Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6chkTEHvm9J5j_7l1zHohJ0L5t4.cer
File: 6chkTEHvm9J5j_7l1zHohJ0L5t4.cer (raw, json)
Hash identifier: 06wZijs3cGUxx2iFtYOOOs0coJcdJMKuxlIxG/5Sg/s=
Subject key identifier: E9:C8:64:4C:41:EF:9B:D2:79:8F:FE:E5:D7:31:E8:84:9D:0B:E6:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D4B5E933E9A24177CBDA02AA5FF61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188/E9C8644C41EF9BD2798FFEE5D731E8849D0BE6DE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.9.0/24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:4b:5e:93:3e:9a:24:17:7c:bd:a0:2a:a5:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c8644c41ef9bd2798ffee5d731e8849d0be6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d6:79:bb:0e:28:f6:c4:b1:b2:1d:ab:00:5d:
15:a9:72:a1:46:19:89:c9:a9:00:fc:5f:20:25:9c:
89:20:35:c7:b9:9a:94:ea:e8:39:27:4c:e3:47:c7:
cf:50:4e:fb:4b:e4:4d:e6:3b:bc:e8:18:0b:10:82:
00:23:50:45:c0:2b:ec:e8:20:5e:91:02:cb:e5:4f:
97:d0:8a:8f:ae:17:3b:8e:6a:8f:b9:c8:d4:2a:37:
55:8b:b3:6c:16:58:30:77:81:a9:b5:0b:e1:86:80:
d8:19:2e:bf:90:a2:c8:71:d7:e2:3e:36:cd:fc:58:
d1:ae:14:3b:d7:f6:9c:97:6c:3a:8d:70:a2:ee:0e:
93:72:c0:37:e9:fc:7d:c4:4c:d3:ef:7a:2e:12:0d:
f2:1f:7b:5a:44:c9:e9:24:d9:75:2f:09:73:08:f2:
7b:e1:4e:d6:53:16:a9:63:d9:29:f1:92:e3:c5:6e:
7d:eb:16:fb:db:df:77:07:88:65:d4:e8:06:94:38:
4b:23:de:75:20:6b:37:e4:51:8b:05:bf:23:0b:1c:
6c:c0:c5:38:cc:89:06:e3:ac:65:4a:da:25:24:73:
6f:bd:4e:32:03:17:66:26:e5:92:fb:b3:30:a3:f0:
d1:97:55:ef:91:c2:d6:f2:af:9c:e2:c3:a8:85:3c:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C8:64:4C:41:EF:9B:D2:79:8F:FE:E5:D7:31:E8:84:9D:0B:E6:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/188/E9C8644C41EF9BD2798FFEE5D731E8849D0BE6DE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.9.0/24
Signature Algorithm: sha256WithRSAEncryption
06:83:da:c6:bf:c2:93:56:1c:82:08:69:20:5d:f3:01:46:31:
f1:8e:88:b6:e5:f2:70:5d:0d:25:5f:d3:d6:12:a9:18:5b:95:
7b:a7:b9:ec:0c:c9:12:8e:a9:7f:d3:eb:4c:1c:2d:7e:fb:c4:
f8:25:68:3b:89:57:c7:c5:6a:ec:37:2a:df:ea:94:b6:b8:94:
c6:d0:0b:39:66:89:ea:8d:11:18:0c:5c:d5:b3:eb:b5:90:c1:
85:84:10:75:b4:ad:a7:50:86:a7:38:c0:71:15:a1:3d:d8:40:
95:6a:43:f5:a7:a1:a5:5c:be:e7:e1:01:b2:06:11:c7:dc:75:
d7:b8:8a:26:1a:52:4e:2e:7e:45:93:2e:3b:c1:6e:01:3f:a9:
ff:ea:f5:1f:61:35:b0:65:a5:91:ca:4f:f1:f6:bb:4d:7f:ec:
67:ca:3f:0c:f4:2a:1a:f5:90:cc:27:16:d1:57:eb:bc:f8:4b:
95:f6:25:d4:9e:e4:41:56:71:2a:14:33:74:75:f4:d7:a4:6b:
0c:4b:ad:8b:f4:d6:69:1f:75:2c:ea:98:c1:a0:cd:38:90:05:
8e:33:d5:86:e0:7d:93:6e:95:dd:10:7a:71:12:d9:4e:e5:99:
d1:b7:0e:1e:8d:c7:aa:03:6b:a4:19:9b:15:3d:0a:9f:d9:0c:
37:a2:aa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:36 2024 by rpki-client on console-ams.rpki-client.org