Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aOB9dlla_NLSno068JyU1KDdg0g.cer
File: aOB9dlla_NLSno068JyU1KDdg0g.cer (raw, json)
Hash identifier: V7pC26BbnuJHyDr4DnkbLUQ0FPx9bWb9YUjqC9Zn/xg=
Subject key identifier: 68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E017F596CBB3C2AF545E1304E2F6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.80.0/24
IP: 2a11:8d40::/29
Validation: Failed, certificate revoked on Mon 30 Oct 2023 14:07:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:01:7f:59:6c:bb:3c:2a:f5:45:e1:30:4e:2f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68e07d76595afcd2d29e8d3af09c94d4a0dd8348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:5a:3d:c1:04:3a:d1:7a:0e:61:8b:fd:d9:
27:8e:0e:75:f6:ec:d1:dd:01:dd:79:40:1a:18:a1:
03:72:a9:d3:e0:ee:74:17:b2:7f:b2:38:5e:ca:ef:
0e:59:8e:e1:d6:3b:61:5e:3c:0c:c6:a5:e6:12:0e:
13:d6:27:90:e8:aa:36:aa:d1:e2:5e:9f:f6:fc:5d:
8a:1e:11:c2:4f:2f:1b:43:bf:5e:6b:6f:da:03:58:
c3:be:20:cd:55:31:92:de:a9:b3:a2:bb:c2:e6:2c:
7c:fb:75:12:27:74:4a:54:a3:c1:18:7c:f7:93:60:
98:7e:76:10:71:29:d7:73:28:8a:c5:fd:a1:a4:de:
f9:15:15:28:b1:bf:f7:f5:89:e7:0d:58:4c:04:b2:
ed:a6:f2:54:da:5f:40:e7:91:e5:83:ea:c4:f2:87:
17:d6:17:8b:49:76:e2:31:b9:83:86:0f:2f:f5:74:
ee:c9:71:49:80:52:25:ae:2b:c8:88:61:0b:ae:2c:
b2:9d:35:86:e0:67:d0:dc:77:9f:4b:0a:36:92:b4:
45:e8:dd:f1:5e:3b:9b:e5:65:8f:d9:43:61:df:8d:
25:0f:42:46:0a:93:3c:3f:54:33:f6:39:1a:ac:5e:
84:19:08:23:b0:3e:80:f1:f0:12:66:b3:7a:f1:9b:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:7D:76:59:5A:FC:D2:D2:9E:8D:3A:F0:9C:94:D4:A0:DD:83:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/219b59-ea14-44af-877e-99817fd559ca/1/aOB9dlla_NLSno068JyU1KDdg0g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.80.0/24
IPv6:
2a11:8d40::/29
Signature Algorithm: sha256WithRSAEncryption
28:39:7a:bc:68:59:30:43:90:f2:89:ff:b7:88:9d:b7:87:d1:
4d:07:82:37:c8:ee:78:6a:61:07:1c:60:88:10:b8:50:60:64:
c8:ad:6c:4d:bd:70:47:b4:e3:f3:d6:80:b0:05:73:76:63:7c:
88:91:d7:43:d8:11:72:a9:be:d5:9d:36:78:06:ca:30:0f:6d:
cf:af:20:e7:1e:78:44:41:02:1e:37:69:3c:c6:dc:c2:5f:ed:
05:3d:c2:da:b1:57:b0:b7:34:2c:a1:34:e4:8a:fc:08:a5:26:
bb:92:48:f9:58:eb:4e:41:66:9a:68:66:af:a7:71:ea:6e:c1:
b2:d9:84:02:8c:6b:b1:ec:26:05:42:4d:92:78:dd:5b:0f:94:
5b:90:c7:d7:56:dd:e2:0a:c7:c2:38:a4:09:c5:71:15:ac:bb:
98:ba:4f:29:71:72:b8:72:ae:65:5e:e8:d9:c2:9a:5b:89:33:
bf:eb:c4:82:b6:d3:64:96:e7:00:d0:2c:2e:9e:be:c8:61:c9:
9d:27:6c:a2:e4:52:be:38:a9:bf:e0:ab:17:18:71:46:52:69:
8e:a1:55:08:28:37:b4:f6:75:a8:5d:5c:71:2c:ae:46:9b:7e:
a5:80:79:94:45:a9:1a:1c:86:1b:0a:54:f1:0d:de:f2:bd:4e:
3d:f6:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:32 2024 by rpki-client on console-ams.rpki-client.org