Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/th2ejJoIsjqYsUwwi4Dc-_VeXNE.cer
File: th2ejJoIsjqYsUwwi4Dc-_VeXNE.cer (raw, json)
Hash identifier: jwXfDIj9EbZZJVyF1oPJd6kl32KwU7uWqZBc1ykRoeg=
Subject key identifier: B6:1D:9E:8C:9A:08:B2:3A:98:B1:4C:30:8B:80:DC:FB:F5:5E:5C:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CAAAC26804E0C7A164678538CA0B3527F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Dec 2023 09:47:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 148.252.64.0/18
IP: 152.65.0.0/17
Validation: Failed, certificate revoked on Fri 29 Dec 2023 10:47:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:ac:26:80:4e:0c:7a:16:46:78:53:8c:a0:b3:52:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 27 09:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b61d9e8c9a08b23a98b14c308b80dcfbf55e5cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:4b:1e:3b:06:cc:c5:d8:9a:b4:4e:6c:93:
e0:00:af:19:52:7f:35:ea:c2:36:2d:15:9d:6f:30:
4c:5b:18:df:e8:92:20:28:34:1c:da:9b:d3:81:de:
6f:df:fd:46:6f:09:64:5f:b7:3d:84:61:82:bb:a2:
72:8d:b3:06:ed:e8:c1:1c:c2:49:bd:98:81:2d:2f:
e5:a2:7c:46:bb:d3:42:a5:6d:a6:24:5f:46:71:c5:
c6:11:da:51:5e:0a:30:db:c1:43:3f:48:a3:7c:68:
11:5c:45:c7:51:8b:9a:cf:53:88:d8:6c:67:e8:f4:
ba:e4:46:fc:64:e7:8a:3b:0f:9c:88:14:44:4b:d6:
8e:91:b0:79:69:ce:68:e9:f2:d1:f1:81:40:06:6c:
27:6c:be:d1:63:6a:1c:49:6f:74:5b:80:9c:2c:57:
96:48:60:83:56:25:cd:e0:cf:3c:a2:51:84:69:6f:
67:3a:1a:b0:b5:ee:45:d7:87:d2:31:a4:39:de:61:
0f:2f:c3:d4:29:55:62:77:84:8c:15:61:9c:be:43:
95:62:4f:88:e9:55:be:5f:91:a6:91:b9:32:2a:7c:
22:a0:8d:28:75:0f:eb:ce:cf:c3:8a:af:2c:a4:5a:
51:8b:96:9d:99:a2:0e:88:12:a8:c0:25:e1:83:1a:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:9E:8C:9A:08:B2:3A:98:B1:4C:30:8B:80:DC:FB:F5:5E:5C:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.252.64.0/18
152.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:56:1c:c8:6f:b7:4c:7f:f5:db:f3:11:12:3e:13:6f:0e:80:
47:16:f8:28:9d:82:b1:dd:e2:bd:cd:96:6b:87:d3:32:50:4e:
00:da:d1:68:5f:e1:6d:4f:69:d3:6b:de:87:05:2f:b5:06:53:
b6:9b:f4:13:42:c5:12:f6:cd:2c:44:96:0c:82:f6:40:de:a6:
c5:89:f1:f7:4a:f7:15:b7:59:7f:59:a3:40:28:9c:67:ea:41:
de:c2:7c:54:1f:5b:cf:8e:b2:75:d0:85:6c:c3:eb:b7:9d:aa:
4a:6a:c7:d9:37:f0:97:e7:31:f1:f0:cb:77:7c:5b:e0:f4:a4:
03:d5:f6:a1:d7:dc:f2:3d:5c:34:d1:3e:bb:d5:3a:22:aa:e1:
66:be:3b:22:db:ba:6b:70:b2:13:d3:e3:eb:77:71:e7:2b:02:
91:a4:32:72:34:51:81:3f:55:7e:5a:ae:f4:c3:03:f3:3c:06:
0e:52:0c:31:ca:ff:d6:62:dc:d3:dd:7c:f4:d3:88:5f:43:fc:
c9:e3:76:0c:cf:01:89:97:49:bb:ae:22:d1:1f:07:18:9b:e8:
6c:47:89:94:23:88:dc:16:d9:be:6a:69:6b:d1:5e:c9:9b:08:
94:25:86:28:6b:62:fe:35:10:76:35:93:0f:55:0e:37:ec:08:
71:79:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:07 2024 by rpki-client on console-ams.rpki-client.org