Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xbawwe2vg4aJSYvsUCyWO5HHP6E.cer
File: Xbawwe2vg4aJSYvsUCyWO5HHP6E.cer (raw, json)
Hash identifier: iZmjfebvsUEfmTRMy/3WWkOjMAh2QDpvJrjicqMJngI=
Subject key identifier: 5D:B6:B0:C1:ED:AF:83:86:89:49:8B:EC:50:2C:96:3B:91:C7:3F:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0D3733A2A1B613765FE80074E677F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8589d-785b-4728-81bb-e259e0bc0ed3/1/Xbawwe2vg4aJSYvsUCyWO5HHP6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8589d-785b-4728-81bb-e259e0bc0ed3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 192.42.124.0/24
IP: 192.42.126.0/23
Validation: Failed, certificate revoked on Wed 25 Oct 2023 10:52:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:d3:73:3a:2a:1b:61:37:65:fe:80:07:4e:67:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5db6b0c1edaf838689498bec502c963b91c73fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:65:aa:dd:57:5f:01:df:34:f0:6d:e0:94:
e0:a7:f3:56:cb:4d:57:c8:2a:c9:6c:a5:31:15:58:
8f:79:b3:2f:99:28:86:54:56:7d:98:ff:37:c4:a7:
5e:77:24:11:38:72:23:94:90:19:09:78:6c:ff:51:
b5:b3:3d:dd:e9:3e:9e:ca:65:70:b7:69:1d:e9:d1:
a2:35:58:9f:fb:a2:9d:f0:3e:c5:5d:f5:5a:35:2e:
66:68:1f:46:6e:21:18:36:9b:4c:22:97:ff:7a:3f:
91:bf:ad:53:d3:85:ac:72:65:94:20:40:c9:c5:fb:
a4:17:cf:d2:34:f9:6d:34:7a:a3:5a:2d:c1:db:9f:
8e:71:67:a7:fa:d6:d4:0a:0f:a1:58:9b:ae:29:11:
01:6b:93:e2:3e:38:85:20:b8:eb:ab:65:3f:3d:13:
1a:c7:12:7f:32:13:c1:dc:40:d0:51:50:ba:b0:bc:
e8:a6:df:06:5c:1f:ee:25:a8:1a:6c:50:f5:d7:fd:
aa:ee:fd:2d:41:24:12:24:12:73:e5:42:52:29:ad:
0a:78:d7:0c:99:77:70:00:6f:63:b0:67:d0:43:fa:
4b:42:ce:9d:b6:c9:8b:93:31:f7:2c:d2:7d:27:4b:
0d:1e:e5:83:1d:97:b0:c0:c8:5c:c3:4f:f6:c7:da:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:B0:C1:ED:AF:83:86:89:49:8B:EC:50:2C:96:3B:91:C7:3F:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8589d-785b-4728-81bb-e259e0bc0ed3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8589d-785b-4728-81bb-e259e0bc0ed3/1/Xbawwe2vg4aJSYvsUCyWO5HHP6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.124.0/24
192.42.126.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ed:c4:ac:fe:7e:4e:e2:9b:eb:7b:6c:75:b4:8a:e0:77:ee:
0f:78:d8:bb:d9:26:47:9d:8d:97:8e:97:f8:8a:a1:45:29:4e:
41:64:3e:15:c6:3b:ab:3a:d5:21:26:56:3f:d9:dd:38:1b:b4:
c3:f3:6d:b7:f6:08:da:56:86:dc:8a:98:77:3c:ec:16:39:55:
84:21:73:4f:fa:5f:a9:f8:ed:08:07:02:9b:0d:b9:99:9a:55:
e6:86:0f:e8:e3:ca:e0:18:a4:2f:d7:1c:f9:23:8c:aa:1e:1a:
a6:5e:6e:64:eb:b7:c5:a7:a6:4e:17:0c:d0:f9:0e:bd:d1:7e:
99:f0:00:63:53:8e:c4:9b:7e:c6:11:0b:96:2d:7b:15:45:6c:
21:e8:5a:f4:8e:f0:de:b2:35:36:67:a6:1c:37:ce:bf:e2:92:
11:14:9a:4a:75:98:d3:6b:0d:8a:e7:4b:d0:66:84:ed:ef:5a:
8b:ad:fa:06:d4:54:3c:86:ec:65:f1:2b:b0:12:d2:d2:3e:9d:
52:e4:3f:4a:64:f5:a4:c5:f4:04:64:b8:e6:da:db:df:f5:d0:
ff:ef:00:39:73:d7:38:aa:d5:ac:b5:5c:71:ce:43:18:40:c7:
09:af:ae:5d:62:a2:77:7e:ac:4c:09:3f:d4:77:1c:b9:ba:a8:
4b:94:de:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:58 2024 by rpki-client on console-fra.rpki-client.org