Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xAk5ooxLAEiakrQhYaqCNmrNxFM.cer
File: xAk5ooxLAEiakrQhYaqCNmrNxFM.cer (raw, json)
Hash identifier: 8vFAk5RshYqA81CGbrAKRvf7ihFiZs181P3vnLVY6uE=
Subject key identifier: C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F592FCFE91C4E9A6227B51EF143D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/xAk5ooxLAEiakrQhYaqCNmrNxFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.212.138.0/24
IP: 2a12:2180::/29
Validation: Failed, certificate revoked on Wed 27 Dec 2023 15:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:59:2f:cf:e9:1c:4e:9a:62:27:b5:1e:f1:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c40939a28c4b00489a92b42161aa82366acdc453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:34:71:a8:f6:ef:48:21:b3:d9:f3:aa:86:0c:
42:37:38:03:b4:9f:a3:d5:92:6d:4d:67:80:53:33:
61:6d:a6:6e:36:49:12:52:35:c5:34:25:83:b1:6d:
79:e7:51:4a:5f:7c:c9:da:ac:4f:43:cd:87:16:f5:
3a:28:89:89:09:26:9e:dd:95:25:43:93:8f:05:83:
04:9d:1d:4e:ee:48:c4:df:7c:9f:2b:5c:65:9e:fc:
9c:6d:01:dd:fc:ff:7c:0f:02:d8:86:35:1c:dd:56:
f6:2a:f8:01:c6:6f:ad:e9:f3:6d:60:38:c0:60:3a:
c2:8c:df:9e:e0:67:3f:0c:d9:7f:34:e5:30:98:86:
20:d6:6b:7f:2d:5b:52:a5:45:b8:8b:2c:38:b0:4b:
72:05:b3:0c:d1:21:14:13:bc:0d:0f:c3:9b:49:8a:
1e:10:74:33:7b:4c:4b:54:cf:3b:58:95:f6:69:c1:
d5:b1:b8:98:8b:2f:e6:be:4d:86:98:9c:37:7f:18:
e2:71:a6:87:6c:26:b7:e1:bc:be:20:c4:c3:9a:ee:
b9:f7:19:5a:34:67:96:e3:bb:7a:6e:4b:92:b9:ed:
5e:73:a7:9e:1e:85:2c:1f:02:cf:9f:5c:5b:ac:f4:
c9:03:6c:8a:a6:4d:64:a7:f0:47:79:f7:bd:ef:29:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:09:39:A2:8C:4B:00:48:9A:92:B4:21:61:AA:82:36:6A:CD:C4:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/813d16-d6ab-4ea1-a414-0fa6907cba12/1/xAk5ooxLAEiakrQhYaqCNmrNxFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.138.0/24
IPv6:
2a12:2180::/29
Signature Algorithm: sha256WithRSAEncryption
9c:67:f2:92:42:bb:a6:9f:9e:69:64:dd:28:72:d7:6c:19:91:
7a:f8:11:7c:52:46:d8:18:50:32:3e:5a:1c:bb:0f:62:78:00:
da:68:5c:98:4d:24:af:6d:12:87:d3:6f:4c:61:ff:7d:e1:07:
fa:0c:72:a7:fe:21:8f:07:0d:90:d7:ef:ed:c7:70:86:ea:61:
4f:94:b4:43:c5:c8:79:5b:11:c6:1d:24:0e:da:1e:d6:00:c5:
a4:48:ab:92:ab:f4:15:c1:d5:19:53:03:46:75:13:61:46:a2:
c6:db:6f:2d:73:a7:c2:93:17:11:28:fa:35:5e:fe:62:65:10:
9e:cc:e9:3b:5e:e2:0b:1b:20:5f:1f:30:a8:9d:3f:b0:0a:68:
2d:d0:d5:16:8d:e0:7d:17:f1:5f:bf:59:40:e9:8e:2a:d7:c1:
42:ed:68:d2:aa:88:73:32:30:d5:69:73:42:cb:f0:73:10:e0:
5a:dd:e4:1b:5e:86:10:5f:1a:60:9e:c2:35:0a:98:e1:bc:99:
b2:7c:e7:d5:e3:48:72:7f:e0:c8:78:5d:a6:f8:e3:0e:b8:55:
50:60:2a:96:ed:8d:9a:51:38:5a:d5:3a:64:ec:75:1c:b8:9e:
bb:9f:20:58:b4:2a:4c:c9:74:9e:31:9c:4c:d7:50:54:9d:38:
64:e9:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:01 2024 by rpki-client on console-ams.rpki-client.org