Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P0hhEqAm83uhswof71aP02IV0ow.cer
File: P0hhEqAm83uhswof71aP02IV0ow.cer (raw, json)
Hash identifier: 6YR3GEeUER0ybk2udB+r/OEFjjX0+xPx4F/fDgWyc4A=
Subject key identifier: 3F:48:61:12:A0:26:F3:7B:A1:B3:0A:1F:EF:56:8F:D3:62:15:D2:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D67C99678A02C23C37B46801DE3388
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.126.0/24
IP: 2a12:a100::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 10:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:7c:99:67:8a:02:c2:3c:37:b4:68:01:de:33:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f486112a026f37ba1b30a1fef568fd36215d28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:06:ed:a3:15:fe:ae:d3:89:33:47:e3:ff:4c:
cf:23:ac:08:b6:bf:5f:78:15:01:62:ad:a7:46:67:
46:9c:55:73:6d:4c:c0:26:b7:73:7c:68:b3:fc:ba:
15:bf:58:6c:5b:95:74:71:5b:6f:d6:2b:44:eb:2c:
d2:8b:b3:05:14:7b:05:10:4f:81:8c:25:96:84:c4:
c3:19:4e:af:26:a9:52:48:1d:aa:5a:be:d7:00:ff:
2a:b5:83:e6:e5:08:d0:07:ae:94:80:8f:3f:de:43:
44:a1:bf:72:4a:9b:6d:f3:23:8c:26:d2:3c:60:34:
58:6a:0b:6d:2b:17:23:0e:ee:d6:34:f8:2d:1a:1e:
6c:7c:8d:66:89:87:59:68:d5:fb:7c:17:df:8c:03:
13:07:a7:2d:07:fb:39:42:33:c8:69:9a:99:1f:69:
1e:4c:90:aa:40:8e:8f:72:b5:6c:60:44:c4:36:55:
b0:6c:c6:95:42:10:d1:60:b9:3c:d9:75:ba:62:20:
03:a5:f7:50:ca:e0:b7:f8:db:fd:c5:09:89:c3:98:
9d:b1:a9:66:37:1e:6f:93:fd:6b:1f:ff:08:5a:b1:
82:54:9a:9f:97:5d:5d:bf:86:ba:77:69:bc:5e:74:
5a:80:72:da:f4:10:95:20:b0:2f:3b:44:37:c3:d6:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:61:12:A0:26:F3:7B:A1:B3:0A:1F:EF:56:8F:D3:62:15:D2:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/92d4b6-0f24-463a-8953-c49906b3a56e/1/P0hhEqAm83uhswof71aP02IV0ow.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.126.0/24
IPv6:
2a12:a100::/29
Signature Algorithm: sha256WithRSAEncryption
2f:92:44:2d:f9:0a:26:b9:40:ea:c1:82:22:d2:84:cd:c9:e1:
f7:ec:8d:85:cd:9c:69:13:7c:4a:0c:3d:c9:5a:2e:9d:f9:b2:
87:d1:3b:0e:05:26:0e:bb:f4:90:61:92:8e:54:39:f6:52:17:
a3:7c:47:3e:2c:95:ea:4e:eb:9c:9b:8f:66:f8:51:94:f7:ac:
f4:1e:39:86:ad:f7:8b:b5:06:29:a2:f5:3a:9d:dc:f4:3c:2f:
8e:98:bd:8e:1f:76:ea:5e:61:8a:4a:e2:7c:42:f2:a6:59:30:
a7:2e:56:97:34:14:e2:11:04:3c:d3:5e:37:a5:59:eb:62:55:
e5:78:cb:e2:3b:36:61:a4:5f:6f:63:27:64:a7:09:56:4c:88:
f3:94:d7:a8:62:60:db:c8:bb:7f:c2:d3:a6:18:9b:b3:00:8a:
f7:80:16:91:c1:d1:cb:df:a6:2e:0d:85:ec:7c:00:fd:c3:3f:
d5:55:2c:95:81:1d:72:3c:34:5d:51:8d:33:b1:be:cc:d8:4e:
ab:c0:aa:5a:e9:e2:a7:22:21:35:d1:b5:2c:cd:b9:d2:d9:2e:
f5:21:ed:7d:08:a9:4f:f3:9f:c2:ec:45:ba:ad:40:4c:f7:91:
73:15:95:03:d1:01:22:e4:2f:8f:34:42:cb:de:e2:99:11:41:
7c:09:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:57 2024 by rpki-client on console-fra.rpki-client.org