Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RO_y4eCENS2zzc11F3CUZQXj43s.cer
File: RO_y4eCENS2zzc11F3CUZQXj43s.cer (raw, json)
Hash identifier: 84SttpeIKgSF1ukDTzY3RuAAhR11Oz7vhgvqCYNa5Bc=
Subject key identifier: 44:EF:F2:E1:E0:84:35:2D:B3:CD:CD:75:17:70:94:65:05:E3:E3:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222CAA3477F4AE4DC13C212E26D6DC54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.209.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:aa:34:77:f4:ae:4d:c1:3c:21:2e:26:d6:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44eff2e1e084352db3cdcd751770946505e3e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:a6:4e:2a:c0:25:e0:e1:41:e0:b3:62:16:
e6:94:91:a2:f0:a4:cc:75:c9:6c:8a:bd:79:37:71:
11:c7:5f:b5:6d:91:85:c4:12:59:f2:65:7c:17:d5:
3b:db:10:12:73:29:f6:3c:d4:88:69:19:16:0f:09:
a5:ed:8f:31:03:39:4f:d5:0f:d1:15:87:d0:7f:a7:
df:57:e2:9a:63:01:62:3c:e0:86:ff:3c:75:1f:5c:
59:4f:62:a5:ab:76:bc:1c:49:7f:28:9e:86:c5:6f:
36:4a:ad:ca:66:0f:18:e5:67:40:5b:b5:c5:6d:05:
25:ac:c3:c6:37:4d:9a:92:6a:b3:12:4d:16:11:e2:
98:92:9f:0c:9c:a2:6f:16:43:be:ce:05:cb:2c:44:
3f:83:ba:61:f1:55:bf:6e:bf:96:2a:61:8b:34:b0:
c2:d7:b9:08:cf:b8:0b:2a:6a:fc:18:9c:bc:9f:90:
87:b5:9e:4c:5d:bf:5a:d8:31:58:ee:a3:c4:d4:c5:
e6:ad:cf:ef:6c:4b:ca:f7:70:f7:53:e0:19:e6:84:
88:50:c7:bf:39:1d:37:03:c9:7c:36:05:34:74:23:
ff:56:37:37:ff:d7:ce:e4:d9:97:9b:f1:de:1f:8d:
44:05:3f:97:a9:ad:10:d4:f7:00:48:7f:c6:9c:36:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:F2:E1:E0:84:35:2D:B3:CD:CD:75:17:70:94:65:05:E3:E3:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/204/44EFF2E1E084352DB3CDCD751770946505E3E37B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:20:55:9e:ba:18:2f:f3:c3:28:7f:a8:9f:19:0f:ec:8c:87:
18:ae:68:14:35:6f:4a:f9:5c:8d:16:98:3e:6b:61:54:6a:0b:
38:be:fc:de:e2:1c:62:99:14:47:df:b3:ec:cf:1c:cf:52:64:
f2:ac:81:46:af:b4:ae:18:c9:b7:aa:05:fc:35:6c:b8:4f:39:
c9:e5:c4:cc:d1:14:32:35:5a:fd:09:ec:a0:60:18:86:7e:b9:
cf:a7:e2:dd:d7:5f:d5:c2:37:ec:4b:cc:b9:8b:ab:43:8d:76:
72:c1:7f:3a:56:b3:7d:11:df:c7:a8:46:a8:7f:01:e3:32:2c:
b8:7c:16:33:e3:53:59:e5:b3:50:27:f7:e3:ab:48:ab:55:5b:
29:d3:1c:20:ca:a3:63:dc:bf:96:71:68:3e:b6:b5:72:c0:d9:
8c:03:c4:38:37:3e:91:06:04:c6:1d:c7:5f:f5:4b:68:7e:c6:
3c:7c:53:55:ab:e1:1c:d4:e5:9d:96:78:7e:28:85:3d:b8:a1:
2d:fd:0a:c7:91:a9:e4:cf:0f:ff:ed:b9:f8:cd:09:fe:cb:ec:
1a:e0:57:a2:21:fe:a9:0f:4b:e5:43:1c:4a:87:a3:76:ac:9a:
ae:17:d6:a5:e2:a5:8a:b2:0f:41:bd:cc:5d:cb:bc:1d:7b:f3:
ed:9f:d1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:31 2024 by rpki-client on console-ams.rpki-client.org