Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer
File: xDJWqBkR0TzYDFNnPgUX_yJcbQg.cer (raw, json)
Hash identifier: hET/y6CpUfNoc6cK9AqIWSU3KTnpGxg/2WalJ4gy+NY=
Subject key identifier: C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0F7F9C4511BE6691BE2ECA4288EEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.228.224.0/23
IP: 193.239.146.0/23
IP: 2a07:3380::/29
Validation: Failed, certificate revoked on Fri 16 Jun 2023 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:f7:f9:c4:51:1b:e6:69:1b:e2:ec:a4:28:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43256a81911d13cd80c53673e0517ff225c6d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d0:e8:ac:09:9f:39:4e:82:9d:19:de:66:74:
79:a6:0a:82:d4:54:1f:ab:f0:a9:8b:46:80:2c:81:
31:27:93:a1:fc:18:ed:d5:06:11:cb:78:ae:4b:f4:
ad:67:87:a3:3f:19:d1:97:58:7f:7d:7c:ef:2c:04:
9b:19:44:6f:11:b7:d6:3f:b8:81:a8:29:4f:f0:56:
a8:02:c8:40:b0:ec:86:6a:dd:d9:c5:b6:9f:7f:4d:
82:ca:86:d6:ef:4d:a3:69:d5:dd:9d:ed:30:3d:7e:
2d:97:50:35:7c:12:fa:d4:40:8c:40:22:6a:ca:f6:
be:d9:b4:1e:25:94:84:a8:7e:75:00:5e:b4:d8:ea:
34:b9:85:32:4d:61:1d:fa:2b:e8:af:11:2d:93:ba:
b6:8c:5c:1d:e6:4f:f1:37:5d:f7:12:bc:d0:b9:1b:
f6:af:7f:c2:cd:4f:a3:8f:19:81:fa:ed:46:1d:f9:
08:eb:1e:85:a6:ce:46:c3:14:68:3c:b7:aa:6f:6d:
1a:dc:af:5d:3b:04:0b:50:07:f7:44:8a:ae:df:97:
f8:cf:46:1a:13:38:e9:81:21:59:16:7a:ab:39:5b:
cf:c0:f6:4f:4f:2e:67:76:44:cd:b4:1a:62:38:34:
8a:84:8c:83:fb:be:5d:34:db:0f:4f:5a:49:b4:01:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:56:A8:19:11:D1:3C:D8:0C:53:67:3E:05:17:FF:22:5C:6D:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f5d3fb-c8c7-42e4-9ff8-6018faf464fb/1/xDJWqBkR0TzYDFNnPgUX_yJcbQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.224.0/23
193.239.146.0/23
IPv6:
2a07:3380::/29
Signature Algorithm: sha256WithRSAEncryption
9b:3b:f1:da:4b:b5:d0:27:45:0b:1b:f4:84:34:13:09:0c:ac:
6c:c3:59:03:36:e8:35:72:3d:07:b6:d0:87:e5:02:b4:dd:9f:
9b:d9:8c:74:8c:c5:1b:68:73:25:88:10:b6:63:bc:b6:a5:a2:
2b:77:6c:c1:69:eb:b2:03:7d:34:a0:a8:00:39:89:67:74:27:
21:d8:67:fa:9c:28:7e:84:b3:8a:76:1d:47:f0:45:a3:6f:ae:
e8:77:fe:de:57:b4:80:ff:91:5a:eb:70:8c:5c:e2:86:02:8a:
76:eb:97:59:8c:36:44:de:88:68:59:8f:f3:af:5a:c6:6e:8d:
fb:3f:38:3b:2c:e9:b9:ef:b4:e2:00:03:f8:d6:af:aa:c2:19:
a9:9c:03:fd:d5:3c:9a:76:4c:20:bf:f9:41:f8:a8:79:1e:1b:
3f:bd:e2:02:4e:29:8b:98:d9:28:13:64:fd:bd:85:c1:26:6d:
f2:41:da:eb:b4:bc:c4:41:95:59:86:cc:88:4b:07:f7:ec:e7:
d9:4d:90:4b:14:77:ff:b9:66:16:4a:e0:0d:1f:33:a4:87:0a:
02:e1:b4:c5:bf:7e:40:85:05:22:c7:d1:35:ce:b9:f5:9e:eb:
18:c1:ce:5c:8f:0b:44:11:5d:ba:01:b6:b9:cd:b6:f4:bc:ce:
aa:70:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:02 2024 by rpki-client on console-ams.rpki-client.org