Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0MViMTsAmyqU8tFRyv2FISZdTs0.cer
File: 0MViMTsAmyqU8tFRyv2FISZdTs0.cer (raw, json)
Hash identifier: 98F5BDdLPTRmzib02OC8atW7NOOm41PdsooYQzxrRsg=
Subject key identifier: D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01890AF639DE03F6B1AF15A83D477E591199
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 30 Jun 2023 06:20:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.122.189.0/24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 11:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0a:f6:39:de:03:f6:b1:af:15:a8:3d:47:7e:59:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 06:20:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0c562313b009b2a94f2d151cafd8521265d4ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:ae:a7:80:bc:a7:59:b2:ca:2c:dd:a9:91:
53:69:01:15:1e:a0:74:aa:99:68:78:1f:c1:48:ed:
e5:7b:4e:88:3c:8c:85:11:23:3e:40:91:ba:f6:6d:
da:65:ad:39:fc:71:dc:29:fc:f5:ce:68:7c:df:18:
bc:c6:59:42:13:db:d9:be:da:a0:05:2f:4b:f6:a0:
a1:8c:e2:e8:da:fa:00:06:39:89:9b:94:f6:63:20:
02:26:33:41:3c:a6:0b:62:aa:88:69:82:15:f6:6f:
04:72:db:28:d8:f1:d4:4e:72:c1:84:61:84:11:15:
cb:63:bf:45:76:03:74:df:ea:2c:33:0c:63:ec:d8:
b9:86:12:75:e3:ed:8f:4d:2c:cb:bc:11:e2:f9:4c:
2e:7c:31:2b:5d:25:84:6d:6d:2c:a8:d8:e2:f7:e8:
82:6d:86:67:3b:28:f1:56:21:1c:00:c2:e0:e9:2e:
9e:a8:95:f2:ee:ea:7a:17:9c:0c:8b:41:75:c0:cc:
b6:38:7e:0c:f1:99:b5:88:3c:f8:35:fe:0e:29:2f:
75:4c:eb:a4:bf:96:53:8f:19:78:96:e3:67:15:d1:
55:84:e8:77:4f:0c:69:6d:e6:10:e7:1f:63:bf:61:
0f:ab:a4:7a:9f:57:a4:e5:25:54:72:b8:7a:7d:59:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C5:62:31:3B:00:9B:2A:94:F2:D1:51:CA:FD:85:21:26:5D:4E:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5fab7b3e-68d2-4918-ae5a-36fd4b6916c8/1/D0C562313B009B2A94F2D151CAFD8521265D4ECD.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.189.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d0:07:0e:4c:e0:f4:ab:37:26:17:05:fc:7c:cf:e4:2e:de:
8d:28:e6:79:6e:df:f3:1a:69:d0:6f:a6:c4:2a:d6:f6:82:89:
42:6e:78:87:97:a4:eb:72:d2:2a:0d:f7:2c:05:73:47:a7:ff:
e4:5b:33:de:15:9e:7a:20:8a:7b:f7:3e:d2:a2:32:fa:5a:47:
a6:64:40:a5:41:16:17:7e:25:c2:e6:20:31:62:23:38:99:e4:
01:a5:f1:1a:5a:df:20:42:4d:36:7d:a5:26:d9:e3:2f:19:b4:
fd:0d:49:35:a0:4a:47:10:10:54:5d:25:da:27:72:92:db:80:
8d:c9:81:fa:24:c2:d2:12:0f:89:a7:5e:d2:6f:6f:a7:78:bd:
8d:f0:2d:f1:d8:25:51:61:5b:8f:46:50:6c:bb:f0:70:c3:0c:
f2:b1:a7:af:9e:de:31:f0:70:5e:95:de:d1:e5:c9:d4:ec:6e:
34:65:77:08:fb:9f:ca:15:08:e7:a9:4e:f5:54:55:47:77:8e:
9a:2d:a2:de:75:cb:c8:65:37:1c:85:dd:21:3a:ed:33:a8:24:
21:74:65:a6:e4:9c:33:88:b3:ae:a3:e9:5e:e4:a8:db:2b:79:
0d:77:5a:ab:b8:d8:be:31:99:1c:dc:e9:1c:6d:78:64:d5:1a:
72:e2:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:03 2024 by rpki-client on console-ams.rpki-client.org