Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer
File: wBsTjuUCiNU1Z6rA1NBtL4azB9E.cer (raw, json)
Hash identifier: T3jKxfYUySTNFULYuhs/qcHdZJIXZZbV+pZ7jN0c6F8=
Subject key identifier: C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C06B207C7542200C0852B87D4BEE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.45.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 15:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:06:b2:07:c7:54:22:00:c0:85:2b:87:d4:be:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01b138ee50288d53567aac0d4d06d2f86b307d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4c:98:cf:43:24:fd:a2:25:47:43:f5:9b:33:
40:d0:ce:9c:b6:94:a0:2b:fd:f7:ff:63:c1:20:a5:
50:76:0f:77:06:4c:dc:74:8f:f3:be:ef:d1:69:e8:
6a:30:b0:94:89:9d:44:b3:3a:28:6b:fd:fe:9f:ca:
d9:51:83:4c:ef:d1:8b:91:4d:f1:04:ef:45:77:ee:
93:b7:f6:e7:40:eb:c8:05:f0:69:52:64:83:4c:16:
06:70:d5:ad:94:5c:33:97:75:8a:35:c2:e6:25:8e:
ce:6d:04:d1:dc:9f:2e:4b:f4:6e:6a:06:90:05:a1:
97:f9:37:e3:20:28:46:41:49:c9:b1:54:4a:4c:13:
b7:b0:92:72:80:9c:fd:32:a4:78:a2:d0:49:16:ac:
97:86:c1:b3:1f:b8:46:8c:a8:34:19:c8:06:91:17:
91:e4:e3:83:ff:f1:ac:02:3e:de:f5:a1:d1:09:59:
23:e3:3a:89:0f:68:17:fd:eb:bf:94:db:5e:5d:ed:
9a:33:fd:f1:d9:f2:1a:e5:2c:eb:6b:a8:b5:06:ab:
c9:71:4c:42:63:97:0f:87:f0:2c:9f:29:d2:36:c3:
e3:61:77:d5:75:ec:7a:1c:53:91:bb:9d:dc:9c:c2:
60:68:5f:44:a3:58:c7:4b:e5:0d:9b:69:e3:51:7f:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:13:8E:E5:02:88:D5:35:67:AA:C0:D4:D0:6D:2F:86:B3:07:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/217/C01B138EE50288D53567AAC0D4D06D2F86B307D1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:df:c2:70:2e:39:81:4f:a4:80:fa:74:99:57:f8:96:44:df:
a5:ef:ce:35:93:cc:4a:6d:d4:bc:fe:db:7c:12:9b:5b:e6:cf:
88:50:e2:0d:6f:a1:be:57:93:df:fc:8a:0c:fb:ff:78:c3:05:
62:bc:ec:0e:ea:69:b2:17:49:0c:7d:3f:f7:13:4f:8d:98:ab:
17:51:f9:45:a0:65:14:e4:64:be:fd:bc:71:02:ae:a9:87:ff:
48:6b:61:77:92:c1:78:4f:a0:77:e9:72:06:0e:2d:ac:00:05:
10:5c:cc:f6:63:c8:84:cd:c0:d8:be:c4:e4:1a:e9:29:16:49:
d2:45:a7:b5:58:77:37:f7:89:34:9b:a1:fc:6e:d2:6d:45:d3:
8f:bf:e1:3a:d5:4f:a5:56:f2:28:f3:a9:50:0a:7d:f0:1c:d2:
3c:fc:ed:07:08:ee:9d:8a:7d:5c:d9:93:1f:9d:91:83:15:20:
5e:6f:1c:5a:63:f5:4c:85:97:67:96:74:61:35:04:af:24:98:
ef:17:5e:40:f7:df:21:98:92:ea:59:71:2b:02:d8:86:d1:24:
88:4f:63:3c:af:1d:23:42:51:e7:a1:a3:98:94:ba:10:ce:7c:
fd:4a:24:16:8d:8f:d7:0a:bb:34:f7:db:3b:3e:81:99:b5:05:
42:e4:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:48 2024 by rpki-client on console-fra.rpki-client.org