Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XUOt81sCb89TDU7t6vA69egLLlA.cer
File: XUOt81sCb89TDU7t6vA69egLLlA.cer (raw, json)
Hash identifier: 08wEKqmrqtEeNEfEypRbmNHdCWRTe5w6wrqyOIOm6FI=
Subject key identifier: 5D:43:AD:F3:5B:02:6F:CF:53:0D:4E:ED:EA:F0:3A:F5:E8:0B:2E:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DBECF8296C026E8D03B8D821B6AF4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/XUOt81sCb89TDU7t6vA69egLLlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.53.144.0/24
IP: 2a12:6280::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ec:f8:29:6c:02:6e:8d:03:b8:d8:21:b6:af:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d43adf35b026fcf530d4eedeaf03af5e80b2e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:06:66:de:fc:ee:0a:10:11:b7:b8:4b:d7:
7c:d3:86:cc:49:3e:dc:03:9c:61:6c:7d:6a:7a:04:
37:6d:e4:a9:cd:30:59:4a:bb:b4:0a:32:91:b6:a6:
bf:ae:d8:e5:8f:8c:05:cd:f7:49:e1:1f:24:50:41:
5d:ff:86:ed:4c:8c:83:2a:5b:23:aa:21:3c:4b:2d:
4c:17:44:0a:ee:a7:72:b7:34:78:58:9e:68:96:6d:
84:31:86:1b:c0:ff:f6:fe:96:2e:bd:0f:20:ba:d3:
08:90:f0:6c:e1:14:d1:60:f6:46:ab:7c:c9:c7:7e:
5d:1c:69:84:98:86:ea:b6:85:c1:b4:21:60:c9:b4:
8c:d1:62:0e:46:24:1e:e7:a5:82:74:3a:de:31:91:
4c:42:33:cd:80:74:05:ce:63:ca:df:57:c7:ec:87:
c3:69:2e:10:e0:fa:c6:62:b9:cf:23:c6:cd:a6:3b:
c5:10:2e:8a:67:d0:d0:d2:ee:78:f7:e6:b7:6b:82:
94:86:df:f3:69:f7:c8:31:ed:32:08:84:52:26:c5:
e3:5a:69:5d:70:a0:a7:39:69:22:e6:fd:fd:53:48:
48:d6:ad:6f:f7:d9:45:9b:6b:34:81:26:4e:7c:b0:
37:d0:91:9f:98:b0:ec:05:13:e2:0d:f3:95:f2:ec:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:43:AD:F3:5B:02:6F:CF:53:0D:4E:ED:EA:F0:3A:F5:E8:0B:2E:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/967af2-6b14-4e9b-9c1c-65e51fc339c1/1/XUOt81sCb89TDU7t6vA69egLLlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.144.0/24
IPv6:
2a12:6280::/29
Signature Algorithm: sha256WithRSAEncryption
5d:05:45:60:3b:f5:a6:e6:47:f8:73:54:10:c3:e5:ae:09:c1:
48:ab:77:bb:45:c8:fd:5f:bb:15:89:99:a1:5d:82:64:45:87:
e7:04:dd:f9:8d:27:77:c6:4b:4a:5c:3a:50:a6:f9:3c:b7:fc:
8c:19:3c:f0:d9:7a:70:e8:3f:66:83:1a:15:b9:20:1e:02:74:
c8:a7:6b:5f:f7:3b:76:83:6d:60:8c:68:96:73:4a:aa:73:58:
2e:ba:03:64:67:dd:65:31:c6:70:eb:fe:93:58:05:02:cb:9e:
08:0c:59:9d:ec:04:a3:38:1b:01:5c:6d:fb:3c:05:ed:23:8c:
93:10:f0:ff:7f:88:ab:41:f9:78:56:1d:83:55:ac:35:55:3f:
68:f8:c1:05:81:f0:d6:11:a2:b0:6a:11:86:2e:2c:27:a6:79:
ef:e0:d0:00:f0:20:a7:ca:bc:3e:c6:70:07:28:b8:da:f3:9d:
c2:0a:2c:86:98:49:bb:2b:57:93:c9:e2:01:43:73:66:d6:03:
0f:f1:ba:66:a8:ef:c4:27:b4:a8:99:07:23:1a:63:d6:73:7a:
6e:c4:fa:d9:6d:d2:ca:61:7f:da:53:9e:46:64:02:bc:b4:4f:
93:38:97:b6:b2:92:65:d2:72:c6:a0:a4:8a:2a:4b:d4:8b:26:
4b:fa:67:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:56 2024 by rpki-client on console-fra.rpki-client.org