Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dNfvRNcBnkpXI6kbHZj6j9XXjtc.cer
File: dNfvRNcBnkpXI6kbHZj6j9XXjtc.cer (raw, json)
Hash identifier: AgNzSSRvDT3vebKf8HCjJHfZ+kTCdp4WKVJo+F9gpQ8=
Subject key identifier: 74:D7:EF:44:D7:01:9E:4A:57:23:A9:1B:1D:98:FA:8F:D5:D7:8E:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857244C9A6264FB992A41DA4CC7AB0AE93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/dNfvRNcBnkpXI6kbHZj6j9XXjtc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 192.109.76.0/24
Validation: Failed, certificate revoked on Wed 08 Feb 2023 12:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:44:c9:a6:26:4f:b9:92:a4:1d:a4:cc:7a:b0:ae:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74d7ef44d7019e4a5723a91b1d98fa8fd5d78ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:23:65:5f:7f:98:80:67:33:a7:0e:3c:09:
4e:1b:16:81:42:a5:31:2b:b3:8b:46:ed:6b:4b:47:
ef:0e:6c:0a:cb:5c:7b:90:45:5d:27:b0:ea:34:a0:
76:54:06:1c:82:42:44:7c:78:77:9c:50:1b:38:d6:
82:9e:6d:38:56:39:ee:c4:a4:63:41:de:3d:3b:24:
7f:6f:0d:e8:a6:21:45:11:05:ce:7f:5d:85:bd:f3:
25:0e:85:9c:7e:68:77:a5:89:bd:36:e1:d0:24:21:
37:86:be:98:f5:ae:8f:b6:1b:46:2f:bc:ff:6e:94:
ad:54:1f:eb:7f:58:50:af:65:b5:e4:da:d0:c5:6a:
1c:1c:95:36:aa:cc:73:a2:38:9c:44:c1:39:60:88:
11:01:8e:fc:36:e0:60:df:9a:3f:fe:60:57:32:8a:
27:2e:fd:02:d9:0c:d8:cc:27:83:43:3e:62:50:63:
e6:ec:89:db:0c:94:c4:02:ae:11:06:c9:d1:68:37:
b2:d2:1e:3d:46:a3:a2:1f:9f:a9:a9:c3:f3:a2:fe:
6e:5e:2f:fa:a7:9c:b7:f2:85:e8:1c:c0:bb:01:71:
02:e0:6f:9a:f9:60:f9:ce:58:54:4b:91:72:cc:45:
60:94:fe:07:2e:2a:f0:b1:8d:9e:69:5c:91:26:87:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:EF:44:D7:01:9E:4A:57:23:A9:1B:1D:98:FA:8F:D5:D7:8E:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/dNfvRNcBnkpXI6kbHZj6j9XXjtc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.76.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ee:75:99:06:88:a2:6a:73:e9:ad:0c:86:6c:45:c5:61:67:
29:48:e4:c4:6c:0b:5a:a4:7d:87:d9:91:f0:42:56:05:c0:e2:
23:34:11:03:9f:93:33:2e:dd:0a:1e:d0:eb:dc:27:0f:82:4b:
9e:4e:51:71:6e:bf:ba:8c:a2:24:fd:cb:5f:4f:45:89:78:0d:
65:ae:b5:f0:f2:a6:11:c0:9c:89:04:86:44:be:0d:3a:71:85:
92:2a:2e:27:9d:46:a5:df:da:cf:e2:fd:e2:8a:96:14:d5:3f:
e8:de:b6:2a:94:58:fc:05:74:3a:62:d0:24:d8:ab:17:96:9c:
76:76:3d:25:67:07:02:50:b5:8c:43:e0:58:ed:54:92:7c:9e:
2a:e1:96:04:42:63:fb:c6:7a:eb:0f:37:70:c5:f7:54:8a:a7:
ee:bc:c7:5b:c6:15:03:8f:7a:f0:e2:ec:8f:21:c7:6e:d2:c5:
f3:49:c4:5a:7e:b0:5f:cf:6f:6f:8a:64:22:82:d8:9a:be:82:
f7:b8:d8:9e:8b:09:89:a0:87:91:14:4b:e3:a3:27:95:38:2a:
1b:56:07:f7:39:5c:b5:a3:08:16:d1:13:c1:05:f0:2f:b7:bc:
55:be:20:9e:c3:6d:8c:9e:20:e7:97:0b:07:c0:fc:99:92:8f:
b7:41:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:59 2024 by rpki-client on console-fra.rpki-client.org