Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer
File: XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer (raw, json)
Hash identifier: TAFQlZSUGLnlPRz/MbC+VD8/8On+EWaz/Q1p7pBRWOw=
Subject key identifier: 5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65A81A75374C9A682D1D94ED85B657
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.148.0/24
IP: 2a12:cc00::/29
Validation: Failed, certificate revoked on Wed 08 Nov 2023 10:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:a8:1a:75:37:4c:9a:68:2d:1d:94:ed:85:b6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea5531451734961fc4e89cef3f09c76a33f423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:e8:99:2b:8c:e9:9c:9a:4f:39:ed:bc:05:
8a:f0:65:a6:18:ee:31:09:b2:45:1e:d4:46:77:61:
3b:83:30:d9:6f:ea:dc:d4:61:48:f7:f8:b2:2b:4d:
27:4a:be:ec:62:e8:3d:21:05:0a:25:6b:b9:ab:44:
cb:a5:97:8d:7d:a9:d6:d6:12:fa:e2:b4:2c:76:9c:
c3:76:22:d6:f6:46:67:71:3a:0f:1c:3f:3b:34:de:
7d:5e:ff:f9:0d:a0:9e:92:fc:75:3b:ef:88:e4:b0:
16:37:9e:e4:e1:f0:59:19:d3:2c:11:42:e6:e9:27:
ba:83:46:dd:7e:44:8d:40:e9:f3:f1:c1:85:e5:bb:
75:ed:74:c6:01:a1:dd:20:d9:3b:22:11:57:a2:8e:
ae:58:c1:39:09:dd:c5:a7:42:e5:f0:74:7a:89:2b:
99:61:ee:5c:d9:17:5f:eb:71:1f:8b:21:94:59:aa:
9c:7e:f5:62:2b:25:b1:46:8a:f5:9a:ad:fb:83:b2:
f0:ce:43:2d:aa:6e:aa:54:eb:d7:24:3f:3b:b7:39:
24:b3:e6:cb:c6:31:e1:5d:43:7f:03:77:89:db:81:
9c:00:1a:e2:96:27:c6:50:5c:05:24:bf:da:e6:76:
ec:4a:84:1d:a5:c3:32:a6:52:82:97:94:26:5f:ae:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.148.0/24
IPv6:
2a12:cc00::/29
Signature Algorithm: sha256WithRSAEncryption
2a:2f:1e:45:e8:62:b7:2b:50:2e:e0:0f:49:8c:f9:cc:b7:d0:
47:9d:74:7b:11:5f:87:d9:63:1e:a8:41:ab:92:15:da:d8:f7:
fb:d7:2c:16:dc:ac:12:df:79:0c:ef:16:23:41:20:a7:9d:97:
b4:93:70:54:04:6f:87:28:90:25:cc:3b:94:39:87:cf:76:ec:
65:db:ee:68:25:83:a9:95:97:2b:f1:9c:e6:cd:92:a3:9c:9c:
a5:6a:8b:00:8b:83:20:c9:9d:03:aa:72:7c:b1:d8:d9:4f:f1:
b7:78:ec:aa:70:f4:8e:d3:9e:78:d5:18:8f:cc:c9:ef:95:b7:
15:f4:b8:52:58:c5:e8:f2:87:8a:d1:dd:8c:be:61:6e:af:60:
f5:de:1d:e5:5e:ae:f6:4c:00:09:de:d3:43:ad:8a:0c:34:c8:
f7:d7:73:63:a8:c5:74:bd:cb:db:26:b6:14:41:61:b7:ab:4c:
fb:ff:92:a6:d2:bb:71:87:4b:47:94:95:c3:22:a8:e0:16:a8:
39:c6:b4:ee:bd:14:e3:74:5b:b1:54:a5:13:31:fa:2f:af:9b:
7a:1f:46:35:36:38:82:db:21:9a:65:a8:03:cb:83:5c:27:70:
99:78:60:8b:8d:d5:f1:92:2e:d7:f2:61:f7:b6:f1:8d:5d:df:
d6:b8:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:39 2024 by rpki-client on console-ams.rpki-client.org