Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LDRk598KkW7zQyQnx9aSLrxJ0Xk.cer
File: LDRk598KkW7zQyQnx9aSLrxJ0Xk.cer (raw, json)
Hash identifier: zY3LDC7tqdajMdDO9gmEuXdRFghV25FJP2ve2BeRCAI=
Subject key identifier: 2C:34:64:E7:DF:0A:91:6E:F3:43:24:27:C7:D6:92:2E:BC:49:D1:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D894CBBB09C8D2FAAAE875DAF7A2F1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/LDRk598KkW7zQyQnx9aSLrxJ0Xk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.204.0/24
IP: 2a11:dac0::/29
Validation: Failed, certificate revoked on Mon 06 Nov 2023 08:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:4c:bb:b0:9c:8d:2f:aa:ae:87:5d:af:7a:2f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c3464e7df0a916ef3432427c7d6922ebc49d179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:13:91:3b:f6:ab:9f:c5:c9:bd:b0:f0:60:
7c:ce:d6:1f:09:2d:c5:0a:48:e0:47:c9:01:e5:53:
fd:3e:51:af:59:89:59:87:dd:9f:57:7c:5a:b1:02:
fd:2c:c2:1e:fc:19:ba:a5:41:7c:2a:c5:66:2a:c5:
e9:f4:e4:d7:bd:22:a6:ba:a7:54:66:73:3b:b6:25:
2f:de:e3:70:4f:6b:03:1c:4d:95:5f:0b:60:05:f2:
bc:19:78:74:c3:b5:6d:6b:f4:17:86:d3:38:33:b5:
59:a0:06:a3:c3:24:09:00:03:41:99:b7:27:04:09:
b8:11:eb:b0:4d:df:77:fb:c0:d8:69:57:4f:eb:7c:
65:f5:75:63:59:26:c4:f6:d8:ea:41:f5:a1:35:79:
35:aa:42:fd:00:84:49:78:15:01:58:7c:fd:41:50:
45:1c:42:47:a4:d0:e1:14:5e:46:e3:8e:ec:7e:45:
f1:e0:9a:ad:15:94:0f:5f:af:07:fa:7c:73:17:ce:
57:7e:06:42:d2:fb:11:a3:9f:b7:ec:0c:ee:cd:49:
b8:c2:44:7f:bf:93:62:28:a7:36:6b:35:4a:98:a2:
fb:9d:4b:b9:c7:58:f4:e0:f7:c4:c1:44:7c:da:fe:
a7:b8:a4:81:12:ab:f1:38:71:65:8e:f5:62:3e:a8:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:34:64:E7:DF:0A:91:6E:F3:43:24:27:C7:D6:92:2E:BC:49:D1:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/456c09-e007-4b01-ab85-fa2b3d77bc2c/1/LDRk598KkW7zQyQnx9aSLrxJ0Xk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.204.0/24
IPv6:
2a11:dac0::/29
Signature Algorithm: sha256WithRSAEncryption
79:22:c1:32:27:b3:c9:80:67:93:68:cf:86:a9:d5:9f:22:c2:
bf:9f:c3:27:89:34:a2:c6:5e:8c:ab:4d:1e:b0:44:68:c7:2f:
cf:06:67:20:44:c5:58:3a:90:07:cf:c0:99:ef:1a:55:de:6c:
b6:98:94:cd:a6:e1:33:c6:8d:7d:f2:9e:b8:47:db:17:07:ab:
37:37:7a:eb:ae:f1:22:b8:5e:d7:a9:6e:82:a8:8e:da:94:25:
22:cf:db:e8:b8:25:f5:57:c3:86:d4:86:5c:69:98:bb:0c:a9:
46:ed:46:fd:2a:ff:67:66:96:16:94:76:c5:77:fa:d7:23:a0:
f5:63:30:f0:97:7e:ca:56:31:c4:bf:ab:25:b5:32:e1:4d:5e:
a1:cb:7f:be:17:c6:41:0f:24:5d:f9:a9:ca:18:99:42:2f:4d:
6a:03:0f:0f:0f:ea:d4:1b:cb:6c:0d:b3:64:a7:ff:7f:05:92:
9a:ce:dc:21:d1:fe:78:22:8f:1c:db:e2:ad:7a:dc:5e:d7:25:
f5:d9:fc:36:d3:20:d1:57:08:ad:92:6d:54:25:cb:50:7f:8d:
22:b0:2f:c4:86:7e:37:0a:04:e5:48:ca:83:a0:a9:8d:e3:47:
ef:43:91:e3:46:1f:e8:51:f3:0b:6a:a7:43:6d:dd:54:ae:1c:
67:6f:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:31 2024 by rpki-client on console-ams.rpki-client.org