Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hx2bGCHAqdFiK93fnsDJGOkqQ34.cer
File: hx2bGCHAqdFiK93fnsDJGOkqQ34.cer (raw, json)
Hash identifier: G686Y44Ui4b8zGZMizoD8DmxUyspv+7w034NtLzzwE4=
Subject key identifier: 87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAE85CEF337DDA5A58B56202D8F9EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.151.4.0/22
Validation: Failed, certificate revoked on Wed 28 Feb 2024 14:36:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:5c:ef:33:7d:da:5a:58:b5:62:02:d8:f9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=871d9b1821c0a9d1622bdddf9ec0c918e92a437e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:d6:66:eb:54:05:c1:70:e8:d3:e0:48:83:
3c:da:1a:8b:f7:17:f6:79:31:c8:2a:2e:00:bd:b6:
e5:69:f8:7d:34:d9:ca:fa:b6:3a:0c:df:63:9b:0f:
6e:38:9a:62:34:28:eb:38:87:16:e6:d5:f7:15:9c:
4b:bc:ae:b5:f8:49:ac:83:de:f1:cf:22:6d:97:25:
a8:d9:47:01:cc:40:9b:79:2c:76:24:a8:44:13:a9:
71:eb:10:6e:53:71:eb:ed:d7:38:89:dc:c6:a8:48:
0c:e2:73:c4:71:6c:69:d4:85:b5:7b:c1:ff:8b:da:
82:ca:25:d4:b4:62:46:42:a9:27:a3:a7:d3:e3:a5:
3d:c4:10:0e:76:ab:bc:13:a7:60:24:3a:7b:94:7b:
07:bb:b6:6d:1e:ae:ec:49:40:a9:e5:e2:70:98:36:
35:08:bb:93:4f:2d:74:2e:ef:61:a3:26:09:14:03:
bc:0d:57:98:b6:bd:c1:58:e6:3d:5c:10:99:1f:b2:
4f:8a:1a:f0:3e:af:8b:19:e9:61:8e:7e:e7:67:03:
e6:fd:11:48:e7:80:e9:19:bf:a2:4f:89:c9:5e:dd:
d5:51:da:86:1d:c3:74:0c:c4:62:e7:4a:d7:81:42:
d7:41:5b:03:96:89:66:7a:05:8f:ba:13:0e:a2:83:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:9B:18:21:C0:A9:D1:62:2B:DD:DF:9E:C0:C9:18:E9:2A:43:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5bfa91-b9cf-4460-b124-a647a4aedea7/1/hx2bGCHAqdFiK93fnsDJGOkqQ34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.4.0/22
Signature Algorithm: sha256WithRSAEncryption
23:87:fb:bc:60:71:3f:59:ac:4e:e4:b9:b7:9d:ed:c5:58:7b:
37:1b:0a:50:7e:0e:3e:c8:f2:5d:71:8c:10:4e:51:5f:46:90:
02:49:4b:e5:bc:72:6c:98:6e:75:5f:7e:91:1d:0e:77:8d:20:
88:4f:11:00:b0:20:4c:c6:60:59:90:8f:7c:3f:a8:dc:3a:ee:
6c:77:fa:40:42:72:a0:fe:c5:8b:c8:68:91:d8:a1:4b:24:85:
9c:a0:c2:58:7e:89:76:d7:fa:33:8a:c4:c1:03:08:e3:a5:d6:
2c:a5:86:5b:94:9b:10:70:6b:60:34:ec:b2:53:23:b8:aa:a3:
2e:33:59:df:f7:21:98:37:af:5a:28:2c:c1:9f:60:2b:e3:3f:
8e:71:24:6f:be:5a:79:ee:6c:1f:d2:fa:b7:5b:22:9d:f5:88:
5f:37:80:bd:85:7f:2a:87:17:0a:bb:d7:7a:73:fe:2d:49:8c:
5e:51:2d:6a:ba:83:78:ec:b2:e4:20:65:22:04:62:a9:76:cf:
76:35:62:16:10:3f:08:14:8e:b3:b1:4e:50:77:49:ef:95:67:
e5:35:8e:7b:f6:b0:13:f9:09:76:44:50:52:8a:3a:70:c3:8b:
20:af:2b:5e:2d:3a:93:b1:87:c4:76:18:40:3e:33:ab:01:28:
87:12:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:37 2024 by rpki-client on console-fra.rpki-client.org