Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w1fIoBySK26TCMO_lTuqUHckRFc.cer
File: w1fIoBySK26TCMO_lTuqUHckRFc.cer (raw, json)
Hash identifier: 68nvP0zqce7R8R79SiBUPsVMpnNe+YY+hKcw4hc1EdU=
Subject key identifier: C3:57:C8:A0:1C:92:2B:6E:93:08:C3:BF:95:3B:AA:50:77:24:44:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C4B9DFD768346B717174A9380DF3E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.253.141.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:4b:9d:fd:76:83:46:b7:17:17:4a:93:80:df:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c357c8a01c922b6e9308c3bf953baa5077244457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:a5:e7:d5:83:09:01:f5:9c:89:a3:45:77:
70:dc:70:c8:db:cb:9f:0c:79:e6:4b:46:74:68:c3:
f5:b0:42:f4:63:38:73:d9:a7:dc:27:a8:d2:42:66:
90:77:47:4d:77:83:bc:7e:ec:e4:0e:b6:38:1e:dd:
7e:6c:e8:d6:c7:fe:70:b9:3c:b0:f0:4b:bd:bc:ad:
80:8b:b3:7c:49:62:ce:bf:ad:50:6b:bc:18:8c:1f:
cb:22:5a:0b:c5:1b:a3:f1:f9:09:f4:15:84:30:a7:
3c:bd:b8:c2:41:d7:fb:16:0b:c1:9d:e5:bb:28:a0:
e9:7e:d8:26:6b:38:3f:c8:70:f1:99:24:c9:71:13:
ae:f8:c9:f0:80:ec:07:ca:8e:0b:72:e8:91:36:d3:
c6:1e:f0:c1:2b:07:ba:46:94:1b:05:4e:67:9f:01:
c7:0b:ce:14:be:fb:a9:5a:97:e3:a6:7c:2e:86:1d:
36:35:67:f0:ef:9a:6e:d3:a4:cd:72:e9:a0:97:c3:
93:d3:d0:54:1e:2f:5d:43:32:3a:32:a4:75:08:56:
91:79:f5:4f:88:4b:a7:7a:0f:1f:63:8d:b5:0a:7c:
f0:b8:ca:b2:6c:64:f1:e4:11:51:b4:29:a2:75:28:
83:2b:0e:46:fa:6f:44:2e:d8:3c:fe:e4:b8:a7:c3:
69:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:C8:A0:1C:92:2B:6E:93:08:C3:BF:95:3B:AA:50:77:24:44:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/208/C357C8A01C922B6E9308C3BF953BAA5077244457.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fb:60:6b:e4:32:73:5f:8d:01:65:c1:56:1e:8d:4f:55:d4:
b5:cf:75:a4:89:04:5e:13:ab:f7:14:d5:1a:dc:a0:3c:ae:4f:
93:8d:fa:37:9f:d7:2c:ef:71:86:39:fa:23:c8:0a:1e:6c:c5:
b3:3d:f8:e6:57:53:5a:8e:c8:2f:12:1e:09:48:a0:5f:5a:44:
b4:e8:28:93:53:68:23:6b:41:6b:fa:9f:ea:63:2c:32:de:67:
0a:58:5c:4d:22:52:ae:c0:93:4c:ad:50:db:dd:de:9a:13:4e:
6a:7e:45:79:2b:ca:88:3e:8b:79:d4:b2:52:a6:3f:de:a6:e8:
f9:12:66:69:21:b2:d0:bb:b0:e8:f5:9f:b8:ec:2b:4d:ca:01:
ef:29:6b:78:b8:b2:ff:23:dc:d9:24:c6:91:00:a7:8d:d8:0f:
bd:3e:a9:6b:dc:82:5a:3e:37:72:f3:23:ea:83:a2:1a:1b:51:
3c:cb:32:50:70:d9:73:97:b7:b3:34:4a:00:43:8d:3b:4a:0b:
2c:a1:cd:0d:35:75:72:26:b3:4d:af:85:a8:45:10:bf:94:d7:
82:ec:cc:bc:cd:0d:ee:8e:6e:f4:82:1f:3d:50:35:a7:8c:e6:
47:ff:97:22:fa:62:97:e6:d9:16:c1:54:1c:ae:1b:69:b5:2f:
34:69:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:47 2024 by rpki-client on console-fra.rpki-client.org