Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t_FZsgDOht7HtiCmVb2OCKuBYcs.cer
File: t_FZsgDOht7HtiCmVb2OCKuBYcs.cer (raw, json)
Hash identifier: vj/ZyXoozWUML57FEfzZj7k/ZRlS8GaOS0WzB/VQIEg=
Subject key identifier: B7:F1:59:B2:00:CE:86:DE:C7:B6:20:A6:55:BD:8E:08:AB:81:61:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D277377AE8EF2AE95EB2974CC4D2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/182/B7F159B200CE86DEC7B620A655BD8E08AB8161CB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/182
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.125.0/24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:27:73:77:ae:8e:f2:ae:95:eb:29:74:cc:4d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7f159b200ce86dec7b620a655bd8e08ab8161cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:c6:b1:2d:07:6c:ba:db:c3:55:fa:ae:8a:
06:a4:59:aa:60:e3:ed:c9:e6:bd:48:2e:f3:4c:4d:
47:6a:c7:7c:b8:d1:03:c4:f5:5e:b6:30:8d:e2:7d:
1c:5b:d0:ac:32:3c:19:63:60:59:d2:f4:1f:6c:d9:
f4:ad:47:92:e4:bc:14:b6:f6:11:55:41:29:52:68:
7a:7a:95:39:d2:59:1a:0d:65:0c:40:b4:d0:12:ef:
61:1e:8a:44:73:05:ef:9a:78:2f:8e:39:14:d5:44:
ce:71:92:2e:53:45:92:df:33:e9:06:b9:e2:e6:47:
98:0d:bf:9a:82:de:0f:e9:f8:e3:8e:6e:df:e2:8d:
bb:cb:9c:8e:08:77:fd:20:a4:b9:8f:6c:14:9a:c4:
6c:27:bd:ee:15:c0:8d:ff:16:06:9a:83:b4:a5:e0:
2a:8d:60:0c:d9:87:9e:99:cc:bc:89:27:79:d8:b3:
f9:ac:7c:ae:4c:57:c7:a2:b0:33:2e:6d:98:e3:44:
98:42:bd:34:ac:4b:50:12:2a:21:fb:a5:08:7d:c5:
f8:c0:75:31:44:ad:f4:1a:15:07:d3:d5:7d:c8:6c:
71:0e:7f:59:3e:cb:6e:17:83:66:47:65:e4:53:c3:
44:96:2e:b8:22:fb:18:f4:09:ad:7e:79:1e:fa:41:
38:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F1:59:B2:00:CE:86:DE:C7:B6:20:A6:55:BD:8E:08:AB:81:61:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/182
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/182/B7F159B200CE86DEC7B620A655BD8E08AB8161CB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.125.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3b:83:f1:87:69:7a:90:68:51:c9:e1:b2:96:e2:0f:11:0e:
fd:ca:ae:d6:ab:56:06:40:f6:4e:49:77:ec:90:fd:f9:67:ae:
6e:b8:ae:7d:eb:d1:4a:9d:5a:e8:48:fd:b9:30:42:75:63:f9:
d0:ae:a8:d3:11:4d:8f:0d:1b:1f:47:27:22:c9:71:9f:45:12:
59:6c:f8:07:0b:25:e9:69:c6:32:47:5e:ee:37:2f:aa:49:9c:
be:ff:d8:1a:b5:cf:54:2a:97:39:d8:59:b6:24:78:ea:2c:3a:
fb:3d:21:e9:17:41:3d:7f:d2:a8:48:0f:a4:83:c7:68:eb:80:
d5:e6:43:43:ac:89:03:a9:ed:e1:b3:c6:53:a3:fe:3e:10:40:
a6:01:b7:f6:ad:98:22:76:a5:b4:fc:f9:e6:61:94:12:b6:97:
83:1d:f6:43:80:88:bb:42:f8:dc:64:40:92:3b:27:31:7c:f9:
37:96:45:43:bd:d4:df:26:63:2f:ba:55:de:80:99:cb:98:9c:
39:52:18:6b:e2:7f:4b:52:ac:be:5d:53:1a:33:b7:15:5e:0e:
fe:6a:53:e6:cd:cc:32:0a:42:79:67:4e:05:8a:b1:f1:95:a8:
f7:a1:a7:14:76:d6:38:b5:60:a7:0f:d0:f6:9b:c0:2c:00:ca:
c2:d1:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:05 2024 by rpki-client on console-ams.rpki-client.org