Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WnbRg5k9FB3QZizjHTZ7eE09Io8.cer
File: WnbRg5k9FB3QZizjHTZ7eE09Io8.cer (raw, json)
Hash identifier: X8TykMupQpNKU34xKpcwcvE4lWO1/BiNGQn1O5XObSk=
Subject key identifier: 5A:76:D1:83:99:3D:14:1D:D0:66:2C:E3:1D:36:7B:78:4D:3D:22:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6D99E9158769F70DC8E50408E204C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/WnbRg5k9FB3QZizjHTZ7eE09Io8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.147.0/24
IP: 2a12:1400::/29
Validation: Failed, certificate revoked on Wed 15 Nov 2023 15:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:d9:9e:91:58:76:9f:70:dc:8e:50:40:8e:20:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a76d183993d141dd0662ce31d367b784d3d228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:bd:41:5e:49:36:15:3b:6f:df:95:81:d2:
83:28:8f:e1:8c:56:0e:77:b3:3f:1e:78:a4:c4:59:
db:fe:68:8b:57:76:90:4b:5b:6e:9d:a6:4c:e6:41:
cd:92:05:67:64:3a:9b:15:15:fe:93:d4:7e:57:cd:
36:00:93:92:dd:c5:33:a1:3a:24:38:7d:e2:b3:08:
35:b7:84:e1:43:57:40:8a:35:5c:9a:2c:48:b6:b7:
ed:47:f2:24:d6:a1:6e:45:36:58:e4:2a:a3:71:4d:
a2:d9:94:04:47:41:67:53:63:ce:0a:57:ac:b0:dd:
b8:4d:61:e2:8b:53:eb:2f:de:1c:7d:a8:a8:1e:af:
36:33:ae:e7:f1:b4:e7:3f:ea:a3:91:78:03:73:55:
9a:33:ab:5f:22:8a:a7:b5:92:25:56:c3:2f:94:cb:
ce:e5:e1:7d:55:0e:c8:43:06:0d:ae:be:39:9f:5c:
ce:ed:ed:fb:bf:38:90:db:2e:f6:07:37:5c:59:1a:
32:4a:13:4d:cd:00:33:c3:fd:92:c2:25:17:73:2a:
6f:cb:e0:59:67:3f:59:b0:3d:4d:6f:5e:35:12:aa:
7f:a5:53:71:0d:03:0a:48:90:4a:d4:57:16:90:22:
8f:5e:fc:aa:8d:bb:e6:7c:f2:10:39:c8:64:77:05:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:D1:83:99:3D:14:1D:D0:66:2C:E3:1D:36:7B:78:4D:3D:22:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/WnbRg5k9FB3QZizjHTZ7eE09Io8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.147.0/24
IPv6:
2a12:1400::/29
Signature Algorithm: sha256WithRSAEncryption
63:96:90:f7:54:82:ff:a7:e4:7d:d7:e2:cd:95:98:ec:5a:aa:
90:e8:eb:b6:d4:98:d5:2a:70:7b:e0:13:eb:4b:02:4c:e1:1c:
cb:8c:38:38:23:eb:6d:ca:fd:de:93:83:f0:f2:ab:f8:e9:cc:
e7:36:16:82:de:87:bb:90:ac:66:62:d7:cf:f4:27:0d:52:c6:
c5:a1:11:fc:df:d0:a3:f7:78:93:17:fa:fe:8c:95:e9:8c:1f:
15:41:7f:2f:00:d0:23:d3:34:e2:28:b9:41:ce:e6:41:2e:f1:
e1:71:c0:74:a2:69:d2:f2:9f:fc:d6:d9:61:b8:38:d1:a0:70:
c1:9d:43:ec:1b:6e:85:cd:c2:e1:3e:5f:29:aa:9b:79:4c:44:
17:18:8f:9a:d6:27:c4:30:d3:46:1e:fb:b2:a6:af:eb:48:7b:
ff:1e:ea:0f:5e:8d:87:62:92:49:b7:b2:14:09:0e:0a:ba:6d:
2b:a8:71:d2:fc:7f:89:84:4d:71:c8:34:0f:e8:80:a5:f9:e3:
cc:16:13:3e:f3:55:87:fe:be:79:fe:d1:a8:2c:08:53:93:e1:
3e:51:72:63:61:da:a6:56:c0:d7:7e:e4:23:90:f4:c6:ef:37:
06:f5:8c:ce:f5:ab:6b:c5:48:2f:41:7f:9f:db:6f:8a:91:a8:
09:a7:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:45 2024 by rpki-client on console-fra.rpki-client.org