Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39Bdw5D47fDY7vrKYu4_z861dbc.cer
File: 39Bdw5D47fDY7vrKYu4_z861dbc.cer (raw, json)
Hash identifier: hP7kBb96EzmiVqrnQJm/lq7eCbvwhlyY5DLE659+eQU=
Subject key identifier: DF:D0:5D:C3:90:F8:ED:F0:D8:EE:FA:CA:62:EE:3F:CF:CE:B5:75:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D291409E0DC520573EA2C58B91478E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/DFD05DC390F8EDF0D8EEFACA62EE3FCFCEB575B7.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 17:30:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.57.166.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:29:14:09:e0:dc:52:05:73:ea:2c:58:b9:14:78:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 17:30:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfd05dc390f8edf0d8eefaca62ee3fcfceb575b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:3e:5b:b1:2e:6a:24:5d:d6:fd:a9:a5:fe:
3e:67:86:78:c9:a5:9e:5a:fa:38:d5:dd:7f:f2:dc:
c2:6d:28:7f:b1:e4:d6:f0:b8:08:3a:fd:1d:53:ef:
19:c4:cc:14:cc:da:79:f8:0a:04:75:0e:f0:e9:d2:
a4:67:28:26:ca:4c:d9:2c:37:2e:3b:cd:0f:2f:2a:
85:32:dc:32:fb:c3:cc:65:81:4d:ce:86:49:f6:49:
45:e0:0c:1e:8e:f6:1a:a2:a5:ce:44:ef:09:d7:6d:
1e:e0:ca:1b:7f:53:90:cb:a4:97:c4:ef:9c:96:bf:
77:ab:d4:92:62:31:22:d2:d9:3c:a5:15:5a:3a:28:
68:18:e9:a3:96:6b:fa:c7:a7:e0:15:17:8c:6c:f4:
76:d9:df:66:4b:70:44:f8:65:2b:a7:db:21:02:ff:
76:ef:70:ff:5d:d6:26:e5:20:da:7d:dc:98:d8:0a:
4f:3b:14:85:42:a7:90:e3:40:98:56:f9:23:86:8b:
38:1a:8f:00:af:1e:be:bc:07:20:37:21:1e:52:38:
1e:0d:18:20:2f:da:df:af:1b:a2:4f:9e:87:6b:02:
85:4b:cb:6f:5c:4d:2e:1e:8a:17:a1:dc:04:08:d8:
82:95:1e:0e:cc:65:8d:40:34:26:78:6e:7c:3d:24:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D0:5D:C3:90:F8:ED:F0:D8:EE:FA:CA:62:EE:3F:CF:CE:B5:75:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/53bc4bab-c120-4c15-bd74-c959820a6a83/0/DFD05DC390F8EDF0D8EEFACA62EE3FCFCEB575B7.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.166.0/24
Signature Algorithm: sha256WithRSAEncryption
33:36:2b:24:d4:30:d7:74:1e:52:64:b9:09:97:ca:da:c7:8f:
8e:cc:c7:9a:b5:33:6c:7a:ba:af:67:e5:51:c2:32:44:cb:32:
d0:13:3f:ea:0d:f4:be:01:8c:0c:1b:40:bc:16:e5:c1:2b:7c:
74:a3:e5:fa:cd:6e:b9:62:d0:9a:57:a8:a0:13:95:03:f8:ea:
2f:6a:35:44:be:7c:cb:2d:09:5d:63:95:5a:75:ec:2e:3f:fa:
a7:88:84:cf:37:b0:63:e0:5d:cb:95:10:2c:49:fc:ea:19:57:
ab:17:87:20:d4:ec:f0:b4:18:b8:bb:ae:51:6e:85:5b:60:16:
e2:3e:99:17:13:5d:21:34:f9:35:3b:53:c4:79:72:6b:e1:db:
7d:ee:41:39:ce:22:27:ac:a6:4f:03:16:eb:5b:99:75:16:96:
78:ae:b9:66:4c:bd:ee:e4:20:0d:42:b5:20:e9:cd:44:2c:b4:
e7:36:2a:6e:ad:ef:48:5b:da:fc:cb:ec:a8:04:d9:34:28:0b:
a2:72:94:6b:fb:65:b8:54:e4:90:ae:6d:64:3b:f5:b1:b2:b2:
81:81:41:17:8c:a4:54:6e:f6:1a:79:e5:35:8a:12:be:48:91:
90:22:38:5c:6f:a3:63:94:a0:7f:c3:39:b5:7a:5a:41:ac:61:
5e:3a:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 10:53:39 2023 by rpki-client on console-fra.rpki-client.org