Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aKg5zIFZ_F09dd7fYqrbgcQOq-0.cer
File: aKg5zIFZ_F09dd7fYqrbgcQOq-0.cer (raw, json)
Hash identifier: YttQGUVdXUYpnkzN4HXI55OO4jcoW+xGuYlfxCBi57k=
Subject key identifier: 68:A8:39:CC:81:59:FC:5D:3D:75:DE:DF:62:AA:DB:81:C4:0E:AB:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F76BA134EAA04DBEFC27EF95BC5ACA4DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 14 May 2024 10:50:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.28.129.0/24
Validation: Failed, certificate revoked on Wed 15 May 2024 12:20:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:ba:13:4e:aa:04:db:ef:c2:7e:f9:5b:c5:ac:a4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 14 10:50:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68a839cc8159fc5d3d75dedf62aadb81c40eabed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:45:15:93:fc:05:c9:0c:87:3f:f1:0b:c8:
54:c6:09:8e:98:fe:90:00:00:45:7c:52:f5:20:69:
f6:5d:7b:45:1e:18:ef:2d:80:1e:77:5e:6a:e7:2a:
75:fc:67:c5:20:75:9b:a3:b0:f8:29:6d:b3:90:fb:
c5:4e:d0:2d:ea:ca:67:7c:0e:61:aa:56:01:21:19:
5b:90:94:03:dc:22:b8:8f:a2:0b:10:ac:3d:5a:29:
c6:3b:77:ec:74:32:21:93:19:db:bc:93:ab:74:13:
6f:af:1c:a2:00:0d:fc:77:c3:f4:e8:99:c5:72:12:
93:37:e6:26:22:14:ce:c1:a7:1d:1b:1d:71:42:bd:
b2:9d:ca:64:8d:f0:f3:1a:ee:78:b5:a8:f1:a8:2b:
17:8b:ea:50:f9:29:4a:3a:b9:5f:b6:10:44:54:cc:
f2:a9:b3:81:9d:33:98:b6:04:a9:0a:4a:78:ef:75:
67:48:c4:80:40:bc:85:ec:d1:a4:da:60:50:a2:0b:
a3:44:48:8f:b8:d1:32:be:94:ed:f2:19:09:ca:6a:
93:ca:1b:96:e5:7f:22:d2:52:b0:e8:da:1f:b9:a9:
1f:52:72:3c:7c:9c:08:be:76:7f:a3:24:1b:29:39:
6d:80:03:ad:e2:f2:0f:aa:6c:b7:8d:f2:2f:6e:93:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:39:CC:81:59:FC:5D:3D:75:DE:DF:62:AA:DB:81:C4:0E:AB:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f631d-d0a1-4e23-96f8-1b2b2faf1cac/1/aKg5zIFZ_F09dd7fYqrbgcQOq-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b0:a5:71:db:d6:1d:7a:ac:8b:5a:35:61:3c:d1:57:7e:99:
bf:6c:1e:3c:b9:ef:5d:f7:1b:69:cf:60:a9:62:48:81:06:95:
2e:4a:d6:ee:7f:f4:52:c4:54:26:e6:2b:ad:a2:41:ca:91:23:
33:57:b4:db:f8:ef:ed:94:56:83:c0:d9:7e:47:86:71:d6:90:
44:d0:0f:f9:0b:d2:4a:2c:1f:7c:b5:45:74:13:21:57:96:8e:
3b:1e:a8:98:88:7a:1b:0c:ad:8e:92:be:b9:0e:14:1c:a2:9e:
8f:d9:1f:f3:0b:14:1f:22:dc:7c:46:2c:51:cd:5a:a9:ee:90:
1b:a2:2a:fe:4e:52:9a:5d:e8:83:09:ec:99:12:96:5b:9d:c8:
13:9c:1f:a0:5a:4e:8a:c9:4f:00:d6:04:99:62:fc:50:d7:1a:
f3:28:d0:ee:09:76:a3:93:03:92:04:e6:ed:14:ab:47:70:26:
9d:a9:57:18:96:ab:6f:0c:b0:90:cd:60:7b:2f:7a:9a:76:64:
a7:5f:fb:06:51:37:fd:b6:24:f3:28:23:d3:a4:c4:1f:f4:61:
53:32:d0:db:84:8a:39:ea:a1:1f:2b:a8:1c:01:bd:56:24:f0:
22:29:d3:14:ba:e8:f3:7c:de:ac:0c:c3:d1:6a:4e:27:80:cc:
d7:89:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:31 2024 by rpki-client on console-ams.rpki-client.org