Certificate
$ rpki-client -vvf rpki.netiface.net/repo/Netiface/0/341D743D3FAE2A128809D163FBC4532FD1037CE6.cer
File: 341D743D3FAE2A128809D163FBC4532FD1037CE6.cer (raw, json)
Hash identifier: q2Ft/ynNOxcn75QOs8XXYoHx1xAfXxqIYK5NjEMQCKg=
Subject key identifier: 34:1D:74:3D:3F:AE:2A:12:88:09:D1:63:FB:C4:53:2F:D1:03:7C:E6
Authority key identifier: 7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
Certificate issuer: /CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Certificate serial: 43A6B9941F391289A416211DE745C0ED67D1FB90
Authority info access: rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 13 Jan 2024 06:23:13 +0000
Certificate not after: Sat 11 Jan 2025 06:28:13 +0000
Subordinate resources: IP: 2a13:df87:2a00::/39
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a6:b9:94:1f:39:12:89:a4:16:21:1d:e7:45:c0:ed:67:d1:fb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C
Validity
Not Before: Jan 13 06:23:13 2024 GMT
Not After : Jan 11 06:28:13 2025 GMT
Subject: CN=341D743D3FAE2A128809D163FBC4532FD1037CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:59:67:e3:db:e2:c2:84:23:ea:99:31:cd:
80:8d:26:e8:ea:4b:12:48:88:63:81:44:27:cf:4d:
3f:62:27:a5:f2:0e:a4:d7:ae:ee:51:32:88:f9:76:
f5:c4:50:0e:4f:2a:76:89:33:6a:c2:92:d7:70:c0:
5e:c9:7c:72:c2:13:97:f6:f0:65:4f:bb:37:60:3e:
9b:88:da:83:63:43:0d:72:7c:ca:59:ca:54:c5:a8:
81:8b:83:62:03:68:7a:1c:b9:d6:ae:4d:02:03:d0:
df:77:b3:a9:af:63:77:c1:40:e0:59:6e:67:be:38:
6c:de:7f:9d:3a:9a:fb:f8:77:40:67:4a:30:9b:3d:
a0:f7:1c:32:ed:ee:cf:66:40:32:90:d2:9e:96:e9:
b6:ca:c3:ff:08:66:e4:9d:0e:c8:a7:14:32:ef:32:
7e:28:50:58:71:ff:de:ab:ab:84:1f:8a:c0:b9:f9:
c7:92:4b:0b:94:bb:ab:20:4e:60:2a:e1:28:d9:cf:
81:25:86:15:ae:c9:d4:5e:90:1f:9d:e6:54:69:1c:
97:7c:f7:9a:14:b1:6a:34:05:41:03:5b:d5:75:3b:
65:27:4a:f9:02:00:c0:e9:7f:8e:a5:61:71:65:0f:
c8:33:87:6e:36:f6:1e:22:ed:aa:b2:a2:3e:97:ee:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
34:1D:74:3D:3F:AE:2A:12:88:09:D1:63:FB:C4:53:2F:D1:03:7C:E6
X509v3 Authority Key Identifier:
keyid:7D:74:39:20:7E:4B:6E:01:2D:53:BE:9F:2E:04:EB:DF:F3:0E:F3:6C
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Netiface/0/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.netiface.net/repo/Apricot/1/7D7439207E4B6E012D53BE9F2E04EBDFF30EF36C.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/2/341D743D3FAE2A128809D163FBC4532FD1037CE6.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:2a00::/39
Signature Algorithm: sha256WithRSAEncryption
61:e3:d6:c5:19:05:8a:9f:6d:a1:e1:9f:8d:3d:f7:cd:27:51:
7b:4e:fc:db:b4:b6:dc:15:ed:56:4f:89:b4:a7:10:ad:ba:da:
c0:93:79:e2:be:15:87:3c:53:28:54:86:22:3f:47:36:c3:af:
e7:9c:c6:47:15:bb:3e:96:27:5e:7a:16:7a:85:0f:85:62:8d:
0d:6c:82:17:37:9c:8a:80:45:33:cd:4c:bc:fa:05:95:84:96:
63:a9:94:b9:a0:e0:df:16:42:e2:df:ea:6c:e7:0f:94:2e:43:
7d:c4:b0:06:fc:52:f6:38:7f:98:5c:67:7a:da:0e:ad:f0:d0:
82:65:57:d4:64:9d:dd:e2:da:d8:89:c3:51:e6:f8:67:06:7a:
07:96:55:f7:92:06:f1:48:55:3f:e5:99:37:ab:cd:e1:86:32:
3b:42:05:4c:2f:61:24:cd:04:e6:20:75:14:07:0c:82:51:15:
c3:d8:3c:1b:83:65:13:35:a9:60:12:e2:b1:2a:f5:19:6c:ea:
74:c5:6b:54:10:08:12:05:16:33:45:d8:50:37:1c:73:d9:14:
59:94:c8:cb:1a:66:da:36:40:ab:62:56:b3:25:a9:0b:24:e6:
5e:b2:ca:68:db:88:2f:c3:1e:0b:be:d3:47:9d:06:d1:ab:fc:
90:2b:4b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:00:37 2024 by rpki-client on console-fra.rpki-client.org