Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
File: CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer (raw, json)
Hash identifier: kfQGUWGxYFuiH/44evsBFu4BLqAMhQeaSUAsQyzawas=
Subject key identifier: 09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F41FD3863F738CB9FD43B698E55398A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.23.116.0/22
IP: 2a00:69e0::/32
Validation: Failed, certificate revoked on Fri 21 Apr 2023 10:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:fd:38:63:f7:38:cb:9f:d4:3b:69:8e:55:39:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09660852bd09ad2213da02bd15bbf1837695734c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:87:dd:6b:60:32:ed:23:ce:ee:a7:56:4b:
ce:53:53:71:7a:42:8e:bd:d1:11:c2:e8:fd:9c:d0:
2f:56:30:0b:fc:f3:17:57:43:6f:99:d0:0b:b1:b2:
2b:a8:ec:e9:bf:8a:5a:2e:6e:ab:d5:f4:00:7d:5c:
f3:b9:1c:01:03:5b:7d:0f:0e:c2:4c:ce:c7:15:06:
ac:f4:f1:a3:29:35:09:02:04:63:62:e6:6b:06:68:
14:42:e7:1e:a5:43:15:c9:11:eb:e1:d9:1f:9a:56:
6b:6d:9e:cf:5a:2f:54:b4:fa:e6:59:30:85:54:38:
c8:4d:0c:b9:63:f9:68:29:91:f5:ca:e4:8a:bd:14:
22:01:b2:ad:ce:45:b0:63:02:15:55:b5:5a:34:fd:
fd:61:88:0e:5f:96:17:6f:4c:ca:fe:ee:9a:c1:8b:
21:1c:35:73:7d:b2:d1:7e:f6:a6:e5:60:03:54:0e:
e6:73:6b:dc:96:e2:d9:78:d2:47:c2:f2:fc:4e:63:
c1:5a:31:a1:6a:e6:ec:ef:71:79:8d:f2:4a:c3:a5:
14:1b:df:12:aa:ef:0d:77:16:6e:5f:10:1e:f2:1d:
94:42:cd:ca:48:b8:72:b1:02:8d:7c:f5:9f:04:be:
62:55:29:b0:a7:42:f9:67:03:27:3c:7b:87:15:3c:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.116.0/22
IPv6:
2a00:69e0::/32
Signature Algorithm: sha256WithRSAEncryption
42:a2:35:e3:4c:d6:8d:fd:57:dd:d7:e8:dc:a7:2d:99:5e:b0:
cb:e9:70:6c:3b:70:18:76:58:51:45:dc:58:b1:21:61:34:af:
82:ed:de:34:d1:59:92:6e:bf:30:01:cd:9d:b2:f1:17:7e:33:
7e:74:fd:48:0c:9f:f5:39:3d:66:6f:49:f9:00:43:26:ef:96:
05:d8:32:8e:8a:d0:ff:50:35:c6:21:ea:8b:5b:22:e3:28:b1:
9d:d7:d0:dc:3f:f2:4d:55:83:e8:1e:26:5e:08:05:a6:39:82:
f7:88:a7:ba:a7:55:26:f3:20:b4:20:b2:a0:5b:5f:76:f4:04:
f8:22:70:26:8b:54:3c:3b:52:a9:62:c7:17:b7:c1:e4:b2:19:
71:fd:c7:04:22:84:4b:4a:d9:6f:35:9c:43:c6:db:86:6d:25:
21:65:7d:52:59:e7:96:12:b7:12:2a:c9:af:4c:ae:fa:05:93:
dd:ed:31:5f:7d:83:88:fa:4f:a4:0d:3d:b5:ca:46:33:d8:eb:
ad:c7:73:1b:4b:4e:6e:d5:c5:25:be:2d:59:32:01:5d:76:3d:
2b:f7:a3:d1:fe:cb:19:a9:8a:47:7d:90:0d:8f:d7:ab:2a:4b:
4a:18:b6:8e:3c:a8:66:d1:35:98:63:69:55:10:bc:8a:1f:be:
cd:2f:e9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-fra.rpki-client.org