Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VFoZqFitPdaXbxZ24n52q1GAMmM.cer
File: VFoZqFitPdaXbxZ24n52q1GAMmM.cer (raw, json)
Hash identifier: uIGTVrFsN3gUe0aeR9xYe7iWAUuBCAp3DFTNQzGMLZg=
Subject key identifier: 54:5A:19:A8:58:AD:3D:D6:97:6F:16:76:E2:7E:76:AB:51:80:32:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C6D727F22E9F7D1FEA08B1D3FA443
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/199/545A19A858AD3DD6976F1676E27E76AB51803263.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/199
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.157.0/24
Validation: Failed, certificate revoked on Fri 20 Oct 2023 11:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:6d:72:7f:22:e9:f7:d1:fe:a0:8b:1d:3f:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545a19a858ad3dd6976f1676e27e76ab51803263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:04:be:08:ae:f1:13:83:95:f7:27:ef:ce:
a5:54:01:24:30:5f:f7:06:08:d6:32:ac:a1:4d:ce:
9f:44:98:39:7f:48:f0:de:aa:76:ee:1b:b9:6e:9d:
48:c2:df:7f:3f:54:05:1e:d0:83:35:f1:18:5c:44:
59:2e:fa:37:10:6b:ae:5c:fb:aa:75:f5:a0:31:90:
b3:3e:24:48:48:1b:32:cb:4e:fa:64:12:08:ea:d9:
47:59:db:42:c6:ca:79:d3:04:a3:54:06:de:b4:72:
09:aa:f7:81:d7:38:0f:8d:54:1a:1a:05:06:26:31:
79:75:ea:68:82:da:b4:cc:6b:77:c3:d4:1d:02:f8:
97:fa:f4:8a:17:08:90:96:bd:2d:f4:b4:d0:8c:43:
6a:7b:25:85:13:c7:9d:97:0d:55:10:7b:f4:1e:7d:
8d:2e:cb:de:33:ed:f4:4d:21:85:7f:3b:83:b3:5f:
e9:b5:75:12:22:29:e4:75:36:34:31:ce:11:26:a9:
74:e3:f8:ad:01:16:e6:c0:cf:92:2c:1e:05:17:35:
3f:01:12:c9:c3:c2:23:48:03:1a:52:ef:47:c6:ee:
5a:1c:0a:f0:30:c8:fe:c5:00:17:95:07:e9:8c:87:
14:4a:ad:c4:ce:01:6c:e9:28:8c:78:62:d4:06:17:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5A:19:A8:58:AD:3D:D6:97:6F:16:76:E2:7E:76:AB:51:80:32:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/199
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/199/545A19A858AD3DD6976F1676E27E76AB51803263.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ef:e5:85:da:16:65:72:00:0b:5b:3e:aa:27:3a:93:19:32:
47:9f:3c:fc:ea:f7:cc:cd:20:1a:aa:a9:b1:f7:6d:e7:b4:6c:
6e:3d:e2:6b:a4:f4:78:91:a9:cf:c3:04:07:62:43:06:ec:7c:
09:20:30:d0:a4:e7:be:07:b7:36:a5:d2:2d:c8:1c:68:46:f3:
18:0b:74:4f:77:28:33:d2:49:6d:25:ae:d7:6a:7d:03:a3:e7:
93:c8:b9:d0:34:07:38:c3:fb:7d:43:f1:d2:46:54:38:fd:e4:
b7:28:29:01:b7:ea:76:e1:f1:3d:c0:21:56:12:21:40:cf:6d:
cf:98:68:a4:5f:23:d8:ff:08:9a:3a:38:2a:00:95:7d:7c:f1:
e0:b8:21:6a:d0:56:59:87:91:1b:69:26:fb:07:c2:c6:25:b3:
a0:32:75:6a:a2:e9:42:51:65:7a:e2:1c:7b:6a:a9:d5:53:6c:
94:e3:81:0c:12:df:9b:ef:41:8e:29:91:bd:2f:09:17:b7:b0:
6f:0e:01:6c:a5:7b:3b:0b:d9:f3:99:13:d0:13:18:35:10:c0:
ad:94:47:2d:38:b8:82:e8:6d:5a:bb:dc:ac:79:02:0a:06:04:
4f:da:9e:8d:4a:d0:1b:4f:ac:2a:13:5e:bf:8d:b7:cd:58:91:
bf:34:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:24 2024 by rpki-client on console-fra.rpki-client.org