Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
File: 1nSvl-7USr-_pNAi_3Xwd86qQOE.cer (raw, json)
Hash identifier: snZevVnztAFaFQAGl9sXtsqizh+meU1PdE3CerwESt4=
Subject key identifier: D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB54030239745D1954DA279E6F9AD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:30:03 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.81.0/24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 13:45:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:54:03:02:39:74:5d:19:54:da:27:9e:6f:9a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:5d:7b:20:14:cb:bc:bb:09:c1:b3:c8:0e:
e4:d0:18:74:e6:2e:f5:51:02:62:26:ef:de:38:cc:
2a:5c:6f:1d:92:95:e5:5a:3f:2c:b2:d5:ee:f6:48:
9f:35:6b:11:0d:44:9f:ae:fb:9f:58:ea:b2:86:14:
d1:9e:61:e7:d0:9d:a3:e0:1a:52:5b:b5:72:68:d6:
39:db:cd:4e:da:99:ec:89:60:59:54:f2:17:37:78:
10:c9:57:72:de:2d:1b:8f:8f:69:6c:17:34:83:90:
3b:1f:3f:d4:07:da:65:52:fe:1a:b7:16:aa:94:04:
e5:2a:56:07:3e:b4:6a:bc:6f:14:2c:48:59:88:74:
08:78:34:d3:87:88:db:ec:90:c3:bf:49:ea:c3:60:
c6:a4:69:56:74:f8:20:82:f6:bc:5d:5f:1f:44:1d:
19:76:d1:1a:48:b7:40:96:8a:cb:01:a3:9a:57:df:
0d:01:03:fe:98:27:cd:ef:b7:9b:64:a9:18:ba:1d:
95:b7:39:da:d8:51:06:a8:2b:fb:22:e2:6f:e9:52:
31:2c:a2:df:1d:65:74:6e:b7:57:09:49:ff:9e:41:
31:0f:f9:fe:a3:76:40:7a:14:3d:3a:cc:45:dd:66:
96:be:f9:ef:c7:8b:15:71:ef:93:69:88:98:65:12:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e7:c0:d8:7f:fb:a8:4c:c9:5c:93:00:f4:78:02:2c:0f:67:
3d:f5:8a:ab:a4:38:ea:ce:67:19:b5:b7:b4:a9:9e:47:c7:9d:
4e:1d:3a:d6:c6:8f:f8:b3:a2:4b:48:95:96:2a:05:69:75:3d:
fa:02:63:c4:b4:0c:d8:ac:cc:62:9f:38:e1:b2:e9:01:b1:c9:
9d:1e:59:d6:45:11:96:e9:ef:a2:e2:fd:7c:1e:d8:44:35:6e:
8b:6e:2a:eb:2e:fd:aa:3d:c8:79:09:d6:21:e7:05:71:c7:2b:
76:72:29:47:8b:df:3c:18:27:b2:9a:72:5b:aa:5d:33:d0:57:
58:99:2e:f7:aa:67:37:68:a4:08:38:fc:19:51:25:3b:38:7c:
1d:22:64:f3:84:22:89:6c:a1:e8:03:fe:8f:93:d0:cb:98:f2:
81:58:17:2f:f4:5e:ea:e5:ea:8c:29:2f:50:9f:2d:fe:68:64:
cb:f5:2a:13:55:33:47:e8:23:63:90:d0:e2:4a:10:fb:e0:47:
56:31:87:21:2d:a5:cf:aa:9d:35:b1:8b:b8:53:d8:80:e5:bd:
15:ff:df:6f:c3:75:66:70:55:75:4b:2b:96:30:b0:34:38:7e:
83:fe:8c:c5:31:d7:11:44:e6:7d:97:bc:16:da:0a:95:8c:33:
a7:88:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:09 2024 by rpki-client on console-ams.rpki-client.org