Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2hX3YwTQpdu-Yh4R4wIbYI0zp18.cer
File: 2hX3YwTQpdu-Yh4R4wIbYI0zp18.cer (raw, json)
Hash identifier: 66Zn5CG/3JhCcNin+AQ4tiz/yA1LLLOzP1v5Iyk+z2E=
Subject key identifier: DA:15:F7:63:04:D0:A5:DB:BE:62:1E:11:E3:02:1B:60:8D:33:A7:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65B17190323C62E2CDB77E9C00A7D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/2hX3YwTQpdu-Yh4R4wIbYI0zp18.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 83.138.49.0/24
IP: 2a11:1880::/29
Validation: Failed, certificate revoked on Fri 25 Aug 2023 12:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:b1:71:90:32:3c:62:e2:cd:b7:7e:9c:00:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da15f76304d0a5dbbe621e11e3021b608d33a75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:78:ff:45:0c:15:87:b5:cd:e0:ce:f6:1e:
51:26:f8:ca:6d:4d:c6:69:ec:a1:b6:6f:08:d3:65:
4e:9d:f5:a1:6d:b1:e6:a9:80:30:d7:96:75:ca:77:
d2:4e:51:4b:1a:06:79:55:a4:5d:de:f9:7f:70:6c:
38:8c:ce:88:5c:ff:21:03:72:47:ff:ba:4f:71:97:
ab:56:11:4b:3c:fe:b5:79:85:6a:19:8c:11:ac:61:
f8:e9:7c:4e:c8:f4:f9:22:43:4b:dd:35:f1:e6:c1:
dc:b8:fc:6d:ae:e3:f5:10:0d:e0:b9:65:65:45:08:
9f:25:d7:62:6a:c0:14:44:5e:d3:e3:23:71:64:0f:
b2:4d:49:95:c0:61:c9:70:c5:92:cf:a6:c6:89:24:
96:e6:e6:c7:9e:45:8b:9a:c0:e9:43:5c:13:e9:96:
c4:60:98:cf:f1:fc:6c:86:f4:df:a2:fe:33:b2:3c:
de:25:af:c5:b4:33:1b:96:b7:4c:80:0a:80:09:ce:
30:38:58:67:52:3a:db:f6:de:92:2b:01:15:b6:1d:
e2:c6:70:4f:ac:55:a0:b9:f7:1f:62:16:e9:b4:42:
2f:a6:f3:cb:8a:87:97:6e:35:9e:51:fd:7a:97:81:
b8:38:30:28:4d:2c:8b:de:e9:8a:2c:c0:a1:e9:8f:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:F7:63:04:D0:A5:DB:BE:62:1E:11:E3:02:1B:60:8D:33:A7:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/26cf18-afb5-4269-a1c9-83def21d6ab2/1/2hX3YwTQpdu-Yh4R4wIbYI0zp18.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.49.0/24
IPv6:
2a11:1880::/29
Signature Algorithm: sha256WithRSAEncryption
45:63:42:65:ee:88:40:91:a0:80:aa:11:3f:00:0b:9b:e0:5b:
20:ae:85:48:d7:01:31:1b:ab:d9:6e:1b:f5:6a:f4:df:eb:b7:
fa:4d:03:88:68:09:52:ef:fe:28:7f:3d:a8:0a:bf:86:71:7d:
f7:aa:41:86:8d:02:c7:3b:a4:5c:57:97:70:61:bf:15:d0:80:
5a:29:6f:23:ce:ca:1a:d6:23:39:f6:40:9a:f8:a3:12:6d:91:
a8:d2:e9:99:40:ad:ac:fb:bd:a8:ee:f0:97:e6:0d:4e:d0:a6:
f4:a6:0d:f3:80:a3:56:81:71:58:8d:cd:31:42:ae:24:f8:7f:
87:6f:dc:2f:d7:cf:5c:59:31:bf:1b:a9:06:61:3d:e8:81:fe:
ad:48:9f:eb:92:5b:62:47:c5:9d:02:b1:09:2a:31:f7:3b:63:
b9:7d:9f:20:56:1e:68:d0:1e:64:75:16:7b:a5:52:02:de:22:
81:16:2a:f3:4c:8c:91:f4:d6:1a:7a:de:f3:1b:dc:d8:22:a1:
40:ff:2c:6e:65:2c:82:52:5d:81:fe:da:15:c4:82:f2:42:3a:
39:d6:8f:9a:69:1d:f6:a7:53:9b:70:5d:aa:d3:e8:52:3f:09:
11:da:81:44:d3:49:ca:8e:70:fd:b4:1b:78:a9:dd:6b:f7:10:
eb:9c:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:14 2024 by rpki-client on console-ams.rpki-client.org