Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tqIuQRRw09otcHxg8o9tXSEPpmg.cer
File: tqIuQRRw09otcHxg8o9tXSEPpmg.cer (raw, json)
Hash identifier: bkh0g4vHXMnsVjds9JuNzFFjquLhjhcWjZOQMeZemcA=
Subject key identifier: B6:A2:2E:41:14:70:D3:DA:2D:70:7C:60:F2:8F:6D:5D:21:0F:A6:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4F1B3F3CD10907CCDBC812AC00FDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/tqIuQRRw09otcHxg8o9tXSEPpmg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.41.254.0/24
IP: 2a11:3180::/29
Validation: Failed, certificate revoked on Fri 18 Aug 2023 07:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:f1:b3:f3:cd:10:90:7c:cd:bc:81:2a:c0:0f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a22e411470d3da2d707c60f28f6d5d210fa668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:fb:40:09:15:bc:b4:01:24:77:0d:e9:1f:
d8:c4:e0:d4:49:6b:d9:1d:68:5e:08:ad:9d:d3:40:
11:12:31:d4:5e:ac:6d:09:cf:9a:0c:a2:a5:e5:9d:
02:16:07:f4:dc:79:03:59:a0:3a:ba:59:22:f9:73:
dd:cb:0f:db:30:a0:ad:3a:f5:32:d0:d0:e0:9e:80:
dd:ab:39:da:f0:cd:15:6b:fd:eb:f1:58:83:c6:8c:
21:22:59:17:50:0c:40:25:09:2f:95:20:17:e8:09:
98:92:3b:a8:6e:ae:02:d9:e0:d4:01:6a:5b:ba:2f:
e8:12:ca:a8:4a:5f:1d:c5:30:b6:7b:22:60:3b:2a:
52:a7:25:6b:dd:47:5c:66:b1:f6:a1:45:89:72:d7:
26:bf:36:32:96:70:f0:a8:4a:72:c0:88:a4:77:f5:
2f:76:d8:22:66:e1:85:86:30:2b:9d:e7:fb:e5:f6:
7d:fa:b0:0e:f6:17:08:6f:f1:d6:fc:bd:ed:d5:8e:
2b:9d:78:08:5e:ca:8e:62:01:59:1e:cc:94:f0:84:
63:f5:97:70:6f:09:6c:ee:61:2e:9d:a3:ab:70:5a:
60:79:79:4e:84:85:8a:32:15:68:2f:e7:89:73:0f:
b7:87:43:ed:b9:c3:63:61:68:6e:cb:ae:79:c0:c2:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:2E:41:14:70:D3:DA:2D:70:7C:60:F2:8F:6D:5D:21:0F:A6:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f2dc2a-bf3b-444f-97fa-5ca0cb3656c4/1/tqIuQRRw09otcHxg8o9tXSEPpmg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.254.0/24
IPv6:
2a11:3180::/29
Signature Algorithm: sha256WithRSAEncryption
83:6e:0b:84:54:ca:d4:7e:93:82:c4:12:5f:14:12:de:fd:43:
70:6a:b4:45:2e:ed:92:2d:29:49:ff:22:ca:bf:86:2b:a7:08:
03:42:22:a3:19:3d:25:26:70:33:ee:54:45:51:07:ea:30:5a:
e0:06:b2:5b:da:55:32:9b:5f:9a:b1:12:60:2f:a1:fa:c7:ff:
32:b8:59:f3:6c:f5:1f:94:98:04:45:90:d3:be:31:25:36:52:
2a:bc:fc:66:7f:2b:23:6d:7b:4c:d3:08:19:01:ad:54:7f:ba:
a4:c0:f3:e4:02:cd:92:64:ee:07:ac:31:f4:1d:2c:8a:29:30:
f9:fc:7f:a6:22:85:7b:42:e4:fe:f2:f7:f9:ac:89:8c:c1:7b:
17:a4:34:b1:88:c5:db:3c:aa:89:89:91:f5:80:d6:c1:28:41:
a3:89:bd:2a:b3:4c:ac:f5:55:56:47:82:00:ec:89:3e:74:bb:
86:51:51:5f:05:e1:c1:b1:d2:73:1f:57:42:4e:d5:7a:bc:0e:
ea:f3:a1:52:34:99:44:9d:b5:d0:3c:44:d8:b5:4b:09:6d:62:
b7:a5:a5:54:e6:76:b5:ac:f7:94:54:02:40:53:94:80:5f:4c:
a8:55:bf:82:a4:d9:22:8c:2e:22:ae:4b:a3:0e:56:1b:0c:e0:
01:9a:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:09 2024 by rpki-client on console-ams.rpki-client.org