Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ipx8QSb_QYDbnWXN06wsZyaskac.cer
File: ipx8QSb_QYDbnWXN06wsZyaskac.cer (raw, json)
Hash identifier: SI4PA5rG6PVMCdcVV0gzfT0HNhm7bK7ubfZMyNoU4N8=
Subject key identifier: 8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018572461583975256B1CDDBCD84D21B34EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.22.24.0/24
IP: 2a11:d380::/29
Validation: Failed, certificate revoked on Tue 05 Sep 2023 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:15:83:97:52:56:b1:cd:db:cd:84:d2:1b:34:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a9c7c4126ff4180db9d65cdd3ac2c6726ac91a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:33:75:77:4c:85:13:1b:92:bd:a0:e6:f7:
18:a1:df:0b:60:06:4f:12:10:f3:4b:21:15:94:d5:
6a:d0:50:9c:c2:27:5c:14:39:fa:e6:0b:42:92:10:
1b:a7:09:a6:43:86:ca:cc:5c:e6:4b:f7:25:16:c7:
ee:e9:a7:af:e0:9c:db:a2:88:3e:c9:19:90:5d:3b:
21:e2:f5:1e:9a:3a:a2:b9:f7:bc:60:61:6e:30:b0:
47:cf:e2:88:bf:26:98:bb:bc:60:28:17:1c:a7:88:
0e:2b:7f:03:98:ff:6d:fb:c5:36:20:66:95:21:af:
08:75:e6:27:f5:72:f7:1a:28:f4:5f:ee:96:ba:ba:
fb:4f:81:34:21:23:e8:5e:eb:2d:c0:da:4a:0c:36:
cf:41:5f:fa:c3:3a:c1:b1:d3:ab:a1:44:ca:10:6e:
86:59:a9:09:d4:ac:04:90:10:b6:55:9d:17:4d:39:
fa:bd:9f:0c:fc:da:ac:ee:52:03:e4:cc:68:95:7e:
93:36:d9:ee:a2:b7:41:b1:44:86:d1:1f:98:cf:eb:
09:da:50:50:01:a8:e2:ec:be:0e:0d:ca:d5:73:e5:
48:cd:0f:db:50:21:95:b5:38:c0:77:bd:10:49:34:
e9:7e:85:55:f0:41:45:e6:d2:7b:3e:a8:3b:b2:36:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:7C:41:26:FF:41:80:DB:9D:65:CD:D3:AC:2C:67:26:AC:91:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7f52a4-153f-4431-a993-ebe044ca71b1/1/ipx8QSb_QYDbnWXN06wsZyaskac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.24.0/24
IPv6:
2a11:d380::/29
Signature Algorithm: sha256WithRSAEncryption
46:fb:5a:4a:62:e6:5a:66:09:f7:e9:c8:3d:19:10:e7:33:e5:
14:fd:4e:95:ad:e5:65:2d:52:f6:e8:bf:64:80:b8:e0:6c:b7:
a1:7a:37:2a:de:f4:ec:fa:56:33:3e:3f:3f:fa:36:0b:00:1b:
a6:81:b5:87:6f:6d:f8:47:5c:7c:da:fa:76:f2:0a:01:7c:93:
06:d6:3c:e5:17:42:fd:f3:7b:d9:58:ba:38:2b:69:86:64:e3:
a3:ed:d0:64:04:28:45:5d:f0:23:ff:85:1b:9e:d9:85:3c:51:
2b:dc:6e:34:22:10:3c:6b:6c:a5:3a:fa:de:68:6b:f5:df:cb:
77:69:1c:4d:f0:af:a0:24:dd:bf:9d:c4:ea:c7:76:71:8e:f7:
a6:33:af:08:65:23:28:2a:12:ba:02:1c:30:77:94:60:58:fc:
c5:0c:88:ee:cd:75:6a:8a:e8:0e:30:41:ca:13:2a:d7:57:b3:
1d:b7:70:4c:3e:44:bb:a3:d0:ec:fb:dc:c9:99:1f:c6:4c:e4:
92:34:29:b8:d4:79:80:1c:8c:64:d7:47:3d:eb:2b:85:7e:78:
0e:31:65:d9:44:1f:f4:3e:7d:19:63:8c:3a:f7:e3:f0:68:99:
c6:47:82:8f:3b:85:cb:8e:8a:4e:94:5a:b8:1d:54:c9:2c:c3:
54:a5:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:32 2024 by rpki-client on console-ams.rpki-client.org