Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer
File: 1-uiQfF3pPiLpdTkNtWIWaTFMThg.cer (raw, json)
Hash identifier: YrfJssCgwV+sDjw7aoSU2dhOUY/1If2/vce7smlUGnE=
Subject key identifier: FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187D781474FD15F7D153D2DCE6A28499D18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 May 2023 13:29:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.200.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 13:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d7:81:47:4f:d1:5f:7d:15:3d:2d:ce:6a:28:49:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 1 13:29:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fae8907c5de93e22e975390db5621669314c4e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:85:b0:47:1f:dc:fb:03:23:ef:39:b2:01:
05:84:8d:da:f5:a6:9b:92:49:83:7f:83:4d:62:f1:
d3:92:2b:18:cc:d1:05:b2:51:e9:d2:44:06:67:67:
f8:71:63:e4:a4:ed:e6:bc:16:dc:1d:e0:fe:15:e4:
d1:95:f4:12:4a:a9:e1:69:c5:8f:dc:be:9c:26:b6:
19:dc:1a:3a:0c:e9:e0:95:2e:b7:0c:49:a4:9d:ba:
59:62:90:d2:9c:5c:46:bd:df:01:60:08:bf:27:36:
76:77:0b:67:14:01:af:35:e8:a3:78:6f:cc:a8:6a:
72:1e:bb:a0:e1:51:63:a2:60:88:a7:5e:6f:85:70:
1f:81:e5:70:30:da:89:3a:8a:e5:6c:a0:53:a9:1f:
5e:ec:ad:f4:61:03:f4:e1:62:41:73:65:06:f0:81:
66:ac:90:13:60:8b:69:31:4a:fe:8e:39:fe:94:58:
d1:f2:0e:82:1f:9e:a1:e4:76:66:32:a0:c2:39:9b:
d9:14:77:14:cb:ed:6c:cd:87:09:58:bd:86:77:5a:
56:5d:ef:45:8e:f3:34:96:73:7e:b6:c0:dd:4a:8b:
ca:6d:af:0c:43:f0:fa:59:f8:71:e4:d9:aa:5e:00:
4a:c8:a9:e6:b6:16:e0:6a:e4:e8:0f:37:2a:66:a4:
44:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:90:7C:5D:E9:3E:22:E9:75:39:0D:B5:62:16:69:31:4C:4E:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/221/FAE8907C5DE93E22E975390DB5621669314C4E18.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5f:0c:04:55:cb:c6:fd:62:a7:53:b8:bc:24:37:1c:6d:f7:
09:aa:e0:53:e1:62:06:99:50:3f:bd:c7:78:5f:da:bc:bc:4e:
57:b4:8d:f7:04:b0:00:a2:7b:8d:fb:ea:0e:86:8b:51:aa:70:
90:44:09:f2:09:fe:b9:79:00:f3:30:f2:cc:26:02:23:16:bd:
88:50:38:b5:ea:d7:4b:19:82:b7:40:dd:b0:e4:69:a3:e7:3d:
93:32:26:44:1d:4f:78:54:fc:1f:20:66:94:58:fe:b7:26:71:
3a:de:d5:20:92:94:d3:7f:4e:e8:c5:c0:8e:f2:54:de:dc:47:
f1:f7:89:06:d7:77:17:90:66:9e:8f:6a:5e:2e:ad:b4:25:89:
cd:8b:14:2a:d4:4c:fc:1f:68:4d:c9:13:a8:04:b4:87:df:f8:
85:e8:ed:ea:30:f3:8a:69:3c:2f:db:40:75:c1:10:b3:b0:3d:
27:31:13:49:55:79:40:8a:ca:8c:2f:af:17:a2:b3:26:77:26:
e4:83:67:19:fc:ad:2f:30:21:ed:86:00:21:71:71:c1:51:76:
db:10:bb:de:34:a3:d0:06:07:87:f8:6e:d4:b8:65:7a:2c:23:
12:35:72:88:73:4b:cb:46:51:11:ae:1c:c4:3e:9f:0c:d0:d6:
7d:af:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:25 2024 by rpki-client on console-fra.rpki-client.org