Certificate
$ rpki-client -vvf dev.tw/rpki/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
File: 338A77CF88DD64F23FBC649EBD286448F9071586.cer (raw, json)
Hash identifier: 8EzO85ez5W09qDcvBRbQj4ncVTG143KS8Ke5lblOAEE=
Subject key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Authority key identifier: 64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67
Certificate issuer: /CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67
Certificate serial: 48F23EE1BEC4BDA3750BD6626B52DE4EBD77494C
Authority info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer
Manifest: rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.mft
caRepository: rsync://rpki.co/repo/AS945/12/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Sun 15 Oct 2023 19:20:30 +0000
Certificate not after: Sun 13 Oct 2024 19:25:30 +0000
Subordinate resources: IP: 104.37.42.0/23
Validation: Failed, certificate revoked on Thu 20 Jun 2024 05:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:f2:3e:e1:be:c4:bd:a3:75:0b:d6:62:6b:52:de:4e:bd:77:49:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64EF7C64F4E72CC0730DD0DA80D3C367CB785E67
Validity
Not Before: Oct 15 19:20:30 2023 GMT
Not After : Oct 13 19:25:30 2024 GMT
Subject: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:16:86:ba:30:5e:24:a0:3e:dd:08:a3:f8:
09:04:90:ce:62:01:e7:ab:e5:00:b3:2a:7d:90:5c:
82:9f:4a:54:37:56:2c:fc:83:21:04:7d:f8:e7:31:
d1:83:81:03:5f:58:62:72:89:0f:7d:90:e8:2c:a3:
ab:10:de:10:5a:78:99:63:70:cc:ec:18:ce:50:db:
68:40:9d:a8:f8:8a:42:e9:b3:8f:57:8e:2d:ec:77:
16:49:60:df:7f:56:dd:2e:79:f1:01:88:61:be:aa:
6b:eb:b5:89:84:17:d7:91:93:9e:b9:cb:30:84:1c:
de:c6:77:a1:ec:e5:81:31:b4:57:19:0e:70:5e:4d:
4c:cc:b4:b7:a4:b8:e5:46:6e:38:2a:f3:48:eb:51:
a3:79:7d:6c:b5:31:42:5b:69:e1:81:3b:c1:8c:1e:
30:1d:31:fa:a2:75:42:ad:2b:85:06:33:0f:6d:6d:
00:fb:00:39:b5:00:03:04:33:af:30:8b:6f:e3:00:
52:8d:b2:37:ac:71:d9:80:bb:af:59:b1:4f:1b:aa:
dc:1b:2d:ff:19:57:ab:fe:df:d7:dc:78:47:ce:18:
f6:55:34:5b:8f:f2:85:fd:1d:6b:a8:ea:3a:e0:10:
b4:21:10:c2:1b:21:f0:cc:f1:80:c2:94:af:55:82:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Authority Key Identifier:
keyid:64:EF:7C:64:F4:E7:2C:C0:73:0D:D0:DA:80:D3:C3:67:CB:78:5E:67
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://dev.tw/rpki/August/12/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/64EF7C64F4E72CC0730DD0DA80D3C367CB785E67.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/AS945/12/
RPKI Manifest - URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:69:f6:cc:5c:fa:0c:8a:08:d4:13:ec:d5:f4:75:f5:95:7e:
3a:32:32:8f:3d:26:9c:06:79:2a:60:4d:65:45:43:44:ed:70:
37:c5:a6:12:c0:46:05:f3:66:e5:b5:3f:c5:26:b0:c7:ec:73:
18:45:0a:8d:99:50:46:02:3b:f4:ba:f2:5b:d5:c5:88:98:51:
2f:3a:71:c5:97:00:d4:60:9c:a9:65:2c:53:1f:d4:ec:98:b5:
48:9d:a8:09:84:8a:93:77:f0:6b:de:11:ab:9b:b2:78:be:74:
ec:99:d9:98:10:7e:8d:2e:87:ab:39:e8:12:3c:f1:aa:4c:b5:
6b:05:b1:20:52:4c:25:fb:4b:d7:18:e0:6b:87:2d:2e:82:cf:
f2:f5:13:d5:e4:9e:81:fa:bb:b4:ab:3a:b4:31:ac:b6:3e:85:
3a:16:35:e3:d6:b9:38:ce:90:b5:37:08:b8:7d:5d:4a:1a:40:
b4:63:13:89:e1:82:65:79:95:87:8a:b0:c4:6e:2f:e8:cd:43:
ae:f9:de:02:62:f3:bd:3f:52:7d:4c:ba:65:28:90:10:07:66:
87:b1:16:46:1a:f7:6b:a8:b2:62:12:c1:3f:2e:30:cb:ea:15:
ec:93:4a:7e:0e:00:40:9f:b9:fd:08:17:c1:b7:52:9a:ff:91:
0f:9d:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 06:05:17 2024 by rpki-client on console-fra.rpki-client.org