Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qNU3xJFGmEjfCf1xqkcz-fyMoJc.cer
File: qNU3xJFGmEjfCf1xqkcz-fyMoJc.cer (raw, json)
Hash identifier: IESL4qTkeP5iTKFwwn47yb/NZj5k2l4FhGa67spVXMU=
Subject key identifier: A8:D5:37:C4:91:46:98:48:DF:09:FD:71:AA:47:33:F9:FC:8C:A0:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187E1486989724B4C29A8C63F9C56D1A467
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 May 2023 11:03:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.115.0/24
IP: 2a11:ee40::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 15:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:48:69:89:72:4b:4c:29:a8:c6:3f:9c:56:d1:a4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 3 11:03:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8d537c491469848df09fd71aa4733f9fc8ca097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:20:33:33:53:90:97:e2:32:5e:6f:46:b0:
d6:3e:27:37:de:eb:6e:43:38:83:f3:8a:6b:9f:6d:
12:91:b9:6f:fc:74:13:3f:ca:de:fc:cc:89:83:38:
81:69:f9:44:5a:8e:77:65:c7:94:46:02:af:33:9e:
59:26:20:c4:53:52:2b:a0:64:4d:5c:cf:ee:0f:1d:
d6:e3:f9:e1:54:60:42:a7:de:77:5e:8e:4a:06:96:
bf:61:b9:ad:67:ba:6d:4d:90:f9:4b:1f:76:e1:77:
cc:dc:40:1a:37:b3:e1:04:c1:fb:04:8d:a8:6a:cb:
70:91:3a:ff:8a:86:3e:e6:69:b7:7b:f5:bf:1b:69:
69:cc:d6:8f:ee:d5:6d:b0:23:98:07:e1:06:c1:91:
1b:6e:7b:c5:77:ca:9e:27:dd:ff:cb:93:90:b6:9d:
51:b6:98:c2:b6:a0:7e:3f:0b:b1:bd:ec:b7:52:c3:
46:74:de:82:59:ff:3f:7b:4b:36:47:ef:76:d6:81:
90:36:43:4e:d1:5f:d0:ef:fb:c8:36:67:da:ed:61:
58:84:b9:35:a8:69:84:8e:71:33:cc:ec:2d:9f:c6:
c5:e6:b3:44:6d:aa:8e:f7:04:c8:67:6a:88:71:91:
0e:41:c3:e4:55:a4:4f:40:73:df:f2:da:a6:fe:4f:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:37:C4:91:46:98:48:DF:09:FD:71:AA:47:33:F9:FC:8C:A0:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.115.0/24
IPv6:
2a11:ee40::/29
Signature Algorithm: sha256WithRSAEncryption
45:bc:07:33:e7:73:90:7a:d8:df:25:f4:d8:15:87:5e:48:04:
bf:e4:bf:b8:d9:bb:d4:41:15:05:f4:84:46:e3:cb:80:c7:56:
2d:81:6b:88:41:24:6c:7f:1f:df:5c:3d:3a:88:3b:3d:14:44:
59:15:9d:09:2f:43:be:0c:3d:34:09:83:68:ba:33:5c:c3:2c:
13:79:a6:98:18:e7:31:60:6c:5d:15:1a:b9:89:4b:fb:57:5b:
06:8e:4f:3f:09:93:7b:68:b5:0c:15:2d:87:08:bc:22:ec:cf:
99:1b:a7:f7:e6:8a:8f:f2:d3:29:24:91:6b:79:bd:0c:56:0a:
f3:01:b7:6c:7c:46:e1:eb:12:ba:c8:d8:47:75:39:7e:cf:fb:
8e:67:c5:dd:4f:3d:2a:52:1d:f5:db:a1:d1:b2:f3:39:b7:7f:
2d:c8:c8:0b:1c:8e:85:a2:14:3d:a6:05:d2:ee:db:26:44:67:
4a:e5:5f:fb:ce:22:bb:a1:fb:33:cd:bd:7b:51:79:77:43:b8:
26:89:1c:3e:d0:64:ee:b6:75:ff:7b:6d:6a:a2:5d:e9:3c:7f:
c7:33:a4:f8:5b:b5:fa:ab:81:bf:51:de:59:76:ae:e0:ac:37:
5d:a0:11:ef:14:16:a6:4d:b9:54:a0:30:1f:19:10:7d:a5:0c:
01:95:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:54 2024 by rpki-client on console-fra.rpki-client.org