Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XZn_uhsSljRKHKDgzVV9cX4ySq4.cer
File: XZn_uhsSljRKHKDgzVV9cX4ySq4.cer (raw, json)
Hash identifier: haS5YAYouagUD8FQVpiiUTuS5BieTY1vx+thc1rLQJ4=
Subject key identifier: 5D:99:FF:BA:1B:12:96:34:4A:1C:A0:E0:CD:55:7D:71:7E:32:4A:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D574A3CBED28E1F3C7B79F6C2F2F2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/XZn_uhsSljRKHKDgzVV9cX4ySq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:34:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.220.0/24
IP: 2a12:8800::/29
Validation: Failed, certificate revoked on Tue 31 Oct 2023 08:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d5:74:a3:cb:ed:28:e1:f3:c7:b7:9f:6c:2f:2f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d99ffba1b1296344a1ca0e0cd557d717e324aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:87:a2:8d:78:da:e4:81:ba:f6:e9:0b:0d:
77:43:a2:32:4d:e3:6d:38:6b:91:30:81:5c:5a:a8:
d1:b4:ce:81:d4:17:23:40:13:7f:5b:1f:71:db:df:
c1:8b:d1:29:ce:3c:f5:68:ea:78:66:fa:20:60:49:
a2:ee:98:58:50:c2:86:06:b8:48:9c:7a:42:01:c8:
01:ac:ed:de:bc:a9:27:a4:63:6b:12:4d:0a:75:14:
95:02:2d:50:5a:5a:34:3d:80:9b:04:a1:ee:79:42:
37:34:e8:0e:a5:2c:93:ad:84:5d:d2:7b:c4:3c:24:
fb:a5:63:19:cc:95:58:15:f2:b2:15:dc:61:50:1a:
b0:dd:f7:c9:ed:4a:d3:d9:f3:4c:03:3e:52:3f:8e:
4a:dd:62:c4:85:ea:cb:ea:4d:93:7a:3a:66:9b:90:
3d:0a:42:d1:48:11:d2:43:94:a9:69:51:0d:3e:1a:
01:d0:89:05:37:e8:8c:f3:93:ea:1b:63:2e:6b:97:
8d:8d:8c:15:15:26:53:ad:2a:8d:0a:e3:58:a8:5c:
70:6f:e4:93:d0:ee:a7:7f:c9:bb:f3:c7:25:99:ed:
e0:5e:7d:e0:96:22:93:eb:cd:47:1d:20:15:6b:43:
28:3a:4b:4e:a2:31:83:1a:85:cb:58:af:21:94:72:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:99:FF:BA:1B:12:96:34:4A:1C:A0:E0:CD:55:7D:71:7E:32:4A:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5a1562-e30b-46f6-8c99-7400bda15ff0/1/XZn_uhsSljRKHKDgzVV9cX4ySq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.220.0/24
IPv6:
2a12:8800::/29
Signature Algorithm: sha256WithRSAEncryption
ac:ea:39:1f:5a:54:1e:f0:17:e4:58:7c:55:ff:17:a8:4c:1e:
07:f9:8d:4a:ea:80:8f:11:d4:b0:26:08:7b:b4:3c:ac:b2:13:
cc:10:f8:50:9f:e8:d3:73:a8:b4:14:e8:9f:2b:05:97:d7:26:
cd:b6:0f:59:37:e6:b2:6c:2e:78:d0:5b:02:c2:93:a5:19:50:
64:26:de:67:cf:55:60:0b:44:e5:96:e6:eb:6a:a6:c9:b0:5d:
ed:96:6e:99:83:51:5d:d9:f4:a7:e7:51:5c:82:44:cf:26:42:
99:64:f8:3f:38:29:fd:5f:61:97:6a:f4:0f:f9:66:3e:70:ed:
5e:99:be:5a:81:29:3e:86:dd:9f:c1:32:1f:90:ec:df:4c:ad:
e2:d0:48:a9:68:bc:0b:6e:a3:54:8b:d1:e5:41:29:eb:8e:45:
22:22:c8:22:fc:3c:7c:04:a9:58:53:f3:52:9a:88:94:d1:7b:
8f:c1:80:77:ab:f5:25:c5:5e:3e:d1:18:a5:d8:4f:81:8d:a6:
65:7f:b9:5d:e9:e8:a1:7e:96:f8:d9:cb:18:e6:fd:23:ec:c3:
97:c1:7f:9f:e8:69:47:c3:27:30:ce:f8:f4:ac:bc:87:f8:f6:
e0:c3:7e:fb:71:9b:9b:1a:3b:89:22:09:23:0c:11:51:e3:1e:
ef:38:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:34 2024 by rpki-client on console-ams.rpki-client.org