Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jCOQ2IxASj16rNWeO42m94FN9yU.cer
File: jCOQ2IxASj16rNWeO42m94FN9yU.cer (raw, json)
Hash identifier: dLBNJH79ggFmgjjJ5wmxJgYF0m6jTN0gY17gW11KRTU=
Subject key identifier: 8C:23:90:D8:8C:40:4A:3D:7A:AC:D5:9E:3B:8D:A6:F7:81:4D:F7:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C9E863DA467829EE2E996EB119A0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193/8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.247.187.0/24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 14:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:9e:86:3d:a4:67:82:9e:e2:e9:96:eb:11:9a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c2390d88c404a3d7aacd59e3b8da6f7814df725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:34:94:b3:d6:17:94:92:54:34:0e:a1:23:
87:59:ba:6d:17:2f:22:8e:2b:56:e8:c1:a8:5e:c8:
81:14:54:d4:83:2d:5e:11:93:86:e9:40:01:36:bc:
e5:9d:9c:15:5f:ab:65:b4:45:c0:69:23:a6:14:2a:
41:e6:e0:9b:eb:99:f9:2d:a8:9c:a7:4a:45:e0:b2:
0a:b8:e1:18:83:87:9a:2d:89:03:86:c7:bd:25:88:
e8:9d:a6:7c:70:6b:b6:43:f1:e5:24:01:b2:d3:90:
02:68:64:e4:a3:90:ee:cd:38:b1:10:14:4c:e3:7d:
b2:23:a1:94:0a:69:5e:4e:fd:04:54:75:52:c3:3a:
c9:c0:f6:8c:78:e7:47:06:3c:bf:50:dc:eb:76:4e:
eb:98:84:d5:28:cf:ae:97:f7:bf:8a:76:ca:be:d0:
aa:65:12:f8:1b:66:7f:4e:30:4d:aa:4c:2d:ac:e5:
88:fb:b8:a8:5e:81:66:8d:06:a6:04:23:04:42:a2:
26:1b:9f:2c:81:05:fd:ec:1d:89:15:59:f7:2d:9f:
54:8c:8c:96:0f:e4:c7:41:bb:fb:a2:18:99:9c:2b:
dc:96:d3:49:73:db:9d:06:8c:e5:23:d8:f8:73:8f:
68:3b:f3:7c:b5:9f:5a:99:4a:20:3c:9b:b6:fc:3a:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:90:D8:8C:40:4A:3D:7A:AC:D5:9E:3B:8D:A6:F7:81:4D:F7:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/193/8C2390D88C404A3D7AACD59E3B8DA6F7814DF725.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.187.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:32:02:42:df:23:34:aa:3f:24:f2:0e:92:43:bc:16:b1:64:
13:2f:13:35:50:34:0b:92:8c:0f:42:5e:b0:d5:b4:e3:56:a1:
ef:c2:db:d8:f2:41:b4:4f:2d:52:ca:d4:9b:e2:ad:94:cc:7c:
9f:dc:56:ea:ae:70:bb:7f:65:3f:e1:b4:e4:f9:9a:27:1d:a9:
31:fd:54:56:1b:9f:84:c7:4f:88:21:ad:41:cc:9c:12:59:7d:
ce:01:81:37:4f:29:58:6a:00:7c:d4:33:a3:0d:ad:8a:93:1e:
d0:7b:37:6f:da:50:eb:a8:8c:8c:9c:4b:35:82:36:7f:19:c2:
21:5a:8d:2d:53:c0:9c:1e:2d:43:07:4d:93:b3:b9:e8:36:e7:
d3:a1:e5:3b:26:6d:24:9e:4f:d3:77:28:2f:8b:be:7c:66:8b:
a4:5d:b4:2f:15:dc:b0:db:85:7c:87:d5:6c:d4:74:da:ec:75:
ca:75:f6:ac:79:fa:af:71:87:a9:82:82:39:0e:5a:d3:cb:50:
26:04:04:5d:79:d4:0f:62:3d:16:48:45:bf:66:a0:3b:65:55:
d0:9b:8b:22:81:1b:3d:15:20:b3:d0:8f:c0:c1:64:2e:27:6a:
7a:a4:99:94:21:f3:64:e2:a2:97:71:02:60:02:ba:9f:bd:5b:
a7:89:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:47 2024 by rpki-client on console-fra.rpki-client.org