Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
File: 2gEyPvr-4zIGTieLl8uNH52P73k.cer (raw, json)
Hash identifier: 5KTlQav4NGzV4gEY23/UTy3kNEDFeGTrJdmgXTkAkKM=
Subject key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01892B855FE7E95247272010F538F20E1DD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Jul 2023 14:05:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.244.112.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:85:5f:e7:e9:52:47:27:20:10:f5:38:f2:0e:1d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 6 14:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da01323efafee332064e278b97cb8d1f9d8fef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fa:0a:c5:d5:d2:93:5b:cb:e0:89:f2:35:28:
19:32:16:cc:c1:42:f4:fb:2d:d6:4b:d8:5b:6d:ca:
0d:63:78:a7:fa:eb:63:2a:07:57:0c:94:69:2c:b3:
66:d8:9d:ca:a3:7c:91:78:38:df:ee:cb:d7:d7:8d:
f7:43:d8:ac:0f:9d:89:be:6b:b3:32:bc:94:29:f2:
a6:fd:43:63:76:84:08:ee:97:60:15:be:10:bd:c4:
84:37:e9:e6:2f:f1:61:0a:f4:dc:c4:d3:c6:13:22:
10:0b:83:a6:5d:d0:9f:a6:3e:78:8f:ac:d0:5a:f6:
fc:60:cf:9c:59:84:75:26:c6:b1:e3:0d:4a:df:20:
54:29:63:69:37:fb:46:02:f8:dc:e1:be:b1:cc:97:
88:7d:05:fa:fe:9a:5d:db:7a:a2:eb:f6:fe:da:9b:
6d:53:0c:23:15:03:fd:c7:bd:ab:82:37:8b:00:43:
0b:77:20:b4:02:bb:58:ac:98:12:35:05:f4:97:35:
b1:68:86:78:57:86:38:f1:50:31:0c:0b:93:ad:87:
e5:dc:ad:43:cb:eb:35:98:ad:5a:30:2f:ac:fd:89:
33:04:83:dd:b7:2c:aa:4b:98:42:e7:c6:4e:b1:67:
f2:22:c7:69:de:13:13:bc:f8:79:e8:dc:72:4c:d3:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.112.0/24
Signature Algorithm: sha256WithRSAEncryption
06:51:d9:e8:18:7d:30:d6:84:4b:35:64:35:35:10:d4:cc:d2:
28:7b:11:71:14:5a:c9:8e:3b:be:d3:bc:0d:5c:df:4e:09:06:
7c:f3:7f:b2:ca:22:f1:ea:de:42:f9:89:fe:ab:62:7b:d7:ec:
62:fe:17:0e:b5:b2:b2:08:2c:fb:c4:39:8b:82:47:eb:56:28:
96:a7:73:26:b2:7c:eb:41:43:9a:1c:80:48:4a:85:cb:df:9a:
d0:22:9d:6b:5e:c2:55:8d:c1:de:7d:37:5b:92:1f:d1:3b:46:
80:e6:55:40:44:fd:ac:7a:71:4b:67:1e:98:6c:5d:7e:34:61:
60:2b:7f:ba:eb:11:cd:8a:8d:7d:47:42:72:7b:08:0b:66:06:
38:b7:b1:22:c0:74:66:d6:42:1e:a4:b4:94:9b:6e:d6:65:ab:
30:31:5a:50:a5:e2:13:55:a9:6f:22:92:2b:3c:b3:c0:21:eb:
6b:f8:7f:18:ef:b6:44:f5:a6:fe:40:9c:2d:c0:7d:84:bc:b8:
86:c6:ac:97:0e:21:c7:76:9c:83:3e:54:3c:ba:a7:ae:c3:19:
4f:76:13:1f:31:07:b4:f9:a7:e4:88:79:12:8d:43:ac:d5:f9:
1d:d4:27:20:dd:89:24:e9:73:8a:9d:a7:41:5c:5b:ed:ab:a1:
69:98:e0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 15:09:48 2023 by rpki-client on console-ams.rpki-client.org