Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PeNAgpJc_SlLUa8SispUX_IfDtA.cer
File: PeNAgpJc_SlLUa8SispUX_IfDtA.cer (raw, json)
Hash identifier: bnPfFLFjg0lK5rnMhqvS5YlGnm8bisKrcg3xpaFKCnw=
Subject key identifier: 3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018963AE2F21CFA20A4FEF753E5FAAFDE1E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 11:48:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.103.0/24
IP: 2a13:93c0::/29
Validation: Failed, certificate revoked on Wed 27 Dec 2023 11:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:ae:2f:21:cf:a2:0a:4f:ef:75:3e:5f:aa:fd:e1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 11:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3de34082925cfd294b51af128aca545ff21f0ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:5d:6c:da:71:19:6c:c4:8d:3a:06:a4:e0:
68:0f:35:a2:69:b5:59:8e:04:41:4a:2d:48:6d:08:
00:88:eb:fe:49:c4:95:2a:75:d3:c6:00:21:e7:a2:
73:01:da:b3:49:49:97:a5:93:b0:55:b5:bb:c8:f8:
e4:e2:cd:92:49:86:88:05:cf:2f:32:c1:86:36:fd:
62:6c:97:f8:c6:c5:74:37:3f:77:5d:63:be:42:65:
67:8f:6a:0a:57:75:ab:c2:24:9d:0f:3c:40:e9:5a:
3d:90:57:7d:ed:24:44:bf:ba:3e:2d:f3:9d:11:75:
2c:14:d7:8b:50:21:69:38:fb:a2:02:93:e9:90:02:
bf:aa:00:ed:20:99:fa:e6:79:15:da:df:fa:75:8f:
33:2e:db:9d:ad:62:2c:10:0d:63:65:f5:fb:2e:94:
8c:38:30:e6:90:aa:dd:b7:f6:d4:47:5e:54:0e:81:
a4:be:9d:4d:c7:21:96:ef:97:f3:36:17:10:d1:35:
b1:f8:a6:51:8f:01:b0:ae:6c:f9:de:d2:1e:c8:fc:
ed:1e:64:fe:99:c9:22:a6:8f:5f:c8:d3:37:65:26:
10:3a:b4:b7:fb:ff:51:69:2c:00:d3:04:fe:16:59:
a5:6e:7b:69:c5:f6:a5:40:6c:40:fb:6d:5f:df:33:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E3:40:82:92:5C:FD:29:4B:51:AF:12:8A:CA:54:5F:F2:1F:0E:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a728c1-35e1-474b-a50e-1b8e8368d5b8/1/PeNAgpJc_SlLUa8SispUX_IfDtA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.103.0/24
IPv6:
2a13:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:a6:90:2b:5f:53:ad:32:fa:72:04:dc:1c:45:d2:cf:5a:a0:
4a:d9:35:63:9e:b3:90:8c:09:1f:ad:97:96:52:73:d0:51:67:
23:54:58:84:fb:50:a9:5c:f1:8d:a9:07:e7:42:3f:07:a8:36:
c5:19:4a:26:43:ff:de:70:8b:96:4c:cd:2c:6c:30:d0:e1:96:
6c:60:a7:11:1b:eb:ff:13:0c:d6:58:34:0d:36:78:44:01:d1:
9e:a1:d0:ec:ba:9b:20:06:72:6c:d4:35:bc:4b:18:73:3b:78:
e9:f9:ad:e6:5b:e4:84:a1:0a:d1:b2:a9:c2:8c:0c:a6:0f:c5:
e8:db:f3:09:69:89:07:81:ee:dd:06:99:40:96:7f:07:75:3d:
88:c6:85:fb:84:81:85:33:65:cb:75:7e:7a:20:38:5e:ab:95:
ee:a5:ae:97:7a:76:b6:49:90:3c:6e:7d:e5:cc:99:19:38:0b:
ff:1c:d3:71:f9:cf:8d:90:3f:e6:00:47:40:5c:6f:0e:58:f5:
98:19:83:bb:72:cb:e4:68:0f:ea:48:ef:06:71:0a:56:d7:cf:
fd:9e:04:dd:ef:8e:78:d5:87:de:7f:00:d5:4a:fb:db:b7:0f:
ea:5c:34:9b:fd:05:8b:78:5b:6e:9a:6e:85:3a:2f:04:83:3b:
a2:36:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:58 2024 by rpki-client on console-ams.rpki-client.org