Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer
File: neCaQc177XcddyBUh-ehgjoMA6I.cer (raw, json)
Hash identifier: vsG5qFYLA8RYn9NZKqirPi8kjBYK5jFLAkSAgOE/3MY=
Subject key identifier: 9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAEDDFA05B619A93415129A6B0EE913
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/neCaQc177XcddyBUh-ehgjoMA6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.51.0/24
IP: 2a12:dd80::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 11:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:dd:fa:05:b6:19:a9:34:15:12:9a:6b:0e:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:7c:6d:31:11:f3:7d:6c:03:82:59:18:bd:
bc:5c:23:c6:1b:a9:10:fa:e8:20:4b:c7:a3:ba:69:
8d:9f:d5:b0:10:fd:56:fd:c8:06:22:9d:66:13:f5:
6e:f1:82:95:6a:17:07:df:8b:c0:3b:3e:07:db:1f:
73:df:88:4b:04:ec:fd:65:fe:cf:f5:06:96:b8:d4:
b7:8a:d0:90:aa:5a:ae:2b:c0:ac:d3:1e:f0:79:fb:
61:11:ac:b4:0d:78:e2:1e:2a:86:c7:bb:5b:09:20:
5c:3f:73:72:b0:b3:0b:27:7d:05:e6:4e:47:68:0f:
07:6c:8c:63:f4:10:af:e3:b6:6f:fa:b3:b0:9b:99:
5b:f3:12:80:75:fa:ce:f1:8f:2c:18:30:a4:ff:50:
7b:6f:a8:49:8d:99:79:ee:58:16:71:da:11:e9:bb:
30:85:67:8e:4f:be:3d:0d:5d:30:a7:70:25:38:8d:
45:de:68:78:6c:58:5b:cd:2d:5a:c2:f5:52:ff:d8:
c4:9c:df:35:f8:f1:fe:ef:47:7c:45:8e:68:35:c0:
6f:34:74:9d:03:af:5f:56:82:17:4b:29:6e:ed:aa:
cd:52:f9:cb:f2:80:51:66:04:08:58:91:1e:0e:14:
79:ce:4f:f3:7c:43:48:da:7b:49:eb:fa:0e:07:6b:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/neCaQc177XcddyBUh-ehgjoMA6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.51.0/24
IPv6:
2a12:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
82:7f:31:1c:d1:3b:1a:bd:ab:6a:6a:a6:9d:a2:1c:0f:04:71:
2d:78:ba:67:49:08:c4:33:f3:47:1c:99:1b:bb:2b:3f:35:4b:
6f:b1:6a:c6:f7:9c:b5:48:58:06:73:dc:82:69:58:d9:00:c2:
b7:f9:58:cf:19:d0:2a:94:61:69:17:0e:ef:da:72:a3:ec:8a:
14:e5:5b:69:bb:4d:fe:a1:38:17:94:0f:92:b2:ab:eb:c6:c7:
69:55:54:23:21:e7:14:8f:62:fe:cd:06:c5:7b:1c:fe:86:9f:
42:d7:ff:8e:e7:68:56:0f:34:ca:8e:7e:bd:6c:e9:a3:67:c9:
94:e3:7a:c7:7f:d0:66:6d:55:c3:b5:c0:ef:5f:a4:a3:b4:c9:
07:f1:03:8e:1f:ed:95:a6:75:4d:1b:51:9d:7f:36:ee:79:8c:
03:6e:ef:e7:78:e7:61:b8:81:c2:7e:8c:f9:f1:12:eb:ce:02:
bb:89:18:11:d4:0f:14:8e:65:bb:3d:72:16:57:70:c4:c0:1b:
de:20:4f:90:c3:95:82:e2:51:4f:8f:f8:64:d5:72:c2:5a:5e:
b6:00:55:b1:0e:5e:34:1b:7a:b2:69:f1:b6:06:d5:08:57:8c:
0c:e1:ef:cf:f1:90:1d:e8:78:04:1b:bc:5e:21:57:b3:2c:f9:
cd:b7:62:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:35 2024 by rpki-client on console-ams.rpki-client.org