Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wmCjx7fT0hrtmfFd9b7h9Y5O6n0.cer
File: wmCjx7fT0hrtmfFd9b7h9Y5O6n0.cer (raw, json)
Hash identifier: 9rThTJ1Ar5+cyvIBceXfDk2d6owklfSaf/bWa2rT5sY=
Subject key identifier: C2:60:A3:C7:B7:D3:D2:1A:ED:99:F1:5D:F5:BE:E1:F5:8E:4E:EA:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C3188E5414E44867E4F9FB2961C8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.100.43.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:31:88:e5:41:4e:44:86:7e:4f:9f:b2:96:1c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c260a3c7b7d3d21aed99f15df5bee1f58e4eea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:ac:99:d8:f2:59:a5:ee:38:6a:27:04:a4:
b8:79:88:de:b9:35:35:7a:fd:7e:14:1c:55:42:37:
cb:0e:ea:cc:4f:a2:86:48:e1:c2:1d:68:aa:da:80:
dd:41:3b:b5:34:c0:79:3d:7b:92:c6:96:b2:9a:5e:
ca:7a:2b:29:8d:67:a7:33:ff:cd:f1:8d:17:b9:62:
05:ab:af:d5:f8:7c:8e:35:4a:37:8e:74:ea:36:00:
ee:eb:a2:b4:a7:91:48:fb:b7:08:61:a6:2e:8b:b9:
54:42:91:89:f3:c7:66:1f:2f:86:1c:2b:33:57:2f:
89:13:96:f7:89:de:80:65:32:f0:f0:e5:a3:c6:72:
c9:4c:77:61:7a:87:15:cc:87:ca:69:0a:9a:48:b5:
5f:1c:82:0c:b7:3c:e4:49:8f:26:04:09:ef:4e:9d:
c7:db:27:9d:0f:6e:8c:e3:57:c3:f3:07:15:f0:da:
48:46:4f:05:c2:a6:fc:e4:cc:1b:74:6d:6b:02:95:
19:05:5f:15:dd:05:0d:35:89:36:40:d7:01:de:5b:
09:8f:c3:e2:63:cc:8c:c4:bc:e1:99:f0:c6:1d:c9:
a9:8f:ba:a4:b8:04:b0:ef:32:ec:8d:d1:bf:9b:ea:
8d:89:0a:08:6e:fa:11:5e:ce:f3:1c:98:48:1a:c5:
dd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:A3:C7:B7:D3:D2:1A:ED:99:F1:5D:F5:BE:E1:F5:8E:4E:EA:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/218/C260A3C7B7D3D21AED99F15DF5BEE1F58E4EEA7D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.43.0/24
Signature Algorithm: sha256WithRSAEncryption
97:43:6d:1b:ba:c3:94:12:34:72:02:94:36:12:fb:53:82:3c:
f3:16:86:09:05:17:e3:5a:ec:7d:dd:00:c5:98:c8:1e:d5:9d:
9a:08:9b:aa:56:92:94:bb:30:de:fc:29:69:0b:f3:0e:2a:1b:
c4:1a:d0:5f:3a:08:87:ee:44:3e:1e:ed:33:4a:d1:5d:14:74:
6b:0f:60:64:90:d2:82:ef:10:de:b8:e6:ab:83:72:5c:c7:95:
1d:5f:47:4a:e8:a7:01:db:71:f0:81:ca:71:4c:f8:46:68:03:
4b:d4:1b:bb:55:f9:30:90:31:e9:f1:1c:05:e3:51:17:f3:93:
2e:7c:f0:9c:c1:08:6c:d4:6f:7c:7f:c1:a2:33:00:8d:e7:32:
f7:dc:37:e6:bf:61:dc:b9:86:e6:05:c2:9a:91:21:4f:cd:7a:
db:d1:60:9d:98:40:60:ad:9c:a8:e7:0c:3a:c9:51:8d:49:d3:
ab:5f:9d:fd:19:fe:37:75:ea:41:0d:59:21:dc:6f:79:1a:f7:
1a:c5:8a:fc:5b:cf:69:47:70:8a:5f:64:7a:3d:0b:00:a7:54:
85:77:13:7b:3f:3a:cf:c1:72:52:bd:f1:f8:eb:8e:41:4f:35:
81:2f:0b:da:b8:b5:c6:53:c5:64:1f:fb:3c:80:9b:29:07:5e:
25:da:78:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:53 2024 by rpki-client on console-fra.rpki-client.org