Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TJFBjCBNhkmjQLZ7MoNijy-IWOc.cer
File: TJFBjCBNhkmjQLZ7MoNijy-IWOc.cer (raw, json)
Hash identifier: 4Jh20TSZIIy1VwkuqbPeI5rinDmimElCSWLzQIACPDg=
Subject key identifier: 4C:91:41:8C:20:4D:86:49:A3:40:B6:7B:32:83:62:8F:2F:88:58:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D5B8E0198FF557093F8C6BDC2F995
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/TJFBjCBNhkmjQLZ7MoNijy-IWOc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:55 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.126.121.0/24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 10:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5b:8e:01:98:ff:55:70:93:f8:c6:bd:c2:f9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c91418c204d8649a340b67b3283628f2f8858e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:f1:68:00:79:1c:0a:e9:8d:e6:52:f5:6f:
19:16:e1:0e:0f:b7:d9:4c:6f:f0:d6:5e:b5:ad:3a:
4b:6f:24:7e:a0:4f:cf:15:75:92:7a:e3:09:9b:2b:
1c:63:f9:5b:c9:90:e9:26:59:60:93:8e:82:38:12:
fc:07:8e:bf:3e:43:d3:6b:e8:37:0f:19:29:a8:e1:
80:58:4f:ac:74:9e:8f:7b:7a:00:6a:85:0b:7e:32:
e1:bd:9b:37:47:19:83:50:83:ec:42:cb:6f:3e:58:
7a:79:42:99:72:cc:11:97:da:e7:a0:1b:cd:c5:18:
64:7a:d8:58:c1:b3:b9:51:20:7f:6a:1d:8b:28:d0:
26:4c:d0:ee:ea:7e:12:0f:52:39:14:5f:70:8a:14:
fa:4f:e7:25:28:8d:82:22:09:21:6c:fd:b3:3e:b1:
19:71:e7:b1:15:4c:e6:fe:21:14:cc:01:0e:ca:29:
55:82:97:21:f7:c6:5b:22:e3:e7:94:a7:cf:b0:02:
ec:ae:99:79:b6:ff:a4:5d:77:12:49:9f:64:fb:63:
9a:da:d8:92:53:d8:e4:af:f5:1a:86:c9:c3:96:56:
d9:6d:de:94:e7:77:f8:eb:ce:fc:37:62:bd:a5:1a:
b0:9c:cc:ec:18:d1:72:2c:d2:86:c8:1b:d8:02:67:
19:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:41:8C:20:4D:86:49:A3:40:B6:7B:32:83:62:8F:2F:88:58:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9102de-d3bb-46f2-a567-69a3573c2e33/1/TJFBjCBNhkmjQLZ7MoNijy-IWOc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.121.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0e:9f:2c:20:a8:20:98:f8:80:0f:18:2b:bd:c6:7c:d9:ae:
ee:a0:cd:30:71:80:bc:e1:44:c3:c7:ff:45:b8:3d:e3:46:7c:
c6:58:9d:a0:56:8d:ed:ed:9c:19:7b:ab:ec:97:d1:1e:0b:aa:
53:eb:bf:8d:6f:54:9b:46:63:3c:cc:34:28:33:56:c5:b0:b0:
6f:43:01:2e:0c:99:df:87:bb:31:02:eb:47:22:09:bc:2b:fe:
25:f1:b6:0d:b4:a9:fd:f4:87:2e:78:07:e0:63:7f:90:a1:22:
4d:1c:d7:7f:b1:84:31:1b:c2:f3:21:67:c9:55:f5:34:5a:b5:
ea:71:ba:0f:57:0a:59:a2:7b:64:b5:4c:53:b5:cc:e6:52:8f:
1c:ba:8f:87:c3:1d:41:78:ca:ae:b1:88:97:5c:09:d3:85:93:
8c:31:54:21:48:bf:fb:8a:5c:e3:81:ad:c1:50:f9:ae:4e:14:
3f:5c:9e:be:e1:d1:a4:aa:2d:39:70:d0:d3:4c:fd:42:b4:e0:
36:8a:e1:62:74:ff:d2:2e:a5:2c:f0:a9:09:ec:1e:9d:23:98:
64:11:d7:30:21:92:5c:4d:b6:4e:43:04:7b:94:a1:4b:f4:b3:
ef:10:0c:2c:76:9e:fa:f5:cb:cc:be:cb:02:e6:fa:b7:8c:05:
14:43:42:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:10 2024 by rpki-client on console-ams.rpki-client.org