Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VRqof_orrKF8xDw2oOwFJ1ge5q4.cer
File: VRqof_orrKF8xDw2oOwFJ1ge5q4.cer (raw, json)
Hash identifier: o2HMvRzhXQkwTJj2nHRZ7VJ3++V0G19/1lC0CR+ZlCk=
Subject key identifier: 55:1A:A8:7F:FA:2B:AC:A1:7C:C4:3C:36:A0:EC:05:27:58:1E:E6:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D44E6F845D165E728BC929819ADBC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/191/551AA87FFA2BACA17CC43C36A0EC0527581EE6AE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/191
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.142.0/24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 14:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:44:e6:f8:45:d1:65:e7:28:bc:92:98:19:ad:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=551aa87ffa2baca17cc43c36a0ec0527581ee6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:2f:a0:16:27:46:86:07:a7:04:d5:10:73:
93:64:9b:3b:f0:c2:98:95:22:94:56:be:0e:16:b3:
ba:35:77:6f:97:1a:cd:31:04:68:7d:cb:b7:af:f4:
2b:25:bb:a8:7e:af:83:2f:c2:8d:bc:cc:55:63:2e:
56:b1:cb:fb:e1:d1:63:bb:aa:fa:28:64:be:1f:7b:
1c:bf:bc:bb:55:a1:ce:36:1a:3a:63:00:f2:a5:7b:
e9:49:44:1f:c6:0d:46:54:1e:39:e5:8b:da:dd:6c:
1d:c3:db:0e:02:9d:8a:fe:85:81:a2:f2:f0:c0:e4:
20:f3:be:8d:a9:9b:b1:6b:19:2f:3c:b0:b2:24:24:
89:68:0c:ba:61:48:40:9a:34:86:f0:87:29:6e:a4:
a3:39:43:ad:09:37:79:01:22:6c:93:5a:3c:28:52:
f3:91:97:91:f3:c6:12:0f:c9:2e:58:3b:b4:71:99:
ea:c1:53:6f:f1:d3:e2:6e:ba:1e:1f:38:9b:de:68:
32:4c:4c:06:42:a7:5b:c1:92:e7:2a:c4:31:5c:0f:
79:c6:06:05:99:70:b7:7d:66:84:ff:62:5a:26:8f:
bc:2e:d7:d5:c2:4c:92:93:9a:90:3b:ae:5c:39:fd:
ea:2b:93:71:33:d5:7a:a1:30:9e:21:ac:45:fa:de:
54:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:A8:7F:FA:2B:AC:A1:7C:C4:3C:36:A0:EC:05:27:58:1E:E6:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/191
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/191/551AA87FFA2BACA17CC43C36A0EC0527581EE6AE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d7:af:55:05:c6:9c:cb:31:fd:82:3f:24:e9:3f:fa:e8:bd:
0d:9c:06:9b:cf:02:44:65:b5:82:f1:0b:14:e1:ea:65:da:6a:
3f:aa:40:33:f9:e0:45:22:af:20:1c:04:cc:15:71:47:f3:d0:
41:2c:04:d4:da:79:2e:0d:e1:39:aa:b9:cf:6d:cb:1f:51:8a:
ec:37:3e:90:dd:ea:ab:ab:9b:86:67:1a:de:b4:60:42:27:18:
17:8d:d0:8e:07:1b:53:b6:7d:da:79:37:ff:01:a4:cf:c4:a7:
fb:b6:37:e2:54:2c:c7:35:41:f2:81:e7:40:41:69:58:28:1e:
af:2e:f5:96:03:a2:55:09:dc:84:58:8e:3a:7b:57:95:a4:4c:
f6:ae:38:18:a1:e6:e9:16:dd:a7:8c:24:18:e9:fe:7d:77:60:
1e:40:c5:15:35:89:63:e9:bb:06:43:43:c9:49:57:fd:11:eb:
f5:ae:9e:7c:f4:d9:aa:9d:74:d5:86:fd:06:e7:e1:de:85:5d:
6c:31:66:f1:9f:a3:f6:f7:38:9c:b7:de:39:4b:05:40:06:8c:
bb:6c:18:22:58:46:78:3f:7d:a6:b4:be:cf:1d:88:a8:98:9d:
ae:75:a5:ac:3c:92:eb:b0:a2:99:4c:77:83:c2:ed:ee:0b:45:
33:61:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:51 2024 by rpki-client on console-ams.rpki-client.org