Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vxzghFLUpRqetNQj2KA6kWI1tXI.cer
File: vxzghFLUpRqetNQj2KA6kWI1tXI.cer (raw, json)
Hash identifier: MnsSkYIw6nu9OZPQz3/ZIj1j+QZedOlGQofizNxeRwY=
Subject key identifier: BF:1C:E0:84:52:D4:A5:1A:9E:B4:D4:23:D8:A0:3A:91:62:35:B5:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2B3F42C28F965CD227F95BD12E0824
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/vxzghFLUpRqetNQj2KA6kWI1tXI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:34:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 152.89.199.0/24
IP: 2a12:ba80::/29
Validation: Failed, certificate revoked on Wed 07 Feb 2024 08:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:3f:42:c2:8f:96:5c:d2:27:f9:5b:d1:2e:08:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:34:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf1ce08452d4a51a9eb4d423d8a03a916235b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:03:d8:e1:d4:4d:0a:8b:1c:b4:f3:db:70:
1a:34:01:c0:4d:56:01:d2:c3:c1:6d:5f:ee:97:b8:
b6:44:f6:d5:54:b6:49:db:64:71:76:76:76:ec:40:
72:dc:11:20:fd:73:7a:39:43:87:a8:63:06:32:21:
58:cd:f1:53:39:68:16:2f:ea:24:33:86:d8:54:c8:
b7:ba:0d:07:24:61:bb:77:4f:87:c5:5b:71:84:a8:
11:b5:84:a9:0d:ce:d9:83:b2:ec:0d:37:44:1c:e6:
67:6f:c8:20:44:05:36:e3:56:9e:00:02:42:60:e4:
69:27:a8:ed:29:79:85:8e:8d:c6:ee:7c:71:e9:54:
9f:17:57:60:b3:3a:67:b1:b5:fc:1e:f8:f3:52:6c:
ab:82:8a:8f:b8:42:f9:b0:58:a2:e9:9d:d0:7e:9d:
41:61:a9:16:e8:1c:17:c6:79:00:5a:b2:98:bd:f2:
b9:39:22:a7:8e:50:5f:01:2e:c9:55:e6:a0:54:4f:
47:c8:dd:ec:85:b1:37:aa:de:19:33:5b:92:15:6f:
b2:7a:62:6a:d8:38:d3:ca:a8:c4:53:56:a8:d5:12:
63:31:4f:dc:b0:5c:eb:a8:5f:ad:a7:a1:bb:08:88:
47:1e:7b:ef:56:7f:a2:06:26:97:a4:29:fc:8f:9e:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1C:E0:84:52:D4:A5:1A:9E:B4:D4:23:D8:A0:3A:91:62:35:B5:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d41002-4346-4cef-9f40-fce2f83c3df9/1/vxzghFLUpRqetNQj2KA6kWI1tXI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.199.0/24
IPv6:
2a12:ba80::/29
Signature Algorithm: sha256WithRSAEncryption
70:cc:f2:ba:6a:42:09:55:ce:8e:fd:cb:18:2e:33:f8:6d:c5:
dc:e5:a8:5f:46:d3:77:42:89:ed:da:92:7c:51:b8:c0:42:65:
c1:76:7a:97:ef:cb:ca:87:cc:5a:0c:89:db:aa:53:42:8a:50:
1d:c1:9d:dc:e7:04:68:f6:e7:a2:b3:3c:70:05:fe:b3:11:a1:
78:77:9c:0c:53:55:97:bd:dc:3f:1f:b6:2f:29:ab:3c:c1:38:
e0:28:4a:a1:18:45:95:e0:ba:4a:56:bd:d0:c4:4c:0b:b5:1f:
d9:0b:d8:f0:a4:aa:b2:ca:5d:32:72:08:f7:6f:29:2c:fa:d3:
bf:ae:0e:63:4c:aa:33:20:cc:7b:45:6c:b5:9c:e0:47:75:b8:
4a:da:9d:7f:74:75:83:12:fc:4a:2b:9e:7f:0c:43:0a:6c:e7:
13:ce:42:64:97:1e:1f:43:d7:3a:27:fa:3c:ee:58:20:ec:f9:
3c:a8:95:26:40:b1:49:6d:13:d1:29:11:99:ca:91:73:88:9c:
23:fa:f9:ae:03:01:06:dc:44:86:44:89:c1:fe:89:15:3a:75:
0f:d0:56:45:2d:62:39:d4:fd:5a:4b:92:bb:7f:01:27:8f:38:
9f:d3:f0:50:3b:51:55:53:75:5d:3c:2e:e3:26:2e:c3:e3:f0:
fa:25:b9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:38 2024 by rpki-client on console-ams.rpki-client.org