Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1XxPduX5cDjpTI9EasqDEwNdPtg.cer
File: 1XxPduX5cDjpTI9EasqDEwNdPtg.cer (raw, json)
Hash identifier: xXaNhYSV8NnUGu7JahmkIr5pyTTl49iAcBGFHZ3E+tw=
Subject key identifier: D5:7C:4F:76:E5:F9:70:38:E9:4C:8F:44:6A:CA:83:13:03:5D:3E:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D61762A90BB7E6DF96EC2737BF9EA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/1XxPduX5cDjpTI9EasqDEwNdPtg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 88.151.13.0/24
IP: 2a11:5480::/29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:17:62:a9:0b:b7:e6:df:96:ec:27:37:bf:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d57c4f76e5f97038e94c8f446aca8313035d3ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:5b:00:c4:4a:84:63:ef:22:88:e4:54:0a:
9e:19:99:e1:d5:74:a9:8a:e4:9b:7d:9c:87:a0:3c:
f3:8b:8c:49:d7:07:61:3c:e3:cb:ef:28:b0:5e:9e:
8a:e8:14:b8:ae:2a:21:b9:28:c7:19:b2:e0:92:2b:
55:8f:77:a3:ce:fa:7b:b0:60:40:42:a2:eb:86:a3:
98:2d:ab:6f:0b:cf:0c:5d:70:c1:f9:e1:a6:8c:4f:
91:0f:9e:79:c9:c3:5f:ba:d3:1f:26:42:ad:ea:ab:
41:1b:2a:4f:3a:4d:60:62:66:a5:81:bf:26:81:a1:
a3:f3:80:ae:ab:99:55:05:54:1a:18:31:31:f1:35:
e0:58:2e:3c:88:2c:44:64:e5:f9:02:61:87:a2:7b:
9f:5c:a5:90:2f:d0:ff:bd:35:87:d0:11:ed:1f:3a:
5f:ff:e5:90:bb:be:c8:64:27:a6:26:e7:63:e0:c3:
5e:8e:f1:80:82:52:b7:87:e4:c8:27:92:bd:b0:da:
d3:87:00:fe:b2:c7:17:5c:20:94:d4:d8:fa:23:c2:
b1:79:db:ea:39:1b:7e:cb:dc:76:06:21:16:3b:5e:
93:3a:a2:7c:69:83:cb:51:66:80:4c:fd:73:38:26:
40:5d:07:0b:48:fd:6d:3a:42:80:b7:b6:f3:af:86:
83:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7C:4F:76:E5:F9:70:38:E9:4C:8F:44:6A:CA:83:13:03:5D:3E:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e4603-53c9-4423-8180-a0bacfae3091/1/1XxPduX5cDjpTI9EasqDEwNdPtg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.13.0/24
IPv6:
2a11:5480::/29
Signature Algorithm: sha256WithRSAEncryption
4f:09:bf:a2:b6:20:99:d4:fe:56:72:47:e2:ab:a3:3f:a2:7e:
77:15:97:30:1e:69:4c:8c:10:3f:6c:94:88:07:d1:46:f6:d3:
44:70:c9:ef:5b:0e:3d:62:54:2c:7e:e0:ee:a9:e3:d2:31:f8:
ab:16:1c:44:c0:05:d5:53:67:17:0e:62:93:d3:5d:92:70:98:
59:02:c5:d2:f9:19:08:a6:23:16:a2:55:8a:bc:c2:3a:a8:f0:
58:27:d5:f3:7b:e3:da:34:6f:91:5f:76:d4:4d:23:c6:7f:9d:
ab:15:11:9f:05:74:07:b1:44:72:0e:9d:b1:5d:87:99:38:ab:
5f:12:81:ca:be:7f:00:1a:2d:12:8d:50:4e:66:cf:59:36:0b:
23:ed:95:18:e8:7f:dc:a8:46:09:3c:15:ea:59:f0:2f:98:5f:
c5:51:b4:4d:3c:6f:24:0b:ff:38:46:78:07:15:5b:fd:85:13:
7e:3a:fb:47:09:aa:51:15:83:ed:58:66:a4:f8:0f:cb:ec:12:
d3:4f:4a:77:7d:b9:94:2e:37:5b:19:3e:65:df:d8:5d:82:c0:
6f:08:b3:8b:72:07:21:96:33:25:fd:23:9f:99:cc:76:6a:dc:
04:58:5e:4a:9b:0f:75:4d:9f:4a:7f:8b:6e:91:9a:be:8e:e7:
0e:2e:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:32 2024 by rpki-client on console-ams.rpki-client.org