Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer
File: 5yhh0cnpCDXqlBbwWT0GPRSaU-I.cer (raw, json)
Hash identifier: tvW8kLVaHEO9O39WWy2j+Y/XzcbYdU7RAE+NqAd+OF8=
Subject key identifier: E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A5D5C1AC618FD77A79B204637CF31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.162.132.0/24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:5d:5c:1a:c6:18:fd:77:a7:9b:20:46:37:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e72861d1c9e90835ea9416f0593d063d149a53e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:9d:9f:b2:94:a3:26:0d:91:86:d2:f2:c3:
e6:d4:4b:a7:00:64:19:09:09:bc:d4:cd:75:46:b9:
4e:85:52:6f:e5:18:eb:66:c1:0d:87:58:35:c6:b2:
bd:e5:fc:44:73:2b:59:c5:25:db:04:85:08:a6:e0:
0a:c9:db:33:e7:5f:8b:5e:4f:7e:e2:7e:aa:9b:3e:
df:b5:28:6c:e7:0e:42:44:44:d1:d3:a2:db:63:49:
b2:06:ed:a9:f4:63:c4:cb:e7:4d:e2:b0:66:88:61:
a3:50:be:4d:0b:25:7c:83:64:27:1c:16:b9:df:d1:
15:41:16:dd:c4:be:5e:47:e4:d6:00:e2:91:db:f9:
d6:d4:58:37:71:a5:ad:6b:44:3d:21:15:25:b6:56:
07:f2:ea:d2:14:40:b1:1c:d7:1e:b9:ba:0a:73:45:
cc:41:a8:40:81:ab:c6:48:c6:7e:ae:65:89:ca:02:
b3:ca:d8:4e:ad:72:68:18:2e:46:d8:b0:72:f9:bb:
47:40:69:92:8c:d1:11:dd:aa:87:74:ad:75:ea:61:
f4:f1:07:6e:f7:f9:e9:38:2b:87:00:4b:ba:fa:ec:
ba:ca:66:a4:f4:01:b4:ff:c6:b2:0b:81:33:62:3c:
fc:48:47:a3:8b:0f:d9:5a:ea:c6:eb:cb:9f:2e:0d:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:28:61:D1:C9:E9:08:35:EA:94:16:F0:59:3D:06:3D:14:9A:53:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e1b018-4711-44ef-8688-596e29bf7efe/1/5yhh0cnpCDXqlBbwWT0GPRSaU-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.132.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:66:55:49:a9:3f:e5:24:1a:30:cf:12:74:42:db:65:42:3f:
69:bb:b5:9d:86:d6:7b:a7:87:3f:bb:7b:13:d7:80:29:e5:73:
c6:d3:d9:97:e1:27:d1:4a:2e:cc:cf:4e:e0:be:73:02:d6:a4:
57:5d:97:91:6f:91:e0:39:bb:3e:77:7d:4f:3c:58:92:45:af:
53:d7:8f:e2:77:2c:b3:54:65:aa:eb:b5:b6:c8:b0:2f:00:7a:
00:21:3c:13:a4:9e:e9:14:11:7a:5f:f5:01:b4:a8:27:7b:ca:
9e:43:70:e4:7c:31:0b:ef:69:20:db:ca:6d:5e:12:f3:fe:af:
ed:6b:d3:93:a9:77:75:2f:0a:93:db:95:fb:1c:e6:46:f4:32:
7d:41:d6:70:73:79:25:58:9e:2a:61:a1:68:3b:c1:a6:d2:84:
51:30:32:de:e1:a2:3d:34:35:55:62:cc:15:e1:2e:80:09:14:
7c:98:7a:ee:e8:ee:4e:61:3a:09:d5:6a:a1:4c:0a:85:6a:9f:
2d:38:2d:d9:0a:c5:07:f6:fa:54:b5:26:51:ff:44:09:52:48:
ee:4f:7b:f1:63:b0:3d:99:8e:1a:da:e9:31:dc:61:f5:f2:a0:
96:cf:63:25:16:16:c0:eb:ec:45:e5:b5:a7:99:84:aa:67:29:
18:0c:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:13 2024 by rpki-client on console-fra.rpki-client.org