Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rvY0rF4LWiBMhBBoE3WDZhoYZYE.cer
File: rvY0rF4LWiBMhBBoE3WDZhoYZYE.cer (raw, json)
Hash identifier: ONFb3PeRh7dh+/LANKaVdKa7yY/A5qfZ8WhsqJEGl6c=
Subject key identifier: AE:F6:34:AC:5E:0B:5A:20:4C:84:10:68:13:75:83:66:1A:18:65:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F3BEB04EEF6D1474B1A70F49336DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/rvY0rF4LWiBMhBBoE3WDZhoYZYE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 95.130.224.0/24
IP: 2a11:8980::/29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:3b:eb:04:ee:f6:d1:47:4b:1a:70:f4:93:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aef634ac5e0b5a204c841068137583661a186581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:7a:08:cc:8d:5d:f4:1d:a9:f0:57:54:54:
ef:7f:8c:cb:44:c4:0d:4d:4b:e3:e7:8b:cc:4e:c9:
f0:c0:96:af:e7:5a:84:6c:14:1a:d4:43:0e:48:8a:
d3:2e:d9:66:51:43:5e:c0:66:7c:d3:59:80:0d:a6:
a7:60:33:8c:cd:aa:a3:5c:a6:0c:b9:08:e7:e8:77:
b9:8f:74:7c:3a:af:4d:2d:b9:bc:00:1c:da:4b:e2:
3f:9b:f6:62:a9:e5:84:2a:4b:d7:94:f4:2a:de:ca:
f1:a1:a9:fd:94:3f:a8:d6:bd:31:99:86:e5:a7:bd:
89:dc:59:fd:69:39:77:13:f8:30:77:df:7e:07:4b:
64:0f:e4:57:8e:f0:8c:20:d7:c4:b9:51:cb:85:9f:
c3:26:34:e0:ae:b8:c2:49:ea:4d:fe:3a:48:ef:c7:
75:84:80:9e:0f:86:40:64:fc:25:a4:b1:84:14:ba:
2d:4b:5c:c9:fd:08:3c:58:e9:fd:7b:af:2d:e2:9f:
8a:93:5a:07:e9:2e:28:e0:dd:fb:fe:a9:28:1e:19:
c5:76:b5:89:81:68:24:0d:08:1a:fb:8d:d3:77:33:
b6:a7:ad:de:73:f3:59:ba:f7:36:32:68:75:ba:52:
2c:0e:94:4c:7f:1c:77:81:e0:88:5a:15:40:9a:55:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F6:34:AC:5E:0B:5A:20:4C:84:10:68:13:75:83:66:1A:18:65:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dc8aa8-720d-4bfb-9beb-3b2596205881/1/rvY0rF4LWiBMhBBoE3WDZhoYZYE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.224.0/24
IPv6:
2a11:8980::/29
Signature Algorithm: sha256WithRSAEncryption
12:25:fe:7e:bd:ed:31:8f:13:22:14:88:82:12:8a:b3:3e:c1:
85:5a:c7:68:e1:da:33:d6:78:46:dc:4b:b4:3f:b1:07:7f:b0:
41:c3:61:03:b1:b8:84:33:d7:9d:e6:26:01:c1:ad:7b:74:c2:
11:7b:0f:43:5f:94:71:e0:d3:1d:f4:ac:e3:7c:94:d8:83:9e:
51:aa:dc:28:77:b2:ae:05:e8:bc:21:78:6a:ee:2c:90:95:85:
fd:f9:4a:a9:50:1d:97:86:bc:4e:68:6f:0e:e8:71:d0:5d:c6:
2c:41:34:29:5e:72:50:e1:37:59:5d:91:b3:f0:db:50:89:d1:
9f:16:90:7b:bb:50:d0:b5:c9:29:0a:d3:08:6a:74:7a:81:a4:
2f:f2:26:c9:24:a7:04:47:37:90:f5:49:a6:8d:5e:84:69:67:
04:99:d1:86:e6:e3:60:60:e9:3f:22:49:65:2e:de:48:d0:74:
ea:d5:88:67:5b:f3:8f:2c:8c:8f:34:c6:c7:65:80:0d:11:46:
c0:4a:2a:5c:1f:a6:be:f8:fe:df:02:cc:71:4f:90:bc:86:5b:
8a:b1:a5:84:71:b7:6b:ad:82:eb:f3:14:9b:9e:92:fb:61:22:
1c:3e:77:d7:1c:0e:e7:5c:b1:9b:31:d8:74:86:66:9b:7f:d0:
d4:32:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:44 2024 by rpki-client on console-ams.rpki-client.org