Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gNBh_jYoEdznZOaaepm49r5fKgM.cer
File: gNBh_jYoEdznZOaaepm49r5fKgM.cer (raw, json)
Hash identifier: EG+NMxUcO/BHqawQjPV21iQYIFJ/ZznkKl6LQtdSQDQ=
Subject key identifier: 80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAE921281F87333076C8BF7EB66925C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.106.0/24
IP: 2a11:e940::/29
Validation: Failed, certificate revoked on Fri 10 Nov 2023 16:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:92:12:81:f8:73:33:07:6c:8b:f7:eb:66:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80d061fe362811dce764e69a7a99b8f6be5f2a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:0f:4b:2d:e8:5a:55:d1:6e:e6:da:e4:49:
e2:a1:ef:ce:ed:08:4d:65:88:dc:7c:61:ee:3a:af:
fb:08:e3:ef:77:bb:67:ba:06:8a:06:5a:f4:bf:c3:
ca:96:a7:00:d9:56:e8:7b:33:56:e1:91:18:e7:2d:
40:31:51:c6:a5:91:ef:79:f8:42:59:49:0c:68:88:
19:1b:f2:df:5b:8c:99:9c:bf:5a:a4:72:9a:2f:87:
72:4e:cf:dd:dd:4b:4f:54:68:8d:06:5a:54:bb:f7:
a1:bb:1d:bd:75:c8:90:5a:58:ff:9a:92:3b:d5:97:
db:7a:78:e2:e1:10:1f:37:b8:5d:86:f5:8a:92:ed:
bb:0f:48:5a:74:e1:de:dd:0a:f4:00:b8:64:f5:7e:
e8:58:cf:a0:df:01:37:3b:c9:b4:4b:ac:0e:8a:1c:
01:bc:21:8b:bc:5a:12:21:8c:99:aa:8e:09:1e:ca:
18:f0:aa:91:a2:60:af:e3:67:02:a2:f2:f3:22:4a:
bf:7c:f3:b9:5c:a7:24:92:c9:bc:6a:54:fb:fd:b1:
bd:0e:1e:af:73:54:09:15:fd:8a:2c:9a:14:7c:81:
09:62:88:94:67:91:41:f0:58:13:93:80:a9:90:20:
79:30:9a:dd:d1:cb:cf:fd:5c:fa:eb:20:24:27:18:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D0:61:FE:36:28:11:DC:E7:64:E6:9A:7A:99:B8:F6:BE:5F:2A:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/31fa62-cd40-4045-8692-ffea5bcc8d72/1/gNBh_jYoEdznZOaaepm49r5fKgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.106.0/24
IPv6:
2a11:e940::/29
Signature Algorithm: sha256WithRSAEncryption
07:b0:e5:f5:f6:5d:bc:f2:3c:b7:9d:5f:0a:d2:85:7b:42:68:
da:68:31:0a:d1:86:5a:56:c0:39:12:a0:40:57:a0:b4:a8:28:
77:2f:4d:9e:1b:6a:2c:2e:4c:63:00:ca:5b:94:68:12:71:f1:
76:5c:9e:86:d4:0c:b9:fc:82:ea:07:62:91:22:17:6e:40:44:
96:5c:b4:ee:c6:2e:af:3c:49:5a:c5:ce:eb:f1:20:ed:b6:d2:
9c:cf:e3:7b:a2:8d:3c:46:f8:82:44:8a:e0:18:52:3e:85:d6:
ae:64:f5:af:cb:68:28:c2:bd:89:3c:ad:88:24:ad:61:4e:0a:
0e:71:e5:8d:bf:c6:85:27:6c:23:bb:d1:f4:02:38:a0:08:1b:
68:09:8e:c7:3b:38:03:62:68:ee:d3:7c:6e:fe:1c:8a:9f:a7:
5f:54:7c:85:73:9b:77:55:cf:0a:5f:56:d0:4d:d5:51:5f:fd:
fc:09:3d:f7:48:29:de:ca:ee:ec:2f:0d:ef:ae:14:ff:87:92:
db:89:9a:bd:4f:d9:8c:06:fd:a5:ad:c8:99:31:c7:ac:ca:2c:
f9:c9:18:66:03:5f:32:a9:3d:24:cd:61:22:71:67:25:6a:52:
4f:8e:d6:a1:70:7b:3b:59:a2:99:cf:70:c1:7a:0b:b7:e9:ab:
c9:69:b8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:24 2024 by rpki-client on console-fra.rpki-client.org