Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sJLesCvkw3gUsADmaBiUwmGnz9A.cer
File: sJLesCvkw3gUsADmaBiUwmGnz9A.cer (raw, json)
Hash identifier: OCLIT7IueLu8u56sZ5VeKcQFaitYhvIrMLxQc39iD4o=
Subject key identifier: B0:92:DE:B0:2B:E4:C3:78:14:B0:00:E6:68:18:94:C2:61:A7:CF:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89928689E5B1E09CFED0AA5B63CE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/sJLesCvkw3gUsADmaBiUwmGnz9A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.71.159.0/24
IP: 2a11:3fc0::/29
Validation: Failed, certificate revoked on Fri 13 Oct 2023 07:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:92:86:89:e5:b1:e0:9c:fe:d0:aa:5b:63:ce:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b092deb02be4c37814b000e6681894c261a7cfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:7c:87:27:13:be:44:ca:dc:be:74:0a:8f:
d7:44:d0:d1:1b:98:2f:2d:6d:aa:17:37:a7:c3:59:
56:f6:4f:07:d6:cf:0f:b9:7b:de:9b:72:bc:0d:48:
6a:47:ed:e6:cf:85:ee:22:ab:96:01:c1:a5:88:7b:
f9:13:e6:41:cb:8f:2b:0d:bb:3e:59:a5:23:15:d4:
d5:d3:ed:c2:81:6d:76:83:15:94:d4:53:70:dd:47:
6b:ac:77:df:34:b2:01:35:2b:ad:ff:4d:b6:fb:00:
4b:2b:e3:1e:15:a6:12:2c:70:a4:dd:28:f5:bd:4c:
86:67:2a:60:65:f8:f3:5f:83:ab:fd:bc:52:c1:59:
ca:00:9a:24:e5:63:93:6d:bb:b1:7d:e9:3d:2d:44:
1c:00:47:3f:6c:9f:9e:ae:8a:83:c9:1d:c4:8a:84:
ac:07:08:2a:54:20:88:31:aa:1f:82:4f:1e:92:af:
94:15:e6:e0:a3:13:0b:84:35:d2:e9:8f:db:16:7e:
02:8c:0a:db:33:64:dc:cb:fc:54:f3:67:d4:e4:00:
bf:2c:a1:6d:40:b9:d3:ae:b0:61:d5:4b:84:de:60:
a7:c6:6b:9a:7b:33:54:e7:bd:66:7d:36:47:61:23:
3d:32:5f:15:ab:ce:5d:89:5a:e0:c7:31:15:a6:16:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:92:DE:B0:2B:E4:C3:78:14:B0:00:E6:68:18:94:C2:61:A7:CF:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6d7cb1-d86e-4a58-bf5c-23b211755249/1/sJLesCvkw3gUsADmaBiUwmGnz9A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.159.0/24
IPv6:
2a11:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:d9:2b:d4:cb:06:0e:97:51:e0:e2:78:7d:32:86:85:28:e7:
e9:f2:ae:f2:a3:6a:b3:2b:1c:69:9b:73:6f:08:ef:87:d1:f1:
8a:8a:34:4f:01:73:e8:e3:59:fc:40:3d:c0:30:a3:fe:86:7a:
30:6b:3e:85:3f:f2:09:4e:c4:13:a3:34:5f:5e:7a:68:aa:29:
40:9b:c2:f6:eb:a6:82:24:2c:d8:ab:f6:72:fe:cc:f1:b1:74:
2e:cd:a4:44:4d:6e:4b:64:46:d9:41:33:a7:0a:09:98:1f:ca:
1c:75:24:74:ce:bb:38:9e:37:42:4b:f0:0e:e2:2c:9a:f2:7b:
cf:27:36:0d:59:bc:44:44:90:af:ba:52:88:90:09:39:e1:3a:
75:11:53:0c:8b:65:28:92:36:e1:17:e8:15:42:71:fc:75:44:
94:2e:2c:17:0d:fa:70:17:7d:e6:7c:35:5c:24:2c:3e:3a:23:
39:bb:4f:bd:02:77:b6:9a:c3:60:71:38:76:54:8b:8f:07:59:
97:e4:9c:e8:85:71:a2:76:21:db:40:14:5f:d8:58:96:dc:25:
d5:b2:8a:62:32:58:41:c0:c3:ae:4b:75:c0:fe:d6:25:ec:1d:
71:ca:0a:c6:5e:1d:73:69:a8:cd:5c:d6:88:4d:81:f3:38:30:
b5:35:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:50 2024 by rpki-client on console-ams.rpki-client.org