Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W4-CH2XKhtO1x0V3a1owi2zFhk0.cer
File: W4-CH2XKhtO1x0V3a1owi2zFhk0.cer (raw, json)
Hash identifier: yUAdVjj/6axnFemvSvXQO01d4j5o9KXsRrkyTt0uaRc=
Subject key identifier: 5B:8F:82:1F:65:CA:86:D3:B5:C7:45:77:6B:5A:30:8B:6C:C5:86:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED437BBBCAE2EA4A87053AC094386A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/541538-1642-4532-93ad-143044d2d906/1/W4-CH2XKhtO1x0V3a1owi2zFhk0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/541538-1642-4532-93ad-143044d2d906/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.253.128.0/24
IP: 2a11:34c0::/29
Validation: Failed, certificate revoked on Wed 04 Oct 2023 12:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:37:bb:bc:ae:2e:a4:a8:70:53:ac:09:43:86:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b8f821f65ca86d3b5c745776b5a308b6cc5864d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:51:a2:38:38:bf:f1:7a:b9:aa:57:41:d6:
80:e1:21:aa:c9:aa:0f:2a:f9:75:ab:df:9f:e0:a3:
28:12:d3:ac:e7:db:4a:7d:4e:ad:67:60:b4:f5:32:
30:78:7e:ab:f0:ba:97:2e:e4:02:e8:50:c8:b4:45:
a0:2b:cb:f4:6e:6a:84:03:58:56:8f:20:37:12:84:
b9:c8:00:cc:7e:aa:66:37:93:26:28:f1:22:8f:58:
f4:a5:54:8b:1b:37:08:c6:69:7f:ed:9b:2e:c5:46:
f2:dd:a5:d7:c8:e1:c3:fe:0f:f5:96:ea:2e:aa:bf:
e9:cd:43:ad:ad:9c:9c:cd:87:a1:ae:31:a1:b2:26:
a3:4a:86:79:29:a7:94:ba:91:92:1c:a8:66:73:2f:
1d:fe:fa:27:00:56:b4:11:aa:9a:b6:58:86:be:dc:
77:cc:8d:e5:09:b8:a4:62:fb:1b:d0:63:a9:b2:a6:
1b:2c:6b:92:5a:c1:d5:f5:33:a1:86:35:a7:f1:e0:
c9:cc:1c:bc:ea:77:e2:1a:84:99:7e:5b:52:d2:57:
5c:7c:87:45:4e:af:20:82:f2:d9:e9:7a:cd:13:93:
6d:16:6b:12:26:a2:0f:90:72:bf:5b:db:37:9d:85:
f0:1d:63:3c:bc:38:fa:a6:df:a9:56:68:89:ae:f7:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8F:82:1F:65:CA:86:D3:B5:C7:45:77:6B:5A:30:8B:6C:C5:86:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/541538-1642-4532-93ad-143044d2d906/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/541538-1642-4532-93ad-143044d2d906/1/W4-CH2XKhtO1x0V3a1owi2zFhk0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.128.0/24
IPv6:
2a11:34c0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:77:b2:3f:73:21:ae:ae:9a:e7:40:3d:12:9a:95:70:0b:8e:
ad:3e:a5:b0:eb:2a:d8:58:9b:81:2c:e1:ac:43:31:e6:bd:b8:
b2:80:07:37:b7:04:77:29:b0:bb:eb:6d:3a:ce:f9:e5:3d:bf:
33:0e:d9:95:08:33:a9:70:77:25:d3:8d:08:a6:fc:ee:80:d1:
de:af:3e:2e:d2:60:41:e5:27:31:72:37:01:cf:85:cb:95:72:
73:ab:c1:3d:92:c8:67:2a:33:c1:a3:f9:85:08:29:52:63:bb:
e9:a9:21:ec:50:09:17:5e:db:22:96:4e:84:ae:77:b6:77:c0:
9a:ca:f9:ec:ba:05:4e:a3:37:f5:91:57:b0:3d:fe:19:1b:66:
45:b5:c1:ec:8e:03:7e:01:b4:25:83:8c:aa:67:0d:fa:b8:da:
88:61:83:31:cb:80:37:41:c8:e6:32:24:5d:54:b7:ec:68:ab:
a9:97:77:a2:70:b5:76:05:d0:74:49:1a:1a:dd:5c:07:e8:5a:
4d:da:1d:c6:1d:06:03:70:33:ba:db:66:14:41:9b:ab:14:c0:
e4:a5:7b:04:13:f4:07:19:e4:4f:f2:27:42:30:19:ae:68:07:
61:ec:5c:52:7b:92:ac:f9:ce:0d:99:87:cf:22:f0:84:cb:29:
15:3c:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:02 2024 by rpki-client on console-ams.rpki-client.org