Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tpn0wuvUl5v9RhUwo44jVAv5V40.cer
File: Tpn0wuvUl5v9RhUwo44jVAv5V40.cer (raw, json)
Hash identifier: MobltzB3UO9vFrN1VyGIznTJgRDbbINAcKFdzHtI9eM=
Subject key identifier: 4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63217E206CB19D550E4F16E85473A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.204.51.0/24
IP: 2a11:95c0::/29
Validation: Failed, certificate revoked on Thu 12 Oct 2023 11:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:21:7e:20:6c:b1:9d:55:0e:4f:16:e8:54:73:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e99f4c2ebd4979bfd461530a38e23540bf9578d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:d1:df:d8:fd:e9:49:ca:90:81:dc:6a:d5:
2e:69:42:27:c0:61:64:06:14:93:4e:a9:c3:c0:d0:
80:6d:34:4f:ca:4c:31:b7:fe:94:1e:db:1e:37:7d:
16:a4:3e:8f:1f:22:23:63:6a:ad:58:45:18:0f:27:
56:f7:0a:9f:bf:64:a4:4b:71:a7:ba:e8:03:da:ad:
43:d8:4e:b2:20:4a:14:70:74:73:06:ac:b7:d0:23:
72:6e:03:c9:da:38:11:fa:20:72:8b:bb:ac:e4:45:
e1:2e:e7:a3:bf:79:e2:31:9f:0d:a7:59:36:2b:c6:
ec:bb:f8:da:bd:6d:10:3a:0e:41:f2:6d:a1:4c:12:
28:d0:59:50:74:37:b2:bf:88:e0:98:da:c8:93:7f:
9d:ae:e4:77:d4:eb:24:c9:5b:48:55:80:27:f2:72:
6a:3d:2e:c1:cf:b3:0f:88:d7:3c:70:10:da:43:39:
b6:f4:8c:38:1c:91:19:7e:a1:96:67:c1:c5:62:89:
e3:d1:bf:a3:94:91:3d:51:df:72:fa:a3:49:63:5b:
e5:68:f4:e0:bf:e8:5b:91:b3:0a:5b:e8:86:89:fb:
a5:d8:f5:04:90:58:b0:b3:91:41:7b:7a:2b:9f:0d:
72:46:d6:04:3a:9f:d9:d5:88:5f:44:8a:2f:41:1a:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:F4:C2:EB:D4:97:9B:FD:46:15:30:A3:8E:23:54:0B:F9:57:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/84b507-942e-43d6-b430-873d5907b94a/1/Tpn0wuvUl5v9RhUwo44jVAv5V40.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.51.0/24
IPv6:
2a11:95c0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:5d:c5:a0:a0:15:12:4a:2d:c5:8c:06:13:06:69:e1:ec:18:
18:75:a9:8b:5d:12:8f:bb:6d:b9:9b:59:5c:7c:23:c7:9e:66:
27:86:61:03:ce:51:23:e7:eb:f4:21:f8:ab:de:35:a0:40:16:
fc:3c:20:4e:b0:1b:0c:23:9b:13:ff:22:4c:59:e3:71:22:41:
f4:e5:6e:2c:7a:05:c7:cc:ae:ff:7c:b2:28:c3:27:bd:fb:e6:
fc:7b:ab:6f:bd:de:4d:77:7c:c5:a8:90:d3:fd:ff:51:49:53:
d5:e6:1d:ac:51:bb:3e:4e:b2:8c:14:76:66:23:ed:23:70:34:
5f:9d:c4:41:75:ba:49:1e:54:47:4e:e1:45:82:01:16:01:43:
ee:96:55:f0:0b:60:de:96:4a:ce:ac:d0:0a:31:c2:e1:e8:cd:
a4:ce:71:f0:8a:df:93:91:6b:04:92:e3:f5:da:ff:af:90:81:
3f:68:5f:94:82:6f:60:1a:3a:a5:7a:8e:05:23:b3:94:5d:63:
b8:19:19:90:4c:43:f3:94:66:64:94:ee:9b:8d:86:ed:cb:b2:
81:8f:85:11:84:c6:5f:6f:57:f2:ba:c2:49:9e:88:73:a3:14:
81:a5:4d:c2:be:6a:ac:bc:20:2e:6e:6a:e2:5c:c2:91:26:7b:
6a:cd:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:04 2024 by rpki-client on console-fra.rpki-client.org