Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer
File: 7OAnxNgSuisOFf9t-Ai7o-yXKtE.cer (raw, json)
Hash identifier: ipG6mXmxYnlN5xOcfq1sP+AVK4SwJS+1j57fXM3Mkqg=
Subject key identifier: EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887DF777EC2BFEE6207DAD1C435CBD7DB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 21:15:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.24.127.0/24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 08:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:f7:77:ec:2b:fe:e6:20:7d:ad:1c:43:5c:bd:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 21:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ece027c4d812ba2b0e15ff6df808bba3ec972ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:7b:a5:ba:e8:eb:52:f1:10:75:5d:af:5d:
9b:a7:0d:85:22:16:2b:23:6c:9f:57:9d:36:f4:dc:
54:f2:a4:c7:cc:64:b0:c5:79:bb:ae:28:cb:52:f9:
63:2f:f4:1d:3e:85:c0:a1:18:0a:9e:14:40:85:8d:
c8:93:f6:45:e5:b5:71:43:14:b1:9b:91:c6:fd:db:
c5:3f:02:c3:fd:41:1e:84:99:c2:a8:ad:c7:9e:39:
46:78:17:6f:f2:a7:e0:5b:b2:50:7a:57:7f:ae:5a:
99:1d:fb:99:a9:11:fa:c1:13:6b:96:94:12:23:43:
87:44:f6:e9:98:34:0d:3a:25:28:2b:b3:02:e3:be:
96:aa:90:b6:f4:38:51:8b:4d:1d:02:43:bb:22:72:
fe:64:21:6d:c0:d6:5c:14:0d:b6:5d:b1:f8:1c:10:
af:24:98:1c:3b:fa:42:ec:36:cf:b6:d2:95:d0:bf:
5e:fe:5f:46:6d:ce:34:b7:54:36:09:33:ec:14:ed:
d5:a3:89:c8:ff:a5:08:ea:c8:85:63:1b:62:8c:18:
e3:6e:cf:f2:d7:d3:32:98:8f:a7:f9:ab:4b:9a:cc:
f8:56:d0:a9:f6:14:a2:a4:3c:ac:88:3d:05:68:86:
c0:5b:7f:9f:d0:c0:f1:22:0c:dc:47:f4:25:a8:c5:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E0:27:C4:D8:12:BA:2B:0E:15:FF:6D:F8:08:BB:A3:EC:97:2A:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/571287f5-6189-496c-8668-2cd287462e36/0/ECE027C4D812BA2B0E15FF6DF808BBA3EC972AD1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
37:06:47:78:59:2f:10:5a:94:6d:a8:2b:b8:9c:04:91:05:5d:
9e:d7:b3:bd:cb:b7:66:58:b1:7a:d3:15:03:da:de:f2:52:ee:
47:4e:a4:22:e2:94:b4:9c:26:5a:da:b6:7b:8d:b6:9d:14:77:
24:69:cd:75:a7:3c:39:f3:85:33:e4:3c:d0:85:30:07:46:3f:
3a:dc:cc:ad:8a:52:1a:6c:a6:0b:5b:69:b3:d6:fd:56:a7:79:
6c:32:91:a8:f8:df:0c:68:00:fd:66:d1:82:d7:57:43:0e:c5:
46:64:2b:64:ec:f7:6b:00:b3:57:64:13:c3:05:70:ff:19:b7:
cc:ec:22:f6:e1:96:2e:fc:02:ff:70:f1:86:f6:e1:1e:f2:ea:
2e:0b:26:23:d1:68:4e:c3:b5:f1:e6:18:80:4d:24:01:de:d8:
58:02:f5:5d:9e:c6:0e:fe:b0:59:ab:02:b1:63:47:8d:c4:96:
db:9a:eb:a5:8d:65:07:87:fe:1a:63:b2:9e:ec:b1:a4:73:a5:
cc:b4:6d:4b:f9:05:aa:9d:67:b1:8d:7c:bf:e3:80:72:95:26:
93:92:ae:f0:fe:fc:d5:a1:91:a0:d0:93:90:fc:8f:3c:28:47:
df:c2:bb:02:d5:23:ef:69:5b:72:64:97:d3:34:6b:59:73:cb:
0b:76:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:53 2024 by rpki-client on console-fra.rpki-client.org