Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xjMA8c9R4j99jk2pKfOW1qTpD_g.cer
File: xjMA8c9R4j99jk2pKfOW1qTpD_g.cer (raw, json)
Hash identifier: XPD/ZtvH7NhcMRBu1Il014wbuI9VM8T2lKdDFJJnwTk=
Subject key identifier: C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF0A4ECFC50DAC7B5C802C9AFFFDAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.244.125.0/24
IP: 2a11:4f40::/29
Validation: Failed, certificate revoked on Mon 02 Oct 2023 06:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:0a:4e:cf:c5:0d:ac:7b:5c:80:2c:9a:ff:fd:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63300f1cf51e23f7d8e4da929f396d6a4e90ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:55:b5:bc:c1:91:43:a8:69:6e:d1:d6:41:
68:30:56:00:a0:c8:29:7d:a2:5c:17:5a:96:a6:81:
a0:fa:4a:40:18:a0:64:47:77:5d:ea:73:39:38:94:
b7:f5:97:40:12:d3:3d:43:bf:d6:5d:59:fe:67:60:
bf:30:6c:e5:37:dc:8f:b5:d0:db:b2:d8:a3:58:24:
91:09:41:19:31:d6:ec:ea:e4:61:3b:02:6c:fb:4d:
1c:db:d5:f2:dd:15:3d:86:23:45:ab:ef:4d:47:fa:
1d:01:d9:9a:a7:20:e3:c6:0a:0b:4a:c2:cd:0d:b3:
f1:a7:05:b2:d9:54:19:84:07:f8:e1:df:12:3e:31:
ef:95:c7:3a:1c:d7:84:54:65:f6:a4:d7:b7:90:4e:
b7:9f:9a:e4:d5:08:aa:d1:9d:ab:30:b9:00:f5:8b:
1c:0b:09:df:1c:8a:d1:9f:65:ad:ce:04:5a:42:9c:
85:42:3f:8f:b6:14:4b:3e:f2:7d:b4:f4:9e:af:89:
97:07:71:dc:28:56:c9:28:2a:2f:65:6d:ea:21:25:
b9:73:6e:d5:27:6b:31:80:c3:c5:81:8a:2d:9d:15:
03:6c:a7:84:e6:6a:e5:d6:58:11:a1:6b:3c:e3:2f:
82:28:b0:96:7d:e4:bc:7b:1a:e0:c1:b1:29:de:49:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:33:00:F1:CF:51:E2:3F:7D:8E:4D:A9:29:F3:96:D6:A4:E9:0F:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a3b5a0-89da-4ff8-b0c8-bc2ab2842481/1/xjMA8c9R4j99jk2pKfOW1qTpD_g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.125.0/24
IPv6:
2a11:4f40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:54:4b:d9:17:b4:6d:47:4f:57:62:a8:07:de:cf:fd:f4:0e:
60:04:4d:c3:82:55:5f:52:ab:3d:d0:86:8c:e1:33:18:68:e0:
b0:a9:2b:2c:e5:92:08:10:b8:4d:02:6a:1f:2e:ca:55:8d:34:
b1:59:19:0f:79:65:8a:67:44:89:80:c1:e7:56:e4:bc:30:90:
46:cc:96:f9:18:38:7d:d5:04:14:a0:21:be:97:31:cf:61:f7:
94:1e:a5:23:8e:e4:c9:c0:a5:3c:62:d9:fd:6a:10:a5:8f:71:
e3:2a:e5:ef:39:19:b4:8d:8a:7a:4e:10:54:5f:76:fc:4e:48:
7c:8c:e0:e1:41:56:bb:8d:42:20:fb:2e:35:5f:52:6d:9f:ee:
4b:42:3e:36:2f:c5:0f:38:e6:eb:97:7e:91:d7:be:ff:39:77:
4d:1b:26:8e:0d:2a:c0:02:d0:ff:5f:93:fe:29:62:e3:07:f1:
e5:b6:ff:fa:dc:02:f3:dc:33:7b:b1:41:be:43:dc:b4:ec:65:
66:9b:43:95:2f:b5:74:76:cb:6a:f9:2b:11:9a:fa:88:d4:80:
5e:30:e9:3e:e8:71:a0:e8:f4:dc:95:be:a1:a7:9a:48:54:55:
0d:a0:eb:d8:2e:8e:19:18:30:12:24:a1:1b:84:69:9e:b0:f1:
02:54:4f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:12 2024 by rpki-client on console-ams.rpki-client.org