Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZpnpj2wkbr5UNUczSCCfbgSWxM.cer
File: dZpnpj2wkbr5UNUczSCCfbgSWxM.cer (raw, json)
Hash identifier: B9K8mmM37DO6skpzgw5ub05MCPiyR70u8zc1e4q73j8=
Subject key identifier: 75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245C10B9EF6BF653B8019796C36C823
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.46.0/24
IP: 2a12:3f00::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 13:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:c1:0b:9e:f6:bf:65:3b:80:19:79:6c:36:c8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=759a67a63db091baf950d51ccd20827db8125b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:e2:f4:8e:99:1d:ca:ef:d8:f3:ae:c3:db:
4d:de:32:b9:78:e6:2e:f7:c4:99:cb:e7:2a:74:15:
82:f5:6a:ed:3f:c4:81:f5:32:df:b3:78:24:0f:ef:
6d:e8:a2:d6:55:5a:77:33:27:27:2f:64:dd:16:3a:
1c:06:25:63:a2:1a:16:fa:1e:5d:4a:23:da:c5:ab:
9a:7d:ef:05:17:2f:bc:f2:ed:84:9d:d7:4a:e6:49:
da:aa:e4:5c:94:e7:14:aa:6a:d3:76:37:25:ed:4b:
f8:1a:2b:e6:5b:d2:7a:fe:95:e5:95:1a:5c:ad:f6:
e1:e1:73:38:68:11:0c:97:7b:48:df:d1:08:dc:ce:
83:e2:e5:95:48:d9:8b:c6:77:9a:3b:88:4d:42:1d:
b9:65:c2:62:f5:0b:9f:95:cd:e7:19:f0:be:58:e3:
79:d3:cd:b1:26:50:f9:1d:8a:3e:a0:89:97:a2:8c:
af:71:19:e5:12:3f:6e:d6:f7:f5:63:fb:b2:0d:35:
c6:c6:2d:a0:a4:5c:20:d0:5a:c9:ee:bd:92:3f:c8:
f1:19:4f:de:ae:df:65:01:21:20:34:75:a7:f6:00:
9d:23:3c:f1:36:b0:7d:2e:89:1b:d6:10:c1:e2:a6:
0d:7f:a0:60:4e:d4:f1:fa:75:73:14:1d:b8:c4:b2:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9A:67:A6:3D:B0:91:BA:F9:50:D5:1C:CD:20:82:7D:B8:12:5B:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b7515f-7ecf-40b0-b26a-661acc4845e4/1/dZpnpj2wkbr5UNUczSCCfbgSWxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.46.0/24
IPv6:
2a12:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
b1:18:9c:65:68:9d:d2:5b:3d:2e:90:81:d7:67:01:c6:1d:eb:
8e:e7:26:20:99:f6:5a:14:96:a0:ea:93:87:e9:e0:93:19:29:
a4:55:5e:c4:10:c7:2e:d0:cf:05:e0:5e:f3:a2:64:ac:a2:52:
65:ce:e6:53:91:28:a1:9a:eb:a9:08:c0:96:b3:68:e5:1c:36:
77:de:44:75:da:43:b6:05:da:a4:39:67:52:53:62:e2:ea:ae:
80:91:2d:3a:7f:6b:74:0d:73:4a:36:53:85:f3:67:ca:68:8a:
b0:50:bb:fc:13:30:d2:91:91:f4:49:93:c3:f5:78:3b:a6:af:
d1:fd:7d:6d:f0:99:cd:cd:19:5a:06:62:f2:b7:b1:2f:20:87:
35:57:3e:bd:c2:5f:0e:bc:3c:b1:ab:a2:8d:a8:4e:a1:54:e3:
8b:bb:cc:37:ee:87:bf:1f:e3:f5:40:ee:38:6c:cb:aa:db:fc:
3d:aa:de:12:94:c3:f2:20:b2:5a:71:f7:d1:b0:5a:b7:ae:1e:
31:fc:d7:eb:9e:6f:26:25:b7:67:48:2d:46:89:a9:58:2c:22:
79:71:9a:3f:62:f8:0b:2d:e2:94:38:5d:49:90:55:e3:6d:c3:
6b:68:6c:22:f7:2d:91:85:f1:62:bc:f1:fd:7a:7e:1b:2b:38:
f0:ca:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:01 2024 by rpki-client on console-fra.rpki-client.org