Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L1DEVbG8UNVlv9ZggKetbJQveMU.cer
File: L1DEVbG8UNVlv9ZggKetbJQveMU.cer (raw, json)
Hash identifier: /AbELBkcapdn4Xw7eYLep8Gektp3SbpgNUN3ajJ6COY=
Subject key identifier: 2F:50:C4:55:B1:BC:50:D5:65:BF:D6:60:80:A7:AD:6C:94:2F:78:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D2B48F34B804A2985C25322F27D3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206/2F50C455B1BC50D565BFD66080A7AD6C942F78C5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.42.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:2b:48:f3:4b:80:4a:29:85:c2:53:22:f2:7d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f50c455b1bc50d565bfd66080a7ad6c942f78c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:e6:31:cd:74:c5:fc:57:1c:99:ce:cb:49:
71:4f:af:c8:8a:24:4d:51:54:ff:2d:f3:c5:4a:0e:
e1:e1:cb:ab:c9:56:03:bc:fb:18:6a:be:c8:d8:09:
5c:f8:a6:ab:28:be:2a:eb:52:98:c2:9b:06:d4:3f:
6c:ec:18:97:b6:f2:f7:2a:d1:b1:b4:9c:af:85:5a:
74:65:b9:f2:b8:67:16:ab:79:96:21:fb:9e:87:cc:
13:48:c7:74:b9:27:4a:96:89:d7:87:2f:5f:d3:f9:
bc:6f:3b:43:f6:5f:1d:6d:de:22:ab:67:97:a0:c2:
6f:9b:1d:9e:f3:a4:57:d9:0e:20:be:f6:38:f0:47:
b6:d0:a3:13:e6:a2:2d:d5:3a:b3:2e:62:cc:86:2f:
1b:81:9a:a4:66:62:11:db:28:37:b8:f0:8c:1c:b7:
b5:7d:9c:4a:60:e1:a9:b1:70:66:ab:40:f6:14:fc:
ce:68:76:9f:82:00:81:8a:36:1a:14:b5:2d:0d:ec:
c5:57:c8:c5:6e:d9:5d:04:69:93:04:87:b8:c8:53:
4c:d4:5e:05:10:a4:8c:3c:21:76:d9:f5:22:94:de:
05:78:9c:f4:8f:d3:9b:7c:c8:1b:00:2b:66:58:ee:
14:10:a1:e1:3c:aa:52:86:06:d6:d2:4b:3e:3e:79:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:50:C4:55:B1:BC:50:D5:65:BF:D6:60:80:A7:AD:6C:94:2F:78:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/206/2F50C455B1BC50D565BFD66080A7AD6C942F78C5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:90:0c:b7:f5:b2:73:a9:d3:4a:46:4e:c1:7d:2e:3e:72:05:
bf:00:ad:01:ad:37:aa:1e:36:82:6f:dd:c8:de:bf:a1:be:de:
bf:0f:d3:19:5a:d6:c8:1a:72:09:a3:82:24:73:fc:10:f0:a7:
3a:8b:fc:0c:9f:fa:d0:69:e1:4e:48:ac:e3:66:09:94:da:9c:
c4:1e:81:b8:ab:5c:06:a4:d9:ed:a4:7e:97:73:90:03:dc:ee:
39:80:b5:5e:00:5e:b9:77:c5:15:59:cc:ac:ff:ef:30:38:27:
f3:de:1e:1c:86:ae:e7:13:82:52:4b:e8:8d:94:0c:76:41:90:
e8:9a:33:fb:ec:4a:d0:78:a7:69:98:44:e9:e1:a9:c3:7f:77:
76:f9:6c:8a:3a:ca:7d:60:37:b0:34:e1:d4:3d:a4:69:08:cb:
f2:b1:b8:14:49:e6:6c:38:56:d3:4f:d0:c1:0d:90:b7:2e:b9:
7b:c7:92:88:9f:63:6f:f4:e3:0f:5d:3d:5b:ef:d1:30:88:9a:
23:c7:1e:37:ce:1d:5e:f7:40:39:54:8e:6a:c8:c0:7f:f3:28:
86:60:74:f3:4f:91:06:41:5b:03:99:26:d9:f4:ea:32:7c:7f:
7e:d8:5c:5d:ae:88:cf:d4:58:cb:52:28:cf:61:2e:2f:bd:ee:
54:e6:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-fra.rpki-client.org