Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ptAk7_6WYJIAwD2kN7zDG--MqIs.cer
File: ptAk7_6WYJIAwD2kN7zDG--MqIs.cer (raw, json)
Hash identifier: n3BhBdXsvSGAifwA3fMzbnmnARThoD+pMwnwngq0KGQ=
Subject key identifier: A6:D0:24:EF:FE:96:60:92:00:C0:3D:A4:37:BC:C3:1B:EF:8C:A8:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C20140B1A2E99D77145FACAD40A62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/187/A6D024EFFE96609200C03DA437BCC31BEF8CA88B.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/187
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.195.0/24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 12:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:20:14:0b:1a:2e:99:d7:71:45:fa:ca:d4:0a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d024effe96609200c03da437bcc31bef8ca88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:04:06:77:ca:59:df:d1:28:e0:70:bc:a2:
fe:bc:01:a6:b7:40:40:56:20:ae:9f:66:41:61:7d:
be:5f:9a:07:e8:0a:e1:a0:5a:86:ad:d6:53:a2:66:
b4:b1:58:99:59:be:96:a7:f1:57:24:75:9c:fd:33:
98:cc:03:2b:fc:cd:32:c4:6f:bf:94:3e:d6:9f:62:
08:18:33:fd:ce:58:e4:99:96:3d:5e:a8:33:eb:8b:
0b:a1:9d:4a:3f:be:c2:f8:63:07:c0:08:e1:b7:f6:
9f:54:c0:2c:c0:4e:de:cf:ff:b8:61:ef:f0:30:59:
1a:93:62:ee:a4:58:6c:bf:55:66:7d:aa:99:7a:ef:
69:21:94:0a:fb:1e:53:d4:72:4f:75:64:9a:3c:18:
23:bd:87:a2:96:e7:89:0f:2e:75:99:83:8f:88:f8:
0c:b7:db:6d:a0:a4:29:ed:f1:bc:d3:ed:4c:99:1e:
e0:6c:86:30:36:b7:32:05:d5:04:e5:d0:60:55:c4:
b9:6f:24:fe:aa:9e:74:c0:ca:ce:91:b1:94:b7:4a:
32:d0:1a:2e:92:41:40:33:02:28:99:d8:af:1d:3a:
67:81:4a:18:9b:55:69:8c:a5:fa:ec:23:c2:61:ba:
fd:1b:df:bc:bc:22:10:df:f5:51:33:bd:68:c0:96:
17:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:24:EF:FE:96:60:92:00:C0:3D:A4:37:BC:C3:1B:EF:8C:A8:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/187
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/187/A6D024EFFE96609200C03DA437BCC31BEF8CA88B.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.195.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a6:d9:e3:4a:25:7a:81:2b:2f:40:9c:ce:7a:83:b5:54:40:
b4:c5:20:a0:54:48:20:7e:65:96:6b:69:1e:52:a5:3c:ee:63:
e7:42:35:fd:d9:9c:6f:6c:32:c3:2b:11:ad:b2:3d:1d:b9:40:
82:bc:45:76:c3:04:bf:95:85:2d:83:69:58:d8:d7:cb:a9:32:
1a:49:31:87:2d:f5:27:cd:51:8b:30:83:37:50:27:69:11:f7:
46:16:32:ae:ac:6b:da:b9:53:75:72:cc:27:b2:59:55:ba:8e:
b6:40:f0:b0:4b:b8:2a:84:ea:35:5f:3f:d1:a7:73:82:45:37:
93:cc:31:ba:5f:58:59:2a:01:94:0b:9e:7d:20:31:d1:ca:0f:
0a:1e:11:e8:dd:0c:94:6f:23:68:dc:d6:74:0b:b2:1e:05:65:
38:81:46:c9:5a:24:04:1e:b5:2a:e0:26:84:50:21:5d:01:a1:
54:f9:66:b9:4c:41:c1:4d:4f:65:ea:a8:21:a9:3b:b4:80:6d:
0d:26:dc:f9:68:06:84:dd:74:68:3e:b0:f1:1f:0a:f9:cf:ce:
35:10:d8:fd:39:24:5b:db:1c:55:68:9a:a2:22:08:b6:eb:09:
70:6b:46:6f:ea:82:61:29:32:0e:7b:30:b6:8f:08:01:b3:2f:
93:6d:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:06 2024 by rpki-client on console-ams.rpki-client.org