Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XqnkDWE2VSnTf0B0pbqtqSbAvvk.cer
File: XqnkDWE2VSnTf0B0pbqtqSbAvvk.cer (raw, json)
Hash identifier: lb2A7COeOvHSz4C6LxiFD9Zn8CBgCStS4yk6HtJo7LM=
Subject key identifier: 5E:A9:E4:0D:61:36:55:29:D3:7F:40:74:A5:BA:AD:A9:26:C0:BE:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF516C1FBB51E5857A3D73A026D15F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/5a4b9f-6464-4038-86a0-4ff499fae16e/1/XqnkDWE2VSnTf0B0pbqtqSbAvvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/5a4b9f-6464-4038-86a0-4ff499fae16e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.56.32.0/24
IP: 2a11:bc80::/29
Validation: Failed, certificate revoked on Tue 19 Sep 2023 09:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:16:c1:fb:b5:1e:58:57:a3:d7:3a:02:6d:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ea9e40d61365529d37f4074a5baada926c0bef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:e5:4b:b8:25:28:c0:00:06:42:0b:09:59:
09:e8:86:90:13:25:74:45:05:07:c4:f6:cc:fd:17:
92:69:cc:2b:3a:ce:89:6d:71:bc:83:e4:dc:b9:04:
c1:d0:87:84:51:7c:7a:43:f7:75:92:80:84:14:a0:
05:f8:2c:9f:5a:72:7b:4f:99:e0:f5:44:44:81:ab:
31:23:cd:a5:ef:f8:57:b9:5c:fc:c4:3a:db:62:ac:
9e:ed:74:50:45:ae:f8:ba:da:50:b3:f8:ff:48:2a:
bd:29:83:ad:bb:51:07:d1:1a:c4:6a:c4:f5:7b:70:
a4:ba:39:f1:9a:63:6c:14:53:84:90:0a:52:8c:2b:
10:19:8d:07:9d:27:34:a1:52:31:45:d5:de:cd:05:
f8:30:b7:80:9d:df:a2:e7:7b:98:10:78:b5:97:09:
cd:ac:80:5d:9c:8f:c3:c4:7f:60:e0:0b:74:10:7d:
ff:e0:bc:63:b0:11:96:01:ef:a8:f6:dc:87:c4:7d:
35:1a:d5:5d:3c:ae:f4:b6:2e:62:c3:e4:7a:f9:69:
25:c6:a1:18:f0:69:60:02:46:df:76:ca:02:f0:b6:
ce:83:b3:da:7e:e7:27:30:9d:72:64:e1:fc:fb:bc:
3a:c9:8a:d2:6c:df:28:fe:dd:63:14:a7:85:4f:a6:
92:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A9:E4:0D:61:36:55:29:D3:7F:40:74:A5:BA:AD:A9:26:C0:BE:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a4b9f-6464-4038-86a0-4ff499fae16e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5a4b9f-6464-4038-86a0-4ff499fae16e/1/XqnkDWE2VSnTf0B0pbqtqSbAvvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.32.0/24
IPv6:
2a11:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
6f:0c:bb:af:33:7f:a3:15:52:5b:06:1e:cb:a5:6d:33:d2:0f:
a7:e5:53:33:c9:05:9a:6b:3f:37:b4:3d:1c:26:c8:15:61:66:
b8:6f:22:c4:19:9a:50:42:f8:13:0a:e9:5c:05:72:16:c5:55:
52:99:54:95:d8:eb:38:49:25:44:2a:96:ea:ed:02:71:e6:d9:
92:4e:71:82:35:e5:a9:2f:16:ae:64:a5:47:0a:e6:87:76:5a:
f3:50:ef:52:d9:4d:df:87:a4:76:ba:a8:8a:3a:99:83:17:1f:
1e:9f:5e:03:1c:e8:9e:fe:48:54:68:ab:82:19:bc:84:58:39:
ea:39:f5:be:4b:5e:b4:af:05:c4:d5:e5:9e:e2:7e:d7:c0:57:
c1:f4:2d:86:63:f8:dc:45:52:a1:b9:b1:04:ba:6f:f8:bc:c6:
6e:e8:9d:9c:d7:21:b5:62:e0:75:f7:df:9b:68:ca:36:9e:ad:
eb:0e:e0:13:b5:85:f8:22:93:6a:0f:fe:ec:44:1d:fe:b3:86:
ed:ec:6c:0c:d7:b1:96:51:64:d9:a9:40:7f:5d:ba:ef:77:6c:
73:07:8c:a0:63:ef:be:7b:9b:77:2c:4c:c0:d1:47:1c:f3:5a:
08:08:ff:03:62:a1:b4:78:54:df:91:e7:e7:23:23:94:ea:e8:
d2:08:0d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:02 2024 by rpki-client on console-fra.rpki-client.org