Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.cer
File: Gk5J_8lNNSDAPxh7HAvGE3IFuL4.cer (raw, json)
Hash identifier: 5XA7ZON1Y1pwW2DF7ppOH+OtmeEqlbfwm+WgycYksec=
Subject key identifier: 1A:4E:49:FF:C9:4D:35:20:C0:3F:18:7B:1C:0B:C6:13:72:05:B8:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192DCE152B9D5DD59E65A2A09B67E5E4BAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Oct 2024 10:03:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 139.28.132.0/22
IP: 2a09:640::/29
Validation: Failed, certificate revoked on Thu 31 Oct 2024 06:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:e1:52:b9:d5:dd:59:e6:5a:2a:09:b6:7e:5e:4b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 30 10:03:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a4e49ffc94d3520c03f187b1c0bc6137205b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:2f:16:9b:df:09:af:a3:f5:4e:a1:f4:60:
6e:15:79:08:ae:99:71:33:2e:ad:54:cb:6b:30:42:
81:60:e3:79:a1:72:de:7f:b9:24:4f:f3:c4:4e:1c:
89:9f:49:86:17:81:7d:ec:a1:eb:81:8d:9e:75:12:
47:8c:56:f0:3a:a3:a9:7c:95:7c:94:f0:4d:5c:6a:
2a:7b:dc:24:70:94:5f:23:93:42:14:8b:30:1c:a5:
f4:58:dc:e8:fa:de:20:84:3d:dc:8c:03:c1:32:8e:
2e:5d:67:98:c9:90:b4:da:59:40:6d:e0:12:3c:97:
a2:6b:ff:eb:a2:c1:19:23:44:e5:2d:18:35:46:2e:
d4:ec:37:8c:1e:8e:37:b0:7d:a8:5f:07:ea:04:57:
2c:94:53:a2:e1:c0:01:12:94:74:c8:86:3c:4e:82:
3d:18:7d:4e:37:2b:e2:85:a6:57:cb:2e:ee:f2:27:
cd:6d:1e:b8:3e:5d:b1:80:ce:ec:c0:43:bf:a1:26:
6a:5b:07:32:56:f9:ae:65:6d:e4:2a:59:41:90:f2:
58:d9:43:2f:37:6b:91:06:52:af:a6:d7:d9:9e:48:
57:c5:6e:bc:a1:4b:5f:71:40:6f:67:52:00:3d:1b:
8a:1e:06:fa:6a:52:7b:66:19:12:7e:86:d0:85:d5:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:49:FF:C9:4D:35:20:C0:3F:18:7B:1C:0B:C6:13:72:05:B8:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e5ef45-e91a-4581-88d5-c97f079eb47e/1/Gk5J_8lNNSDAPxh7HAvGE3IFuL4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.132.0/22
IPv6:
2a09:640::/29
Signature Algorithm: sha256WithRSAEncryption
3a:5f:6b:56:3d:1c:30:ca:0a:fc:9b:db:c2:d0:a2:14:41:ca:
d1:a4:2e:47:63:2d:5a:62:34:b2:43:cd:84:a2:cc:d2:3d:a8:
05:94:b9:fa:e6:89:c3:58:e8:76:16:01:57:3b:30:49:3d:b6:
be:d7:dc:89:cd:bf:51:72:55:ed:64:83:22:9a:23:a8:2c:c0:
70:c5:cd:27:3d:19:ff:19:cd:fc:d6:1a:a1:d0:e7:f7:20:44:
5d:71:5f:48:45:dd:60:de:4d:4d:16:52:cd:fd:3c:64:59:fe:
97:d7:e0:9e:33:11:8e:b8:32:05:4a:90:3d:b8:c8:8e:b1:5c:
4d:06:6c:86:8d:dc:20:1d:ee:92:d0:6e:00:39:ef:ba:9c:c2:
ce:fc:8c:2d:bd:b5:95:32:6e:70:31:3e:28:4e:f9:12:37:3a:
d9:3e:ac:2b:82:b9:33:49:0b:51:cc:3e:a1:d9:7c:25:94:d6:
71:a2:43:f2:7e:ca:69:81:6b:c9:ce:fe:59:db:90:c3:c4:70:
aa:e8:3a:e0:a6:fe:13:9d:3d:ad:6b:8a:52:35:92:d0:0f:52:
a5:d0:dc:89:5b:68:0e:76:8a:b8:c1:03:10:12:47:df:d4:6e:
23:78:86:99:10:cd:66:ff:8b:93:d6:2f:90:ee:6f:fb:22:1f:
61:e1:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 07:50:32 2024 by rpki-client on console-fra.rpki-client.org