f0:0a:2b:28:75:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/rs3YvuJLNCsDnWEM48DAxHGaO_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.135.0/24
IPv6:
2a13:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
ac:b9:4e:aa:5d:a2:6f:b2:57:d0:ea:c8:e2:74:70:65:dd:f3:
3d:1d:d3:e6:47:95:37:48:e6:82:bf:51:3e:b9:46:91:4a:9b:
13:04:69:25:62:ef:db:38:ac:88:f1:82:bc:68:23:91:99:d1:
63:09:1e:53:90:3a:fe:4c:bc:b7:e3:5a:97:59:97:da:96:01:
7d:eb:66:dc:12:aa:ed:62:d8:2c:a7:64:a8:16:1d:5e:97:e6:
57:7a:0d:b1:fc:62:44:b7:27:42:ca:5f:5d:52:c2:00:74:82:
c3:f3:71:5d:7d:98:60:1a:46:d4:8c:5d:3c:aa:83:b3:91:4b:
e9:a7:aa:46:76:d3:d2:17:2f:a6:0e:1a:2f:8d:ee:0f:0f:7d:
f7:8d:de:5e:87:1c:98:b3:dd:d3:24:16:94:8e:e0:b7:79:f8:
22:03:c5:9b:cf:bb:fa:7b:cb:f0:98:0e:2f:5c:06:6f:04:8b:
9f:c8:a4:ec:e4:2c:18:bb:e6:17:2e:1f:88:ba:90:a8:05:2f:
4c:a7:f2:55:b7:67:6d:43:67:a4:c3:5e:a6:79:7f:06:c6:5e:
b8:8f:ce:f6:a5:6a:1a:ed:19:bf:78:f3:99:57:95:16:4a:ea:
06:6d:db:82:c3:7d:ce:7d:73:95:c8:ab:80:bd:43:7d:7e:3f:
00:fa:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:07 2024 by rpki-client on console-fra.rpki-client.org