Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
File: rBB6kam9lQuHMrwnhfZltz5p_oc.cer (raw, json)
Hash identifier: leLEzfRKTlXnN0cz7G7roFAvfX9luspUVn+ZgRF5USA=
Subject key identifier: AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFAF2F0EB5EFCFEDAF3C95B6D459122
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.223.0/24
IP: 2a12:d80::/29
Validation: Failed, certificate revoked on Mon 27 Nov 2023 12:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:f2:f0:eb:5e:fc:fe:da:f3:c9:5b:6d:45:91:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:60:05:5a:1f:bb:05:03:68:e8:d2:b6:4c:f1:
1c:4e:43:fd:60:36:8d:59:e8:28:2f:95:5b:34:8c:
99:c6:14:b8:19:82:28:46:81:30:2b:49:40:d8:7a:
71:7a:01:0f:65:0f:8a:5d:9c:9f:e2:fb:aa:33:22:
9f:1e:4f:2a:0c:b6:4d:48:38:3c:de:ac:5b:23:d1:
02:73:66:3f:9c:91:59:78:00:41:01:14:4c:fb:80:
a2:c6:95:a4:5c:45:49:41:42:94:2d:51:36:59:60:
46:e8:8e:43:8c:a9:81:de:90:3a:b7:28:a4:e6:6e:
13:9f:64:21:6b:39:81:d9:bc:2e:6c:29:d8:c9:0c:
b8:f5:5f:ef:3f:d8:5d:55:84:e7:83:f4:0a:9d:42:
59:4b:ca:1e:96:78:3b:bc:ed:48:94:99:b5:9e:d0:
9a:89:6e:ba:39:5f:a9:e2:2f:10:25:50:2a:89:aa:
91:05:88:f8:ed:31:a5:5b:e2:fd:09:b0:d1:dc:47:
13:ea:6e:60:60:8d:21:5d:dc:ac:28:27:f0:00:55:
f7:ea:2c:29:31:23:25:4a:7e:8f:4a:e0:ef:9a:db:
bf:49:5f:2c:cc:14:00:f1:ae:df:69:b8:0a:fd:d4:
62:62:6b:be:73:a5:0c:8d:6e:54:cb:ac:ef:d0:b0:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.223.0/24
IPv6:
2a12:d80::/29
Signature Algorithm: sha256WithRSAEncryption
90:9a:e9:ca:b7:e3:22:31:6c:fb:78:6c:f0:4c:b8:bf:81:16:
f5:bd:7c:60:cf:4a:4f:df:55:21:1b:55:0b:9a:1d:6c:b7:c2:
46:dd:3a:be:6c:64:40:fb:39:3e:6f:64:58:b9:04:d8:c5:26:
69:55:30:3f:da:f6:50:e4:af:bc:af:14:d8:fc:0d:d2:96:c4:
b5:fa:fc:a7:24:c9:78:a6:f5:09:63:b0:f3:9c:71:16:d2:d2:
c5:06:10:83:54:b1:55:30:6a:2a:a3:1b:d7:0e:27:bf:11:59:
b9:96:9c:5f:00:25:b2:79:5e:73:6e:3b:33:65:8e:74:e7:34:
8e:85:30:44:b9:8f:35:fb:88:ae:11:ec:6d:43:ae:8a:49:1e:
c3:6d:b1:e5:4e:db:8e:25:60:43:e8:21:ec:5a:47:e6:ab:c2:
db:8f:6a:ea:cf:5f:70:5a:af:1a:84:b6:51:4d:08:6e:37:fa:
31:13:ea:1c:ef:e0:95:7f:ae:3f:4b:1f:87:52:27:43:35:08:
31:09:91:39:a3:83:24:47:b3:f5:57:0a:d2:c3:07:63:b6:f3:
49:e3:00:ce:a8:7a:97:3e:c3:60:62:c5:61:50:5d:37:3e:b1:
c1:1a:6e:fd:8d:87:68:25:d5:6d:1e:39:8d:90:be:e1:21:7b:
0b:78:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:34 2024 by rpki-client on console-ams.rpki-client.org