Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/siNtxIRLnnNKU6cDTorcNQyrlQo.cer
File: siNtxIRLnnNKU6cDTorcNQyrlQo.cer (raw, json)
Hash identifier: 7+J589FfG+aJ81OXAm0L/dEFzhvGCIgvghoYHGuwZOg=
Subject key identifier: B2:23:6D:C4:84:4B:9E:73:4A:53:A7:03:4E:8A:DC:35:0C:AB:95:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D66E587592C865B579F0DD2070ABF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.32.152.0/22
Validation: Failed, certificate revoked on Fri 22 Dec 2023 12:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:6e:58:75:92:c8:65:b5:79:f0:dd:20:70:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2236dc4844b9e734a53a7034e8adc350cab950a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:d8:4b:9f:d1:b0:0f:8c:a4:af:d8:94:ed:
85:74:ce:c5:77:b3:ba:35:a7:42:e4:d7:7d:b3:7e:
85:29:e3:3c:3f:45:8a:34:67:92:fb:07:21:33:0d:
c2:91:58:ff:74:45:45:18:f1:2b:cc:8b:98:3e:eb:
4c:4a:49:8e:a5:bd:a3:fd:36:0d:d1:f8:df:67:35:
8b:d4:81:86:3a:09:33:b3:d1:1f:98:15:e1:1b:00:
f7:48:a3:6e:1d:e5:0a:45:2d:c6:0d:ec:14:07:5b:
b6:ad:59:6c:6c:86:30:68:60:69:2a:5e:16:03:ec:
9e:95:26:10:70:ef:78:c3:b1:98:05:a6:31:95:d7:
c1:e3:d1:83:01:2c:08:91:e0:8c:40:91:0a:2a:89:
be:7b:03:89:85:54:63:53:e2:6f:c5:61:c2:f5:1c:
ea:09:41:d0:14:d7:d8:d7:d8:0e:3e:30:16:67:82:
0a:8f:c2:ed:27:30:f8:a5:32:87:ef:d0:59:f2:fb:
f0:83:40:50:fc:eb:86:43:0a:ab:6b:ef:d7:9c:d7:
17:70:77:07:f6:be:c1:61:3a:75:ae:a6:82:8e:bc:
78:56:5f:6f:4a:08:f0:b7:2c:e8:1a:45:b8:f3:f4:
b4:9e:a1:95:60:99:df:8f:e8:67:89:bb:8b:d7:fe:
56:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:6D:C4:84:4B:9E:73:4A:53:A7:03:4E:8A:DC:35:0C:AB:95:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b64405-e6f6-422d-9037-cc15689e1fb1/1/siNtxIRLnnNKU6cDTorcNQyrlQo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:c3:6e:1a:a8:a8:47:d8:df:82:f7:05:5d:b0:39:04:21:b4:
6a:40:80:bb:c1:80:47:af:55:b5:d9:f8:37:34:1a:e1:bc:69:
23:66:b2:9d:d6:b7:69:c9:f9:eb:42:e2:c1:ba:25:5b:85:25:
bf:4e:82:53:4d:3b:bf:cd:0e:06:d9:88:ee:09:bf:10:97:02:
5b:50:15:37:6d:ed:72:68:10:ac:b8:40:3c:c5:87:b0:29:5b:
85:35:05:3e:f9:85:a4:be:6f:1d:8f:8a:1a:7a:61:61:23:b2:
1c:94:f5:fb:d9:ba:a5:11:2c:ef:d6:9f:16:01:64:9d:14:85:
53:0b:4a:87:5d:23:4a:64:11:af:14:97:f6:b4:5f:cf:d3:b3:
49:46:59:da:13:93:83:07:0b:eb:93:86:14:25:12:ea:0d:e3:
9b:aa:c4:37:59:53:ba:fd:98:be:e9:17:8a:a7:f0:82:77:ae:
0d:e4:3c:61:6d:b9:3d:74:7b:a9:41:ea:43:73:fd:e8:f0:20:
56:2c:5e:71:1a:b8:f8:11:e5:69:5a:80:82:6e:ab:42:11:83:
65:9c:5b:18:51:90:41:9d:52:88:f1:f9:f0:d6:8d:d5:70:43:
62:2e:d4:bb:3e:db:28:8e:13:52:ed:e0:40:1c:85:73:ca:b6:
e1:86:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:55 2024 by rpki-client on console-ams.rpki-client.org