Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vxdKWDO95qp4JMNAmXYtAJeIV_8.cer
File: vxdKWDO95qp4JMNAmXYtAJeIV_8.cer (raw, json)
Hash identifier: lZCa7EGzwZA0wVzr6YzvBsow7FgNDyb9p8+HBb8TG38=
Subject key identifier: BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89A8476788D8C6BBF657174672BA56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.240.0/20
Validation: Failed, certificate revoked on Wed 27 Dec 2023 08:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:a8:47:67:88:d8:c6:bb:f6:57:17:46:72:ba:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf174a5833bde6aa7824c34099762d00978857ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:eb:01:e0:d3:2f:0f:ac:69:0b:0a:9e:83:d4:
8a:7f:05:2b:90:6b:72:39:e5:53:94:e5:a9:a0:a3:
12:08:80:aa:eb:a0:a4:8c:f6:1d:66:4f:89:22:9a:
ac:1e:76:46:4b:68:63:48:9f:20:03:ea:73:4a:69:
44:9a:e4:4d:0b:b8:4a:79:21:8a:8d:25:73:f9:f1:
76:9a:28:7d:72:92:08:ed:c8:a8:f7:be:2d:d2:cc:
99:01:19:5c:ba:33:77:d3:33:13:70:c1:7e:54:e0:
47:81:74:bc:9d:d5:a6:20:57:29:69:45:f3:f2:99:
a9:6d:b0:26:2b:7e:b8:1f:02:8a:6d:5d:51:8e:9c:
b5:fc:7a:73:ce:b1:d0:e4:8d:05:bb:a2:28:0f:64:
74:05:48:4b:aa:7d:10:e0:f3:12:b6:a8:f5:5e:a1:
0f:11:27:96:1b:b4:7e:b5:78:03:7e:39:0f:4b:90:
6a:47:bc:99:1b:21:40:b0:51:04:ea:0a:49:d4:d4:
0d:92:ef:74:f6:25:9d:b4:b5:69:3b:3d:db:ac:c8:
99:6f:45:b9:b9:67:f5:fb:b7:a9:b2:ed:92:03:32:
87:0a:a9:5d:5e:8e:fa:6b:6d:08:d6:c8:92:9d:65:
74:14:ed:74:9a:bf:79:50:ab:d6:60:c2:cd:83:86:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:4A:58:33:BD:E6:AA:78:24:C3:40:99:76:2D:00:97:88:57:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/daf25c-1b49-4719-9203-3254e4d7122e/1/vxdKWDO95qp4JMNAmXYtAJeIV_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.240.0/20
Signature Algorithm: sha256WithRSAEncryption
09:9d:85:a4:e9:23:52:5f:1e:a6:a9:a5:2c:92:7d:86:a7:d2:
8b:71:1d:89:b9:db:5b:a1:d5:3e:2a:c5:f1:6b:c2:c4:ad:65:
1a:05:27:f8:a3:ee:6b:13:22:05:ee:76:e8:82:ef:15:5a:19:
45:65:8b:4d:6a:a5:4a:55:bc:d0:82:1f:37:58:68:db:ee:4e:
d5:01:17:af:e0:98:71:1e:e6:5d:51:de:2b:fc:78:cd:e2:28:
7c:0e:ca:d3:27:08:30:e3:f8:1d:1a:08:cb:51:24:ca:18:1e:
34:65:8d:59:d8:f1:c7:e0:e4:26:4b:04:34:e9:72:bc:28:e5:
dc:ce:08:09:1d:5f:bc:2c:86:6a:fc:14:33:13:40:46:dc:c7:
b2:ab:e1:85:4d:39:4e:a7:3e:bd:85:f0:4a:34:6c:1e:dd:0a:
f0:22:28:2e:6c:84:f0:71:6b:0c:f1:78:28:71:2e:a9:d3:ea:
b0:1d:bb:56:89:0e:df:1b:82:20:a3:f8:4f:9a:77:6d:20:c2:
b3:81:1a:3f:5e:c9:e1:1f:aa:75:bc:ba:2b:8d:20:d9:a9:ac:
d8:a2:af:da:f9:8c:03:a0:ea:21:7b:77:d2:a6:c9:c7:0c:0a:
1c:f6:21:10:59:45:25:b7:ec:60:45:f8:2e:fb:e1:ad:bf:5f:
41:9a:22:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:46 2024 by rpki-client on console-fra.rpki-client.org