Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XlcfrOQkCiuLFWFIC4ouAKbV4zU.cer
File: XlcfrOQkCiuLFWFIC4ouAKbV4zU.cer (raw, json)
Hash identifier: 7YePKxE0DqpVE+foX1CLk06jLunnx9ePsYBdtTFCr1Y=
Subject key identifier: 5E:57:1F:AC:E4:24:0A:2B:8B:15:61:48:0B:8A:2E:00:A6:D5:E3:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D05094748005D1BD416773B501048
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181/5E571FACE4240A2B8B1561480B8A2E00A6D5E335.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.253.227.0/24
Validation: Failed, certificate revoked on Wed 31 May 2023 09:19:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:05:09:47:48:00:5d:1b:d4:16:77:3b:50:10:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e571face4240a2b8b1561480b8a2e00a6d5e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:a1:21:b4:44:40:4d:03:b1:1b:5e:67:73:
b5:0c:1e:09:4c:71:16:49:b7:4b:39:91:34:24:18:
ac:82:99:3a:d2:db:96:2d:f2:f2:25:9a:c7:ac:cc:
7e:83:59:ea:d2:a6:09:49:05:e2:e5:7a:5e:16:c0:
4c:9b:76:53:0f:eb:21:e3:b4:6c:70:76:49:65:d9:
fd:64:f1:1b:66:eb:90:40:09:76:bf:bc:64:91:01:
6e:c8:8b:88:33:2f:bc:3b:3f:b0:29:88:e8:6c:bf:
21:89:6d:77:10:fc:72:27:10:65:fc:f2:d2:44:89:
1e:e3:03:2a:89:22:e1:6b:7d:df:63:65:b4:35:89:
c6:a8:2e:b1:6f:97:9b:57:f5:d2:5c:61:e0:a6:d2:
2a:84:1c:17:26:95:36:b1:a1:6e:e3:3c:83:df:45:
8e:d9:b2:be:74:21:bb:7f:df:73:34:c1:20:ab:3f:
4b:61:43:07:8e:a3:fd:d7:df:55:e6:e0:83:c1:0a:
f4:55:44:5e:05:31:98:4b:fa:7c:f7:77:77:59:48:
3c:b3:e7:6c:4e:f4:57:4c:fc:c0:6e:6d:e5:22:b0:
7d:bf:03:65:30:4e:6b:3d:04:9d:7c:fd:47:a7:ef:
47:af:64:cd:9c:f4:35:17:fc:6a:ec:31:bd:d4:38:
e9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:57:1F:AC:E4:24:0A:2B:8B:15:61:48:0B:8A:2E:00:A6:D5:E3:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/181/5E571FACE4240A2B8B1561480B8A2E00A6D5E335.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.227.0/24
Signature Algorithm: sha256WithRSAEncryption
30:77:d5:a0:8f:04:5e:bc:5f:62:6b:47:c3:be:3c:2f:92:d8:
72:6f:45:ad:06:4f:ca:db:74:dc:42:25:60:40:b7:49:7e:7b:
ae:b8:f9:f8:f2:3f:6e:ae:80:4d:50:64:f4:c5:be:2e:b9:4f:
fc:42:6c:a8:35:f7:c8:1e:9e:5b:8b:54:bb:10:87:7a:7c:ba:
40:2d:d0:81:b3:16:78:1d:b9:4b:98:07:67:79:ed:cc:f3:3f:
c9:81:7d:9e:12:7a:d9:ea:e4:dc:ad:13:0f:0c:9c:72:54:c0:
53:70:3e:96:85:39:fd:11:ed:b3:41:15:08:ee:8b:e0:68:81:
fa:5e:35:ca:3c:73:66:a8:2f:1b:e9:ec:4e:fb:13:7e:d6:d6:
54:5c:cd:60:61:4b:92:76:57:5a:2f:b6:25:19:6e:31:59:e2:
3d:ab:a9:16:d3:c5:f9:0c:f5:07:82:8a:89:a5:ff:ec:aa:b2:
a8:b0:e7:cf:b5:59:03:e5:91:75:c4:f8:a4:f3:09:0a:5f:0a:
31:10:1c:c0:03:6c:52:cd:38:ff:3a:67:b3:ee:c8:1e:5d:05:
5f:26:dd:33:00:ad:cf:3c:cb:fa:d7:63:a7:72:39:72:31:9b:
9d:16:cc:fa:9d:c5:75:8c:95:03:cd:a4:3c:07:30:7f:59:57:
83:07:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:01 2024 by rpki-client on console-fra.rpki-client.org