Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j7GhgTO_OE5wmeWYXED-KB4tp1U.cer
File: j7GhgTO_OE5wmeWYXED-KB4tp1U.cer (raw, json)
Hash identifier: nmaiLyaVi0KAPAFuWupVo16QDOKolU6j7V4/pHRgU4g=
Subject key identifier: 8F:B1:A1:81:33:BF:38:4E:70:99:E5:98:5C:40:FE:28:1E:2D:A7:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857244FD5938FA21E78B9E8D1F071A7A1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/j7GhgTO_OE5wmeWYXED-KB4tp1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.126.0/24
IP: 2a11:f040::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 09:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:44:fd:59:38:fa:21:e7:8b:9e:8d:1f:07:1a:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fb1a18133bf384e7099e5985c40fe281e2da755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:db:be:fa:dc:6a:10:12:e8:b5:9a:93:e7:
26:12:67:4f:ca:00:02:d1:32:50:93:f1:65:2d:9c:
c2:b9:b1:6a:bf:31:92:a0:10:df:90:56:0c:be:1e:
04:a8:09:03:3c:ef:2d:6d:f8:a4:ef:54:36:7f:88:
de:39:40:91:5b:a8:6b:7e:12:b5:ed:e5:a2:3f:d2:
05:f5:8f:37:58:d6:3e:ee:ce:b6:f2:0a:cb:9f:41:
cb:c2:58:77:2f:fb:f6:7c:52:65:48:f7:95:65:6d:
70:70:38:52:dc:bf:f6:fe:62:89:08:92:a4:73:dd:
de:7b:ea:a9:99:14:c0:a2:b9:c9:12:ac:d5:4e:d9:
1e:98:bd:55:f9:e1:4a:a4:49:15:5f:b5:3a:ba:74:
e1:e5:11:eb:99:2d:e9:93:86:31:f0:b3:7b:a7:a5:
3e:4a:5e:2d:2e:d1:1c:a5:7d:2c:86:e4:b3:07:8e:
8e:75:43:55:59:3a:91:17:05:a8:9d:61:f7:bc:a2:
04:92:b1:17:c4:b7:88:79:77:b2:08:68:a1:92:c2:
6b:0d:f2:fd:e6:5f:70:a7:55:8b:db:55:c1:81:3f:
4e:08:82:60:c3:2e:1e:7b:75:cd:80:d4:38:e5:db:
44:69:c3:3f:1d:5b:dd:ca:48:7e:77:2a:7d:04:d9:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:A1:81:33:BF:38:4E:70:99:E5:98:5C:40:FE:28:1E:2D:A7:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/977fa3-3f65-4f40-9105-8603cdecf9a2/1/j7GhgTO_OE5wmeWYXED-KB4tp1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.126.0/24
IPv6:
2a11:f040::/29
Signature Algorithm: sha256WithRSAEncryption
5c:76:16:5a:02:f7:3b:14:95:7e:de:ea:a5:c2:a7:56:3a:45:
5f:01:0c:28:fe:dc:79:3a:f6:ce:9b:ac:c6:30:5d:c8:b8:40:
fb:36:9e:34:38:ef:9a:a1:d6:59:ba:82:22:51:27:5b:e3:f1:
c7:e4:28:52:a0:de:a5:bb:ce:5a:7b:94:45:41:e6:8a:e6:bc:
c1:76:8c:57:08:49:f5:e6:b5:30:6e:0f:b2:53:eb:60:1b:19:
88:80:7c:29:1e:9a:15:03:f9:a5:0c:60:3a:90:9c:bc:3a:4d:
a0:27:51:05:02:80:13:1b:da:cc:f5:23:12:2f:41:2b:6f:9a:
38:fe:a4:b4:be:f3:af:2d:bf:f3:bb:d9:a6:c9:9a:fe:36:b0:
0f:cb:a6:f6:cc:8c:d0:f3:98:f6:54:aa:07:76:73:2c:81:8a:
d4:17:f0:79:dc:f8:aa:7b:8e:e9:0d:46:13:eb:92:e0:56:5e:
8f:2d:13:32:fe:04:29:9b:e8:d3:cc:3a:a9:5c:2d:78:68:bc:
5d:89:20:cb:3e:71:fe:6d:f7:54:2f:2c:17:b8:c6:d9:72:f4:
cb:0d:57:b4:ff:c7:f1:e9:75:51:9a:67:c1:24:44:90:73:c3:
3c:0b:bf:45:de:ee:b9:1a:e5:39:28:c4:29:d2:98:db:36:16:
cd:6b:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:35 2024 by rpki-client on console-ams.rpki-client.org