Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-xG9XERMI5wZh3bzYODxAMm12AI.cer
File: 1-xG9XERMI5wZh3bzYODxAMm12AI.cer (raw, json)
Hash identifier: KaGzAXakORknfHg3HtWrj1w43BBDvOYUBZZ2dxtQnTY=
Subject key identifier: FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD12C3509973EE9C545F55D0D150D2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.211.0/24
IP: 2a11:dc40::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 14:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:2c:35:09:97:3e:e9:c5:45:f5:5d:0d:15:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb11bd5c444c239c198776f360e0f100c9b5d802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:d7:b0:cf:96:bc:8c:d5:1d:f9:38:f2:cb:
c0:c3:06:aa:4d:78:15:86:f7:cc:a1:36:31:7f:6e:
ca:30:32:c8:a5:ed:4b:64:10:2e:28:5d:68:16:c7:
00:d8:dd:86:6b:23:bb:9c:85:9c:f0:41:eb:9f:ac:
be:64:09:f4:14:f5:64:16:57:89:d0:8a:f5:ae:19:
02:83:f6:03:bf:f5:cb:4a:90:ee:7b:10:b2:60:8f:
2e:ad:0a:d8:e8:5b:bd:4e:db:03:8a:71:cd:ee:09:
6c:c3:38:a9:e2:5d:0d:67:ca:20:31:e1:c6:cc:76:
c9:36:2b:28:0d:53:58:d0:d0:4d:36:d5:f0:8a:51:
cb:a8:c4:4a:97:58:85:28:09:db:92:e6:67:23:77:
0b:be:e5:4c:41:34:fa:63:59:6b:ea:68:16:fd:80:
f5:79:29:3a:a1:80:44:a8:a3:3e:49:b8:eb:18:c3:
f6:4a:fc:ff:ea:5c:7c:24:33:e8:91:35:d2:14:5d:
9f:da:9c:25:9d:a8:09:25:93:9c:fd:bf:5c:a3:a1:
e0:22:fc:77:b8:ff:a4:16:0f:b6:d7:94:ca:0b:5d:
a4:49:9c:40:e8:6c:6c:18:3e:14:f1:1e:3f:23:9c:
0b:2a:c1:ea:4a:03:ce:a6:86:0a:16:2f:f9:a3:e9:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:11:BD:5C:44:4C:23:9C:19:87:76:F3:60:E0:F1:00:C9:B5:D8:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2ac8a2-f1cc-4f85-90c9-4ebec011a288/1/1-xG9XERMI5wZh3bzYODxAMm12AI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.211.0/24
IPv6:
2a11:dc40::/29
Signature Algorithm: sha256WithRSAEncryption
97:46:64:01:e1:d4:1b:fe:41:aa:28:cf:66:b1:dc:c9:96:34:
06:84:bd:e3:14:18:c2:21:2d:df:90:7b:7c:b9:97:cd:da:97:
60:5e:cd:c7:7f:49:1c:f7:8a:76:46:11:c1:a8:c1:b7:a2:07:
bb:34:64:cd:d5:88:90:7e:b4:57:b6:23:20:3b:73:bf:4f:a2:
a2:b4:3d:1e:2e:ad:0b:ca:31:e5:0f:23:5c:ad:1b:5c:c1:e1:
3d:6a:94:b7:d5:ad:5e:4a:8b:82:89:ac:f2:94:a1:36:55:80:
02:94:0d:11:81:8b:05:c5:e0:08:23:b6:6c:53:85:ef:38:55:
f0:54:59:0b:ce:8c:ed:96:36:2d:4c:86:c4:cd:1c:75:06:b8:
7b:9d:6f:91:a0:a6:22:1e:17:cf:5d:a3:a8:c1:ef:9a:99:de:
2a:fb:3f:6f:d4:15:49:31:66:73:f8:71:8a:f2:2c:c8:03:a8:
8c:0b:df:67:71:6f:18:18:b7:66:0f:2c:70:0a:37:d8:e1:a8:
87:83:e5:c5:88:30:05:a4:fd:74:ca:85:44:a9:cd:d6:3c:8d:
4e:e7:c7:8f:3d:3a:c7:9b:49:3f:72:45:a8:ef:1a:83:ab:36:
b6:72:0d:e3:6c:8e:fa:d2:15:fc:ad:66:ab:3a:cc:7c:17:b2:
23:59:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:49 2024 by rpki-client on console-ams.rpki-client.org