Certificate
$ rpki-client -vvf rpki.co/repo/AS945/12/F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.cer
File: F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.cer (raw, json)
Hash identifier: veQyf/uIy9w435096kPnBzyquw8JkqBQ27uizBlragE=
Subject key identifier: F6:C9:D9:34:38:3D:B9:3C:72:03:D4:C8:BF:33:1D:B6:D9:F4:72:BB
Authority key identifier: 33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
Certificate issuer: /CN=338A77CF88DD64F23FBC649EBD286448F9071586
Certificate serial: 68DB4808654A8C981D672FB1DE9DD9E90D70B164
Authority info access: rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Manifest: rsync://rpki.co/repo/Matt/1/F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.mft
caRepository: rsync://rpki.co/repo/Matt/1/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:43:17 +0000
Certificate not after: Mon 20 May 2024 21:48:17 +0000
Subordinate resources: IP: 104.37.43.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:db:48:08:65:4a:8c:98:1d:67:2f:b1:de:9d:d9:e9:0d:70:b1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338A77CF88DD64F23FBC649EBD286448F9071586
Validity
Not Before: May 22 21:43:17 2023 GMT
Not After : May 20 21:48:17 2024 GMT
Subject: CN=F6C9D934383DB93C7203D4C8BF331DB6D9F472BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:45:b9:17:fe:bb:cc:10:d3:ec:cf:b4:f5:
6e:6d:b9:1d:b7:c3:d3:5b:56:1b:5b:00:98:bf:4a:
97:f4:a9:89:4c:b6:27:c1:02:d9:b8:07:e8:30:37:
b0:be:c9:2b:e3:16:2d:ad:a4:84:81:15:51:4b:48:
25:a3:57:68:58:bd:95:24:96:ff:45:e8:cc:ce:5f:
5e:04:8e:41:08:eb:bd:13:7d:7a:f0:f4:02:2d:97:
92:6a:d6:5c:2c:9d:b1:1b:71:96:33:3b:61:da:b0:
9f:30:23:6b:29:3e:67:b3:d7:fb:25:43:5a:28:f2:
eb:e2:60:da:c4:d2:2d:b8:ca:43:61:5d:a3:8a:3e:
a2:78:e1:a2:5c:9a:04:2b:d5:a9:f7:81:9e:e2:cc:
9f:9f:e3:59:65:52:ca:bf:ef:4e:e5:54:f1:d4:02:
f2:a8:c0:00:05:9f:11:f8:cf:d4:9d:dd:5b:83:5f:
b2:77:75:0f:b3:b7:5e:61:7e:f3:19:15:c2:45:69:
1a:af:07:d9:ad:d1:75:80:72:82:2f:5f:34:79:cc:
c0:2a:ee:de:1a:62:ed:0d:11:13:df:e2:66:ed:95:
48:a0:90:35:4f:c8:5b:3f:5f:d8:3e:dd:35:52:bf:
dd:a2:cf:d4:fd:01:9c:43:9a:2a:86:01:3c:21:aa:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
F6:C9:D9:34:38:3D:B9:3C:72:03:D4:C8:BF:33:1D:B6:D9:F4:72:BB
X509v3 Authority Key Identifier:
keyid:33:8A:77:CF:88:DD:64:F2:3F:BC:64:9E:BD:28:64:48:F9:07:15:86
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.co/repo/AS945/12/338A77CF88DD64F23FBC649EBD286448F9071586.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.co/repo/August/12/338A77CF88DD64F23FBC649EBD286448F9071586.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Matt/1/
RPKI Manifest - URI:rsync://rpki.co/repo/Matt/1/F6C9D934383DB93C7203D4C8BF331DB6D9F472BB.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.43.0/24
Signature Algorithm: sha256WithRSAEncryption
40:23:a4:0e:41:2d:ac:23:59:5e:a4:76:3c:f2:d4:8c:26:98:
5c:53:cb:13:1a:0b:eb:1b:99:7a:08:90:41:ee:6c:09:95:2d:
47:df:1b:6a:c4:ff:41:9b:b4:20:f1:8f:fa:28:c5:0a:63:d5:
89:bb:a8:c1:db:80:19:ab:9d:55:7d:68:eb:e7:cd:a5:2f:20:
8a:fb:06:5b:e6:d3:66:45:33:be:e6:6b:a2:1d:40:75:0a:f4:
e0:d1:96:80:bb:2e:a6:a3:2c:cd:61:d7:e5:62:4c:94:7d:f1:
35:88:c4:9d:b1:d5:79:e4:af:b4:e0:b1:40:bc:71:96:68:41:
66:e3:18:16:f3:d3:2e:14:98:01:aa:0b:e6:a1:e8:cb:c7:fb:
6a:ef:0d:67:72:d3:dd:32:35:ed:07:66:b5:e5:22:48:be:67:
4c:b6:d4:37:77:9a:02:7d:c9:8e:80:19:2c:31:a0:11:f1:de:
da:46:22:0e:3e:97:c3:ad:8b:42:96:8f:15:43:c5:05:5e:c3:
25:fa:1d:cf:ff:88:35:f2:46:fa:27:cf:c2:e7:fa:d4:94:16:
99:d9:c7:c3:7c:c9:54:c5:8c:f7:e5:4a:ed:70:51:07:77:8d:
2b:93:0c:8b:1a:15:7c:72:5b:38:d0:ee:fb:b1:29:a5:ec:a6:
e1:e2:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 06:18:24 2023 by rpki-client on console-ams.rpki-client.org