Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xkjuBkRT15m4LoR7NJZmvynaqWE.cer
File: xkjuBkRT15m4LoR7NJZmvynaqWE.cer (raw, json)
Hash identifier: HYcc/Qst6PkYk9fTS8zKlcFGEBau3P0OwsMrlgB38/g=
Subject key identifier: C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F4A00B7DD60993D6AF7FEE2B4E8D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/xkjuBkRT15m4LoR7NJZmvynaqWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.39.111.0/24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 12:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:4a:00:b7:dd:60:99:3d:6a:f7:fe:e2:b4:e8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c648ee064453d799b82e847b349666bf29daa961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:a4:56:83:bf:67:a1:16:eb:03:68:6b:01:
45:0f:49:39:94:b7:9b:2b:a4:af:7f:68:37:53:e0:
d6:f5:1d:13:a5:54:2a:72:9c:36:4a:43:8a:30:bf:
42:fd:4e:26:9c:f5:d0:91:f2:6a:e3:68:c9:77:21:
6f:5e:77:65:d0:02:7d:45:1d:c1:5a:e0:1c:83:ce:
53:de:a2:b1:21:a4:4f:22:fd:45:2c:2e:6c:17:9a:
38:16:f6:54:28:9f:04:7c:b1:b7:fc:05:ac:ac:14:
14:e9:55:49:92:24:6b:56:9b:12:12:8c:18:2f:9a:
fd:04:7a:f2:cf:bc:b4:48:cd:68:75:7a:18:62:94:
32:cd:db:57:e8:7e:11:3f:83:4f:21:3c:5e:69:0e:
6a:07:85:bb:a6:5a:d1:24:c6:17:74:16:9e:96:db:
1f:2e:f9:4e:c4:a9:c6:6e:29:41:5e:61:9e:ad:2a:
77:a1:63:bb:09:42:cc:ce:62:50:70:2f:5c:e4:66:
1b:4d:61:5d:ab:76:51:7b:3a:ab:db:a0:38:a9:0e:
f0:46:4a:f2:d5:09:70:24:0f:ff:0f:ac:cc:2a:2d:
53:63:a1:f6:3a:e5:88:e7:ab:1a:83:db:cc:d2:7c:
3f:09:05:16:4c:11:6b:9c:c1:3e:d9:cf:0d:8a:93:
84:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:EE:06:44:53:D7:99:B8:2E:84:7B:34:96:66:BF:29:DA:A9:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/df6475-bd71-41e9-9774-779d5fe8a36d/1/xkjuBkRT15m4LoR7NJZmvynaqWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.111.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ad:f3:a2:9f:e7:a4:56:08:3d:e6:dd:d7:60:78:a8:02:bb:
c6:a5:70:47:69:99:af:97:97:44:38:ca:c2:7e:8f:07:79:5d:
70:66:00:38:78:7c:a1:14:b7:2f:c4:91:e8:87:88:bd:08:56:
68:56:78:79:b4:21:d2:d6:d4:48:4e:6e:19:88:1c:1e:63:61:
9c:95:19:4e:81:6d:48:08:27:7a:7f:66:03:65:b9:d3:a4:2e:
22:c0:ad:26:6a:fc:c8:a9:92:94:6a:0e:44:ed:37:a5:48:06:
0d:45:78:87:ed:b8:b7:da:ef:1a:3f:c3:82:9c:4f:91:d1:8e:
16:f1:28:86:a0:dd:08:01:c1:dc:46:b3:4f:aa:5d:b6:eb:77:
25:1e:66:37:e6:4f:38:97:23:49:35:de:bd:9a:a9:51:80:b3:
a5:0d:d3:ab:af:34:2a:bf:4e:c8:5c:5d:e6:34:e6:09:dd:e1:
84:9a:72:9d:40:21:62:7f:91:5b:fd:40:1d:8c:1a:be:d8:4a:
d0:82:3c:67:e1:1b:a3:1d:6b:3c:17:7a:09:2f:5f:d0:6e:a1:
5f:b6:48:6a:d3:e8:65:92:99:eb:0b:c6:9d:98:9d:e7:9a:ba:
65:a5:b6:6c:aa:4c:d2:af:8c:57:72:a0:d1:a0:18:9d:5a:36:
b1:b6:ab:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:13 2024 by rpki-client on console-ams.rpki-client.org