Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xjl2tLmyrJALJP9B5k5FXg8c5yU.cer
File: xjl2tLmyrJALJP9B5k5FXg8c5yU.cer (raw, json)
Hash identifier: 88R1qWsJIBUT026zu3ttogaOdTQW7G1sNI7HuJGSVDs=
Subject key identifier: C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D689F3376FC6E64324DBE77736F407
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.151.0/24
IP: 2a11:d240::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 15:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:89:f3:37:6f:c6:e6:43:24:db:e7:77:36:f4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c63976b4b9b2ac900b24ff41e64e455e0f1ce725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:86:c8:b4:a1:86:57:13:52:2b:92:fa:b3:
16:e6:e2:9e:ff:91:3a:ef:4a:d2:2e:29:65:34:19:
f6:86:99:66:b8:8c:c2:b7:df:ab:53:1d:aa:ee:98:
d8:a8:f8:dd:35:84:f0:14:f8:6e:10:4b:e3:55:80:
e3:2c:61:97:1b:2a:c0:2a:b7:50:21:a3:94:97:c1:
18:0c:ad:f6:04:95:42:62:53:c8:58:cc:30:12:ad:
68:3a:5b:31:0c:5b:6b:d3:07:6e:8a:a3:97:81:f5:
58:05:0d:26:fc:bf:6e:54:16:93:9a:22:93:1c:e6:
40:f1:4c:39:42:db:54:9b:42:48:fc:04:8a:86:23:
8e:ac:dd:31:f1:b3:3c:ae:1b:9f:08:a6:f8:24:95:
96:d4:b3:11:75:21:3e:32:9a:0c:0e:04:8d:5b:d5:
2e:52:c4:94:f1:78:a7:e8:30:fc:98:bc:10:9a:99:
93:12:a0:e7:31:76:f5:c8:e4:4e:80:fc:e6:5a:62:
41:6b:34:54:d8:03:b0:29:46:78:e9:0b:96:74:e6:
e7:db:2f:5c:71:d4:e8:89:c2:56:6d:59:74:48:f9:
2f:d5:2a:1d:7a:cf:dd:cd:a9:8d:62:48:86:c3:fe:
38:c5:10:fc:97:d9:50:39:fd:94:56:80:e9:9a:00:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:39:76:B4:B9:B2:AC:90:0B:24:FF:41:E6:4E:45:5E:0F:1C:E7:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/563b00-4c84-465a-b6f7-e29a252460cd/1/xjl2tLmyrJALJP9B5k5FXg8c5yU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.151.0/24
IPv6:
2a11:d240::/29
Signature Algorithm: sha256WithRSAEncryption
51:bd:db:8b:ca:c5:76:e0:7b:28:4d:68:d7:df:65:40:6c:d7:
ba:cb:7c:79:50:7c:52:09:68:49:34:2d:a2:e2:37:dd:e5:3f:
2b:f0:94:c8:0b:75:f8:09:35:f6:c7:a5:03:40:64:0d:22:20:
b4:36:a7:b5:22:b5:11:70:43:9c:5f:d6:56:f8:5b:5c:3b:4f:
13:9c:04:9c:e2:8a:f5:e3:c4:8e:f8:0f:e0:9e:ae:cb:11:17:
54:1e:5b:7d:fd:e5:bb:32:2b:b1:52:87:34:b3:a0:57:36:17:
64:f5:8b:59:d2:c5:b9:5a:e0:a9:cc:0e:fd:b7:17:02:ab:8c:
dc:96:0f:80:52:ec:b2:60:4e:bc:4e:33:89:6c:0d:53:a5:ca:
de:76:d3:c2:c7:2c:35:cf:e9:64:7e:e7:a8:50:b4:fe:83:9a:
a3:ff:c7:d5:b3:02:de:50:9b:1f:46:49:71:39:76:50:72:8d:
51:9d:42:38:ba:3c:f8:31:b2:a8:3f:e2:e3:a9:40:5c:91:be:
56:6e:bb:3a:05:22:08:6b:9b:ca:b0:09:fa:c3:bb:2e:67:9a:
83:ae:81:ac:57:0c:b2:a5:8e:c8:c7:af:bb:50:45:5b:1e:e1:
79:f6:85:f1:7f:cd:1d:87:fd:ad:21:51:ee:9d:2f:60:5d:a2:
23:bf:53:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:12 2024 by rpki-client on console-ams.rpki-client.org