Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
File: Rt0l2fFcInyjX4ouKw0aiaktjWI.cer (raw, json)
Hash identifier: GGAsim2Bwado8xO3QS+JbjWd3EOM4QpMPmo4ekbd01U=
Subject key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185ED66B69AA2D6A01FBA39B92209E177A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Jan 2023 09:26:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.124.72.0/24
IP: 2a13:8e00::/29
Validation: Failed, certificate revoked on Mon 28 Aug 2023 07:39:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:66:b6:9a:a2:d6:a0:1f:ba:39:b9:22:09:e1:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 09:26:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:07:ae:6f:89:7e:65:2a:bd:b5:dd:2f:d2:
bf:d1:61:72:90:96:5f:fc:73:5d:58:2c:3a:e1:56:
9a:c9:96:f7:f7:34:ef:ea:5b:53:1c:90:73:e7:15:
f3:f9:8b:8b:0c:73:43:e2:5b:03:8c:c0:38:7b:f4:
88:bb:17:c1:70:94:e5:c2:78:0d:0c:83:af:db:f5:
4c:ef:21:e7:6d:b7:93:ed:16:5e:53:3d:ec:7d:e3:
7b:57:1a:75:85:c6:5e:43:24:9e:31:91:48:fc:65:
19:99:16:4e:93:2d:1e:59:3d:ab:12:af:4c:eb:b1:
cb:d6:c2:94:31:d3:ac:61:ec:66:78:5d:dd:61:b4:
45:b7:15:f8:88:fe:66:f3:65:b3:b4:e5:18:1a:cc:
bd:85:58:a4:be:f5:78:74:52:33:c8:ed:67:2e:bb:
1d:55:47:de:79:fe:97:ad:bc:de:53:39:0f:3d:9e:
7a:97:f5:9f:17:cc:10:7b:9e:81:ff:ae:22:5f:7a:
1a:89:2d:12:df:31:34:2f:47:c3:08:ad:55:38:08:
9c:85:49:21:a6:2e:a8:2f:63:93:a2:09:e6:78:c5:
f0:c2:0f:fc:37:3c:a5:53:1c:19:04:77:fe:2d:f0:
b0:a0:de:a1:25:2c:60:9b:34:f0:b7:df:4c:35:19:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
IPv6:
2a13:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
24:00:73:a5:2e:e8:1f:dc:15:d7:87:d2:e8:6e:8f:c3:fb:01:
91:f7:ce:a4:36:88:21:8b:fc:70:8a:a8:b0:ab:64:e7:33:18:
d9:5e:31:ae:a3:9f:1d:1b:ab:56:27:22:81:b3:a5:5c:78:66:
83:7e:90:a5:08:6d:fc:7b:f8:f5:c7:54:6d:f0:5e:1f:94:39:
f6:ba:0a:ea:6c:f7:3a:6a:5e:20:fa:5e:4b:e3:ad:12:34:9b:
32:9f:60:0b:b8:90:56:1b:95:7d:02:80:7f:cb:b9:1e:78:7a:
d7:50:99:c0:53:c6:8f:d6:9e:6f:2c:82:f6:e5:4b:cb:17:da:
a5:e1:fb:08:b7:71:b8:0f:62:44:20:88:30:e8:11:6e:9c:65:
45:9e:b7:e9:37:80:8d:63:d4:e8:35:3b:ba:ad:4f:1a:88:86:
c9:d6:be:d2:42:8a:fa:71:52:4a:3d:52:72:7a:cd:32:1d:ec:
9e:db:40:75:7a:cd:9e:2e:eb:24:bd:20:6a:99:82:31:67:41:
ca:5c:0c:6f:87:ca:f6:74:06:17:7b:a0:dd:3c:3d:b5:72:8a:
b1:08:c9:e6:97:8e:8d:58:aa:90:22:12:da:e8:73:12:60:8f:
eb:ef:9b:5f:17:c8:32:7c:00:66:d4:62:9b:7b:be:11:59:5b:
b1:cc:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:41 2024 by rpki-client on console-ams.rpki-client.org