Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
File: tNGQGn66bldbx5-TbpSt57e0i1M.cer (raw, json)
Hash identifier: JIIKuH1fXdJT6QF2aSG2S7DeeFcuR7mop+RN7pHMUgk=
Subject key identifier: B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF7E7F759424D101D55AA16DD6A0C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 83.219.100.0/22
IP: 2a01:bc60::/32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7e:7f:75:94:24:d1:01:d5:5a:a1:6d:d6:a0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:c5:70:c0:ff:db:ae:02:42:8a:ec:ed:8f:
e6:9a:07:03:46:89:fc:c8:63:10:01:c8:4b:ae:d8:
70:fa:da:ee:9a:ae:a5:4a:6b:28:7d:f6:4a:36:a2:
9c:73:de:19:dd:05:5b:5d:2e:a8:8a:52:80:a8:3d:
82:ae:88:04:95:1b:39:d4:90:1c:4a:d5:53:3e:1e:
47:68:06:08:1b:a7:c8:c3:43:c1:d0:8b:f7:fe:f0:
60:a7:a6:57:d0:d1:36:e1:a2:73:b1:59:60:ef:ef:
dc:e6:71:81:63:6c:33:41:73:ae:b4:1d:3e:a7:a6:
a9:7f:6e:cd:35:1b:30:9b:87:d3:e7:11:45:b3:04:
18:4b:08:83:97:8b:63:b3:e5:62:e4:ec:32:10:18:
e4:98:11:42:d9:f9:9e:c1:55:ed:6b:24:b2:ab:e9:
f8:3a:00:9d:47:f3:a3:66:12:d1:8e:76:90:fb:9a:
d0:f9:3c:b6:2a:5c:46:83:c0:94:a4:7e:5e:07:5d:
9a:bb:8a:88:f0:80:fd:69:45:2a:5a:e6:cb:27:01:
28:24:0d:e1:1a:83:31:b0:a1:77:bd:b7:36:62:2c:
e5:30:b5:f9:0b:31:e4:5f:85:cf:95:a1:4f:54:91:
b7:3f:f7:c0:dd:ce:ea:f0:54:cb:4e:77:7a:99:a6:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.100.0/22
IPv6:
2a01:bc60::/32
Signature Algorithm: sha256WithRSAEncryption
98:08:c2:df:dd:a4:d5:1d:03:57:3a:1f:8c:3c:81:03:60:d8:
6d:0e:f0:3b:ea:d0:df:26:64:4e:1e:fd:ff:37:54:55:c4:57:
90:b2:76:31:e8:22:4a:42:fd:7f:47:7f:21:6d:41:ae:88:a9:
38:9f:7f:1c:61:e1:5e:a5:8f:a6:a9:bb:42:41:fc:13:61:68:
14:26:f6:08:b4:04:01:99:d6:74:60:40:ed:4b:f0:e4:19:5a:
52:e2:02:96:2d:a6:da:30:f0:a3:45:34:64:c6:d5:2d:93:05:
8f:22:e0:c8:ed:8c:b7:f3:87:c5:35:c7:c9:1e:bc:8b:fc:78:
a2:95:be:f2:e0:96:c0:12:e7:fe:f4:84:32:a9:f6:43:89:48:
bb:02:d6:c0:d5:93:d2:39:bf:63:4e:9d:c4:4d:59:ba:f7:39:
0f:71:6f:d4:b1:62:a0:d6:48:e6:c2:95:f5:19:2c:54:40:15:
93:c3:98:4c:e7:45:5a:63:9b:3d:ec:b1:d9:d9:d3:99:59:45:
ef:c8:a2:61:cd:7b:ee:23:3b:f4:6d:fb:66:6e:8d:79:48:e6:
72:6a:2c:ab:0d:e1:8b:71:ef:e0:ac:02:4b:49:29:12:7d:b2:
7d:25:40:17:c8:c7:5c:db:8c:83:3b:75:73:af:b2:28:35:33:
aa:b2:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:22 2024 by rpki-client on console-fra.rpki-client.org