Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHMl8umqnYov78QR18fzT4bYS9Y.cer
File: sHMl8umqnYov78QR18fzT4bYS9Y.cer (raw, json)
Hash identifier: 3t2PjDFDaMwHla4tw02Y4LRqZCsFMjMe8UGt8mS+x2g=
Subject key identifier: B0:73:25:F2:E9:AA:9D:8A:2F:EF:C4:11:D7:C7:F3:4F:86:D8:4B:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708B2D3B2F6A637FA25AE8839CFF2293
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/sHMl8umqnYov78QR18fzT4bYS9Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.211.80.0/22
Validation: Failed, certificate revoked on Fri 27 Oct 2023 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:2d:3b:2f:6a:63:7f:a2:5a:e8:83:9c:ff:22:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b07325f2e9aa9d8a2fefc411d7c7f34f86d84bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:69:25:89:d5:72:66:19:13:a7:e6:68:08:
3a:c5:3a:f4:fe:df:02:e0:d6:fe:fe:23:fa:3b:cb:
ec:39:55:c9:87:f6:c0:a6:01:52:2d:71:c4:5c:27:
04:f4:df:d2:c1:78:74:7e:3a:f5:60:09:00:85:69:
0e:c8:13:38:cb:2a:02:4d:af:e2:02:1e:65:b8:1c:
78:64:20:f5:2f:38:86:10:0a:55:18:a2:75:b5:d0:
e3:f2:67:67:1f:d3:8f:57:f4:ea:86:c3:92:5e:43:
a4:94:f3:6d:e8:1f:29:0b:2f:d2:62:68:ec:3a:d4:
59:a1:21:34:c9:8e:f5:1d:46:0e:22:b7:45:86:b2:
08:db:04:c3:82:47:c1:1e:af:13:6f:49:5c:10:c3:
6a:23:ec:8d:45:bf:99:ce:7b:a9:01:f2:39:6a:17:
93:52:b2:73:4a:21:8e:fc:8e:48:b3:91:db:a7:a9:
82:2f:0d:1e:e7:92:93:1d:78:48:b1:66:cc:20:40:
64:01:7f:1a:e3:c6:13:26:49:c6:d9:cd:d5:b5:0f:
a2:b6:b8:1f:7b:f1:67:fb:e7:eb:19:6b:cb:19:21:
62:cc:e7:79:fa:34:ed:91:5b:e0:a9:84:ef:05:27:
29:5b:c2:07:d2:ec:05:c6:ee:c8:58:9b:8c:03:95:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:73:25:F2:E9:AA:9D:8A:2F:EF:C4:11:D7:C7:F3:4F:86:D8:4B:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/sHMl8umqnYov78QR18fzT4bYS9Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.80.0/22
Signature Algorithm: sha256WithRSAEncryption
52:07:e8:d2:b7:d2:01:b3:62:c1:72:3e:06:6e:8a:8d:21:63:
3c:17:5a:87:5a:8c:68:ab:99:49:bb:5b:8b:f7:bd:ed:b1:d1:
2a:4b:be:26:a0:92:79:2e:8f:ae:ff:9c:c3:d5:14:00:54:97:
8b:2a:77:61:2d:6f:65:c5:39:49:bc:3d:35:d0:5a:1f:af:35:
6a:01:f4:43:5c:22:c2:79:b5:4b:bb:45:d7:96:d0:23:d8:0d:
77:54:82:83:a9:29:47:65:bc:58:1a:20:e9:ec:8f:d3:65:45:
ec:dc:41:4c:08:f5:cb:06:c4:01:65:e0:09:b7:8b:5f:92:ef:
6b:2d:92:26:17:79:81:1d:fe:3b:ac:af:1b:e6:a5:70:40:4d:
12:92:56:32:5b:94:e5:ff:2b:06:04:d0:a7:0a:e9:1d:7c:58:
f8:e6:45:f0:de:75:9a:ac:dd:a3:b5:41:d9:87:c7:4a:56:b8:
fb:5e:f4:9e:41:40:f8:58:b2:e3:f0:a1:41:04:db:1c:f7:c3:
aa:58:e9:30:48:e2:13:81:94:27:0d:d1:7c:aa:33:ff:3a:f9:
d9:eb:d8:7a:4b:df:a9:ce:61:d4:ba:b3:21:f8:22:d2:1a:30:
02:ba:d7:b5:ce:38:fd:ae:6f:83:6f:b7:97:eb:30:48:83:6e:
b0:61:8b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:49 2024 by rpki-client on console-ams.rpki-client.org