Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rlH89j8QZMwyHAEq52mnx1NF6Ts.cer
File: rlH89j8QZMwyHAEq52mnx1NF6Ts.cer (raw, json)
Hash identifier: rTNafLssnbr2V023GLBX4W58g6ayD1kQnalZC0XHQOY=
Subject key identifier: AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D898D993383A3F405213A2ABD10FA3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.44.0/24
IP: 2a12:3b00::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 11:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:8d:99:33:83:a3:f4:05:21:3a:2a:bd:10:fa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae51fcf63f1064cc321c012ae769a7c75345e93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:a8:a8:89:8c:1f:97:8a:ef:ce:21:38:ef:
3b:2a:bb:2b:74:c6:fd:a3:e7:1f:35:86:45:33:44:
57:41:c8:c8:d7:27:71:ef:00:e5:65:fb:7a:80:ea:
6c:00:40:fb:00:42:aa:25:4c:f5:89:63:a7:57:77:
b0:d6:ba:76:52:bc:88:2d:cd:e9:9f:1a:55:ca:31:
c8:b0:1e:64:6c:63:57:06:f7:c7:e0:67:d3:1b:c5:
56:41:f8:c3:53:0e:38:cb:06:5a:ab:a1:73:01:32:
c7:a0:18:ef:5a:13:41:ea:f4:99:69:ba:7e:90:b5:
f5:97:de:b4:ea:56:da:c7:1a:3f:38:96:d2:75:f3:
6c:3e:b0:d5:2f:ba:e8:9b:d8:87:f5:0f:82:80:d1:
a4:d3:1f:8d:83:e4:bb:0a:55:e9:65:36:46:f8:99:
10:fa:a7:a1:10:3d:d1:39:b5:32:cf:95:69:28:ad:
6c:e7:84:e9:f9:53:ae:37:d5:f4:5c:2b:1c:e3:b8:
e2:c3:ce:de:67:80:55:c8:a5:46:69:9f:25:98:14:
16:28:48:cd:c4:4f:9e:6d:61:5f:69:ac:ec:f2:8d:
ce:f7:a4:0d:48:b3:27:fc:49:eb:63:dd:be:5a:4a:
04:ec:e5:ac:ea:48:90:8b:c8:bf:1b:92:c1:6d:78:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:FC:F6:3F:10:64:CC:32:1C:01:2A:E7:69:A7:C7:53:45:E9:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4a2cb4-caba-4b98-8b3d-56e067c82330/1/rlH89j8QZMwyHAEq52mnx1NF6Ts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.44.0/24
IPv6:
2a12:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
ae:b7:78:0d:1c:d9:3f:14:74:d4:ff:d8:03:81:b1:09:f3:a3:
ff:55:aa:d2:45:02:c8:e8:01:c1:69:7c:c8:f3:3b:6d:57:fd:
70:0d:c3:ff:85:af:5f:f4:d8:e8:1a:8f:5a:e3:58:d9:2e:ef:
47:3d:aa:36:53:7b:8c:91:b2:b8:60:de:cf:57:62:64:c2:0e:
82:e0:8f:32:95:02:7c:cd:01:68:a1:32:d3:30:1d:09:ec:7b:
ea:b1:68:89:f9:4f:5e:84:02:9c:8f:59:21:06:fa:42:21:3e:
dd:94:f7:e4:87:5e:82:35:b3:59:d0:84:77:5d:a1:05:7c:80:
bf:41:54:eb:1e:f8:ab:dc:66:e6:ea:db:a6:ad:11:36:35:2c:
5f:eb:8b:d2:5c:7e:fd:6c:d7:4b:cb:87:49:8b:cb:aa:66:ba:
52:e8:e9:b9:e3:4a:a6:d9:09:45:29:54:66:35:45:21:00:0a:
ed:d7:31:88:21:48:c4:2a:57:3a:18:09:10:a4:4e:60:58:54:
42:40:3c:4c:a9:38:c5:65:69:38:70:f4:a6:85:19:44:d0:14:
ea:35:ff:d2:10:21:88:7f:2b:57:b8:c2:48:c8:45:66:14:1c:
fa:73:c2:85:52:07:4f:36:53:92:ed:bd:cc:97:e1:ad:6b:00:
77:6a:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:06 2024 by rpki-client on console-fra.rpki-client.org