Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XZBhF8rXyBFOpkhbaCuSByVJyi0.cer
File: XZBhF8rXyBFOpkhbaCuSByVJyi0.cer (raw, json)
Hash identifier: AMDy45+sim7GKO6na2IofmLSW/YlBVkS1UcxZ2R1tIA=
Subject key identifier: 5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8962C7EC8A601CA3A1494B71495A29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.40.0/24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 13:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:62:c7:ec:8a:60:1c:a3:a1:49:4b:71:49:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d906117cad7c8114ea6485b682b92072549ca2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:84:f1:36:c0:fa:3c:d0:76:9c:24:60:f2:59:
34:39:17:1a:86:28:96:5e:6d:25:3c:b5:02:79:92:
9b:f7:07:8f:6b:30:3f:f3:3b:32:1b:0c:90:97:27:
fb:3f:38:d5:68:2a:c3:4d:c3:b2:65:a4:c8:37:7c:
08:55:ab:f4:d3:63:07:37:d2:5a:7c:b3:70:7d:e1:
d4:02:99:55:ed:69:86:ce:dd:23:5b:dc:d7:d2:3f:
bf:62:a1:70:fc:35:2f:1c:6d:e4:a2:1f:07:f1:7e:
66:1e:81:00:f2:ff:0a:0e:58:c1:f6:5f:d8:55:d0:
5e:19:f7:ed:5d:3b:c9:98:c6:a2:58:4c:00:22:b2:
26:97:7c:fd:24:bc:f6:62:91:eb:32:36:f2:e7:55:
ff:ee:c3:71:05:f5:db:45:c8:c5:dc:c9:49:a0:c8:
ad:b1:22:28:3d:99:76:9b:61:15:d4:b8:df:e0:b5:
16:45:cc:56:9c:96:93:1a:da:11:e9:fa:1d:44:0e:
e8:20:3d:60:31:51:c4:67:6c:15:51:d2:55:36:a2:
39:12:25:31:af:62:36:64:47:53:6d:63:13:a1:d4:
da:15:16:66:d7:e6:a5:ed:04:4e:c2:fa:e0:de:11:
99:22:36:77:38:2b:25:b1:30:ab:53:94:b7:2b:73:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:90:61:17:CA:D7:C8:11:4E:A6:48:5B:68:2B:92:07:25:49:CA:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f9af5-f88f-4b8d-b87e-ac58781b3d71/1/XZBhF8rXyBFOpkhbaCuSByVJyi0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a8:ce:f6:ab:f4:a6:ef:0d:d0:bb:23:e8:fd:9c:a6:de:6c:
e3:d7:08:c2:aa:f0:d3:eb:68:8a:34:88:2f:0e:88:d5:fa:cc:
f9:88:53:fb:de:82:4b:d1:92:1d:19:91:b2:58:e3:8f:d9:5f:
7e:4e:8d:3a:86:c2:4d:ad:ed:10:8a:11:c2:05:2c:e8:ae:80:
7c:d9:49:78:c7:28:af:6b:d5:00:3d:0b:ce:24:46:45:c5:ca:
57:6d:fb:24:20:ee:fe:06:a2:57:95:34:47:7d:5e:35:7f:27:
58:f1:b7:22:3e:73:18:21:8d:c7:18:40:53:c9:f9:92:be:24:
d1:0b:ba:d9:79:04:e8:fe:49:05:a8:a5:6a:44:01:04:77:43:
8e:7c:14:14:09:e3:a9:3c:66:c8:90:9a:bb:4f:5c:2c:ea:82:
09:a6:6f:b9:8f:35:3e:3c:49:1f:3a:e9:71:0d:88:77:4b:08:
6f:c2:f7:10:46:8a:33:f3:7f:c0:f6:52:f7:60:16:62:bb:62:
69:65:fa:8f:66:a8:94:4a:19:ff:04:06:ba:d3:71:14:49:15:
50:cb:ff:a3:bb:a6:59:cf:30:2c:6a:cb:b6:d6:ba:0b:c0:2d:
83:ef:8c:87:c3:b7:70:a6:34:1c:57:9e:6b:2d:aa:2a:12:dd:
0d:3d:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:57 2024 by rpki-client on console-fra.rpki-client.org