Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hWNWRitvoH85ziCDzkV9ZUGJDkg.cer
File: hWNWRitvoH85ziCDzkV9ZUGJDkg.cer (raw, json)
Hash identifier: XPvNI21Ef51G8ibORPxOIGUM7/yvjl3imrozrFJk6ok=
Subject key identifier: 85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A1D1DA4E82634365775DDD79DF59B0C3C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Aug 2023 11:59:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.99.0/24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 14:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:1d:a4:e8:26:34:36:57:75:dd:d7:9d:f5:9b:0c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 22 11:59:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=856356462b6fa07f39ce2083ce457d6541890e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:38:80:58:29:32:0c:34:29:cf:3f:f3:f3:
13:aa:18:87:35:64:22:87:16:08:05:5c:24:b7:13:
cf:bd:b0:a0:e5:d7:06:73:61:b1:a7:c3:6f:5f:2f:
ea:df:cb:c9:9f:bd:05:a4:86:9d:0e:fb:08:0b:b4:
bf:8b:bf:88:a6:aa:1a:af:82:49:8c:f4:4c:49:db:
73:4a:98:f4:ec:53:aa:f0:4c:cc:5a:68:43:dc:ea:
1d:6a:d1:de:d7:4b:e0:02:21:63:53:76:f5:97:5b:
4f:5a:e3:5b:6d:d5:86:00:c9:52:1e:98:6d:94:7a:
e9:a2:49:25:43:c3:b6:79:9f:42:46:1c:23:3f:2c:
8c:ac:2d:c7:f4:5f:7c:86:7c:9e:12:f3:32:1c:9c:
c6:7d:13:b2:77:76:5e:df:df:77:d1:3b:b9:09:84:
1b:4a:07:33:86:cb:1a:b9:58:71:b2:79:e2:dd:76:
90:ee:9d:7d:d2:b8:a9:8e:4f:5e:58:5b:f0:83:7a:
4f:42:b5:05:f9:c3:6b:4d:79:f5:6a:41:c3:01:96:
72:83:37:3d:54:ce:b9:aa:79:50:88:16:32:4d:03:
f2:ca:4b:60:32:b4:1b:26:4c:65:91:00:5f:19:ac:
34:1f:4b:1c:a9:2c:7e:9d:ea:8e:70:d9:79:b1:ec:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:56:46:2B:6F:A0:7F:39:CE:20:83:CE:45:7D:65:41:89:0E:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b31983-687a-4133-8985-7f2b242ebdc3/1/hWNWRitvoH85ziCDzkV9ZUGJDkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.99.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c1:bb:94:4a:45:4c:d3:aa:09:db:11:b7:c1:a5:93:19:e5:
52:4c:db:77:6f:86:aa:49:c1:5f:9c:7e:34:6a:c9:a2:45:87:
3b:0f:d7:16:4f:01:01:69:ed:71:e1:ad:91:57:b1:fe:ea:d5:
44:e4:53:a7:a7:78:04:3b:be:e4:c1:9e:d2:b1:59:b4:b8:f7:
00:be:fc:cd:17:a0:e6:5f:16:17:38:3f:27:f9:eb:5f:e0:ca:
4d:84:be:2b:83:ed:f8:0d:7f:02:44:0c:a1:3c:8f:b7:e5:1e:
3e:94:10:19:04:2f:71:0a:c9:02:88:8d:d1:ce:8a:37:7c:8d:
aa:3e:06:83:a7:15:86:91:16:b4:d2:9f:5f:8b:3c:6f:43:5a:
82:18:c7:06:13:bd:01:fe:85:02:57:9a:90:16:40:ea:7d:28:
db:40:26:9c:46:02:4e:93:5f:06:81:4e:c4:3b:fc:cf:c4:43:
42:16:4b:15:80:39:e9:5b:10:de:2d:4c:05:b5:4e:53:4f:6f:
0f:23:fc:01:9a:35:d0:db:b7:ac:d7:de:e6:b1:41:71:ef:c1:
2f:70:cf:71:9c:41:14:17:d9:6f:7d:6f:7e:92:8c:a2:f0:e0:
af:2c:8a:fc:39:17:b8:f8:9a:9e:9a:0e:21:e5:bf:c8:4d:39:
48:fd:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:34 2024 by rpki-client on console-fra.rpki-client.org