Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y7LcaAU7KR5yk7tGNDspJc2CO10.cer
File: y7LcaAU7KR5yk7tGNDspJc2CO10.cer (raw, json)
Hash identifier: FESuL+HRUtadJ4DWtU6oCUr6fhuhAwQ0sJT/OCdX92Q=
Subject key identifier: CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD032412CB9196A55B7AC022035F7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.193.0/24
IP: 2a11:6ec0::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 06:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:03:24:12:cb:91:96:a5:5b:7a:c0:22:03:5f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbb2dc68053b291e7293bb46343b2925cd823b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:dc:ed:c4:70:8f:3e:6e:21:e4:e3:66:57:
74:d5:73:8d:07:91:19:18:a3:83:b0:99:df:84:d8:
e2:9c:e6:37:fa:51:1c:c3:25:63:57:0e:d4:da:c5:
d3:a7:31:8e:dd:4b:24:49:4c:0c:52:6c:39:27:55:
75:b8:1a:16:c0:64:55:c2:0e:a3:41:73:ae:b7:b9:
27:70:4c:58:ea:3c:96:65:b6:af:e2:10:0d:3b:04:
6a:21:c0:35:ad:7e:13:e7:7b:31:d1:80:30:d3:8c:
7e:35:82:95:e4:be:fe:94:42:e5:c2:f4:59:b4:4f:
b6:da:ca:61:51:92:af:0e:3d:d7:48:19:1a:cd:e6:
95:26:ea:ba:f9:fe:ac:25:ed:c0:38:2a:ce:26:34:
87:d1:7f:1f:16:b0:26:e1:da:fa:45:9f:5f:56:2b:
52:29:58:33:a0:a2:41:39:32:db:ed:90:1d:1c:38:
bb:4e:98:4d:b3:4e:94:02:e8:bf:01:ee:c2:b3:74:
8e:01:06:eb:6f:62:8c:5b:24:00:05:d0:17:20:e8:
9f:28:b7:d3:73:48:10:7c:5f:23:c2:08:bc:0f:34:
3a:bd:05:a2:22:5d:7b:b9:7c:41:a5:d5:c9:24:69:
a4:0b:89:53:a3:c5:7b:01:f1:b2:52:25:5c:aa:af:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B2:DC:68:05:3B:29:1E:72:93:BB:46:34:3B:29:25:CD:82:3B:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc95d6-6394-45a9-ab55-b7f5bf9fbe3c/1/y7LcaAU7KR5yk7tGNDspJc2CO10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.193.0/24
IPv6:
2a11:6ec0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:79:83:5c:14:35:0a:e7:3a:eb:dc:72:b1:a1:3f:15:b1:e0:
6c:77:a9:07:24:5e:3f:af:01:7c:10:dc:8b:ac:2c:2b:b0:0c:
8e:1d:ad:0e:6e:2f:48:c7:c1:5e:9d:02:74:35:e1:ce:7d:b8:
1d:3d:03:c4:70:85:33:65:fd:4e:f0:ba:1b:15:8a:bd:d1:fc:
d9:ce:b6:65:48:7d:df:0a:d8:da:c4:c3:a3:f0:7a:4c:3c:d0:
de:b1:75:8c:f1:f2:85:0c:fc:3d:e0:f0:2d:c9:70:01:79:ce:
8e:06:06:c2:c7:74:f6:a1:54:ca:f8:6b:c0:4a:a6:b7:4a:d5:
0e:8a:37:15:dc:70:b2:8e:ec:51:85:a9:64:15:74:2f:67:97:
90:55:00:8c:32:5d:e1:54:51:61:ab:62:93:d0:76:bc:5e:f0:
4c:5c:0f:e9:bd:e1:43:f4:c4:de:11:7c:4a:5e:c5:34:6d:24:
4a:f5:fe:9c:25:a4:59:aa:6d:ac:76:25:06:8b:23:b4:1e:fe:
13:8c:1e:da:de:29:b7:c6:70:6a:c9:a7:48:7e:c5:cb:b7:e3:
52:86:42:30:dd:d5:9d:5d:05:6b:33:c9:65:8e:c0:48:08:e6:
1a:e2:00:68:d7:87:a0:10:ff:8d:c1:d0:c4:79:b2:92:22:0b:
0c:1d:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:05 2024 by rpki-client on console-fra.rpki-client.org