Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YZzE3xB3Spg45Q96o-VwwH-wjaM.cer
File: YZzE3xB3Spg45Q96o-VwwH-wjaM.cer (raw, json)
Hash identifier: msfHcZdTI/9BGzA4uPyN0Bg3SNOJlJgJVZoqQc5ZEos=
Subject key identifier: 61:9C:C4:DF:10:77:4A:98:38:E5:0F:7A:A3:E5:70:C0:7F:B0:8D:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D2393A8A18D60EDA8F18C514C2A90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205/619CC4DF10774A9838E50F7AA3E570C07FB08DA3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.30.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:23:93:a8:a1:8d:60:ed:a8:f1:8c:51:4c:2a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=619cc4df10774a9838e50f7aa3e570c07fb08da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:e2:0a:fb:ef:12:4c:94:23:c3:b6:ca:ba:
ed:85:2a:0b:d6:e6:18:51:db:87:1c:a9:11:9e:dc:
7a:1a:3a:6c:38:47:d9:09:70:fa:af:38:88:86:a2:
d3:60:51:b3:74:8b:7b:27:f6:69:f4:a2:63:62:ca:
ac:9b:ff:24:04:3c:b3:1b:9c:18:e5:5f:f7:dd:39:
00:ea:ca:63:f6:88:f2:5d:42:b6:a9:dc:49:e2:77:
c4:15:ac:e7:83:7f:67:91:08:5b:48:ff:7e:0d:ef:
16:8b:51:2b:78:0d:fd:b9:93:8f:09:76:e2:41:81:
8b:a2:6e:d1:78:cd:60:25:24:1e:90:98:3b:0b:bb:
ee:11:1e:95:78:21:25:a5:e3:45:ba:e7:fb:88:3a:
21:cb:71:53:bf:ec:57:37:a3:40:a2:e0:b2:d8:7e:
0b:f2:10:45:5a:71:4e:70:e0:2c:e0:76:8e:fb:e6:
49:75:d4:a1:37:4b:62:28:e2:5b:5c:5d:42:ba:30:
dd:18:38:92:b6:1c:dc:16:d2:7b:63:d7:14:8d:cd:
7e:4c:de:c6:95:3f:be:7a:74:f2:b9:b6:ae:8c:ff:
43:d2:09:5a:23:fe:f2:fa:3a:6f:b4:c2:76:34:65:
d9:34:66:63:66:4d:94:5e:17:f5:5f:4d:38:d4:95:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:C4:DF:10:77:4A:98:38:E5:0F:7A:A3:E5:70:C0:7F:B0:8D:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/205/619CC4DF10774A9838E50F7AA3E570C07FB08DA3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.30.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5e:ee:fb:95:75:aa:86:c5:44:94:07:c1:54:d1:30:f2:f5:
c4:fe:b6:99:da:10:ad:82:10:68:11:56:53:74:db:13:ba:89:
2a:e8:9a:54:3b:64:b9:0f:f0:55:57:2d:8e:77:47:de:1c:a0:
e3:89:6e:0c:a1:1c:ca:69:85:c2:34:b9:46:f4:c8:b6:fa:64:
a8:c8:08:f2:fa:01:18:63:20:74:05:8e:86:4f:3d:c0:1e:72:
fd:a8:69:d6:8b:9d:f0:82:4b:be:c9:ac:f4:5b:ff:05:75:a9:
2b:e9:86:51:85:d0:45:44:2d:0b:61:37:a0:9f:43:eb:1b:88:
a6:4d:86:e4:fe:92:5a:f4:63:6e:ec:1b:76:96:10:72:7d:3c:
ef:0a:25:82:a8:fc:bb:be:94:9d:4e:cc:fe:fe:12:19:e5:e5:
60:68:46:6f:e5:c2:24:c0:ed:cd:fe:1a:7a:df:4a:34:db:0b:
92:d6:d6:7f:7e:e2:4b:57:12:bc:ca:8d:ad:20:06:d6:a9:f4:
4d:53:67:d3:e1:bd:8a:41:ec:3c:88:8d:90:32:8b:5a:0b:09:
aa:88:e3:04:f6:33:c9:a5:96:ad:91:a7:2e:8b:40:a6:0b:ab:
50:ec:c8:c8:e7:bd:0a:5e:e7:36:14:79:b6:d9:1a:47:04:d0:
45:cf:1b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:11 2024 by rpki-client on console-fra.rpki-client.org