Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sge3mEfSLuhW3V2s9KuekOJN5uQ.cer
File: sge3mEfSLuhW3V2s9KuekOJN5uQ.cer (raw, json)
Hash identifier: APF4bZ6VHdGuvHYPSQoiIv2qD2HnF3aYeiIz0/1VWZ8=
Subject key identifier: B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7B20AF216646DEF790B2E12346CC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:47 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.114.0/24
IP: 2a12:9b00::/29
Validation: Failed, certificate revoked on Mon 27 Nov 2023 12:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:b2:0a:f2:16:64:6d:ef:79:0b:2e:12:34:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b207b79847d22ee856dd5dacf4ab9e90e24de6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:11:1c:48:2e:44:d1:6f:c9:e4:a7:1d:9d:
65:82:8b:98:96:b0:6a:19:b5:cc:47:52:8f:66:ca:
e7:ae:7a:e7:09:e5:2e:e7:d3:b2:54:9a:bd:b0:ea:
4b:4a:c8:23:81:90:37:92:e5:36:1d:61:f3:21:0f:
5d:73:02:b9:82:19:14:3c:df:3d:c9:7b:e8:db:c2:
22:3a:43:19:e0:91:23:47:71:55:d4:cb:3e:42:43:
17:d9:24:b7:9e:be:70:8a:2c:28:13:e6:15:63:08:
c5:9e:56:fd:63:72:ce:c7:b5:01:ee:fb:53:52:6a:
17:34:bb:36:a6:57:2d:e4:42:a2:46:44:a8:fa:27:
5a:05:76:25:97:c8:c4:0d:67:8c:1d:91:22:fb:d4:
44:84:2f:63:28:19:51:d8:5d:e3:4a:54:61:e0:1b:
d6:47:cd:e8:f1:80:06:83:f9:0d:5f:de:af:48:e1:
4e:0b:3d:4a:51:d1:c8:a6:7e:46:9a:18:1e:b1:50:
8b:81:0a:a3:d9:21:34:b4:e7:44:ba:5d:23:ed:6b:
ec:bf:9c:a9:23:be:0b:6c:b1:02:eb:79:fb:09:30:
12:05:4f:bd:8f:91:a4:93:ec:c2:fb:22:18:a1:05:
c8:e3:96:91:e8:8d:da:c8:6f:09:67:28:22:06:2b:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:B7:98:47:D2:2E:E8:56:DD:5D:AC:F4:AB:9E:90:E2:4D:E6:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f8706d-4207-4439-b5cc-084a94f9c390/1/sge3mEfSLuhW3V2s9KuekOJN5uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.114.0/24
IPv6:
2a12:9b00::/29
Signature Algorithm: sha256WithRSAEncryption
7c:5c:a9:31:33:fb:c5:a3:93:00:6a:f0:12:40:f5:9b:ce:79:
50:44:d4:db:96:e2:cc:14:e5:d8:54:a0:a1:c6:d6:ec:b1:bc:
44:1e:b9:85:98:95:7c:0f:a2:7e:ba:6d:9a:64:e0:a5:29:2a:
99:1d:f3:93:d1:d1:8a:69:12:3b:fe:28:09:c7:ec:c0:0f:92:
b3:0f:f8:4d:1c:5b:03:80:af:91:e4:b8:eb:00:3a:4e:af:8f:
0c:9b:0a:92:2d:c5:68:13:b4:a0:bf:e4:94:f3:54:12:19:ba:
75:95:01:92:08:39:57:6e:07:e7:0f:7d:15:5d:d6:a7:f0:97:
b7:26:d0:16:8f:a0:91:25:0c:8b:f7:3b:5a:b7:27:95:95:b4:
5c:3e:a4:fb:64:26:0a:ea:12:45:6a:bb:fd:d7:76:33:d5:ba:
32:49:3e:2c:d7:c9:3a:0f:36:60:77:b6:ab:2a:42:33:ab:9f:
50:b2:38:49:5c:67:fb:e4:1f:3c:f3:b4:d8:00:5d:be:4b:e9:
bc:cb:ee:56:d4:dc:58:de:71:7c:49:c8:c4:95:61:1a:fb:c0:
b8:ec:89:3d:e9:b8:d3:82:1d:5e:18:69:72:d3:c5:01:39:78:
43:e9:1d:d4:2d:ab:9d:38:93:f0:cb:df:81:e9:a6:8a:78:5f:
3a:46:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:55 2024 by rpki-client on console-ams.rpki-client.org