Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer
File: 7obi3f2WvvDBcsp1Gl2Y2CReYS4.cer (raw, json)
Hash identifier: gzirs8DxiUX5vH/Uzd7KmLOtLn2RheYGoAYhsvcOpZc=
Subject key identifier: EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D972C1BAA3599EFB1FFC11FCF0B667F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 19:30:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.23.219.0/24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 10:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:97:2c:1b:aa:35:99:ef:b1:ff:c1:1f:cf:0b:66:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 19:30:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee86e2ddfd96bef0c172ca751a5d98d8245e612e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:69:c6:31:f8:08:53:6f:0b:41:df:37:18:
8b:99:e0:71:12:f1:7a:23:74:f3:12:15:0e:3f:63:
bd:b0:1e:28:53:95:82:70:d8:ed:2d:92:ea:2f:90:
de:c2:f8:70:92:75:22:7b:db:6d:a9:eb:6c:31:58:
1a:36:36:34:76:14:2b:fd:1f:ea:77:37:59:d1:c3:
eb:28:13:75:ad:a7:a3:7a:ce:8c:37:8f:f7:4f:ac:
e6:5a:93:47:d2:0f:7a:d4:ba:13:eb:4c:62:eb:ab:
a4:1c:68:09:6e:f5:7c:ef:b9:ca:09:2f:bd:f6:2b:
c9:17:d1:72:e3:c9:9c:45:e0:b9:96:5b:37:65:c5:
ba:8e:85:a7:9b:7c:27:14:19:28:c2:75:0e:b6:38:
55:ac:68:a9:d9:ee:fb:d3:34:9c:ef:c9:53:c6:bb:
60:9a:cd:b6:ba:ec:22:af:ff:57:b7:32:63:95:63:
62:32:0a:13:80:39:52:4c:26:34:4c:6f:fa:6e:f7:
3e:95:1f:c6:a0:8d:54:f2:31:9b:d4:21:95:c9:16:
d5:fc:f4:18:a4:cf:6a:13:95:78:8b:b0:c4:4b:a5:
92:31:b2:46:cc:97:1e:94:40:f7:be:60:49:4e:62:
a7:74:11:71:77:a6:45:96:d0:3c:6e:f2:06:85:9c:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:86:E2:DD:FD:96:BE:F0:C1:72:CA:75:1A:5D:98:D8:24:5E:61:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5baa39a4-b0e2-4107-afb9-2be09cd6ec0e/0/EE86E2DDFD96BEF0C172CA751A5D98D8245E612E.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:6c:4c:63:f6:20:7c:77:7b:42:5b:93:10:91:52:c9:fa:5d:
2a:ff:9f:d4:6b:03:be:50:57:93:ee:ab:5f:04:c1:77:e5:ad:
57:98:6d:2f:af:be:4a:77:18:07:0a:f5:9a:b8:fc:2c:8d:a8:
d5:69:a8:87:f2:83:9c:b0:b4:8c:75:1e:c7:57:ef:64:e6:32:
9b:a4:7c:cd:2e:36:59:7c:6e:80:96:27:39:89:5d:63:17:f3:
0e:34:2a:4e:ca:ba:ef:1f:b7:40:ec:2c:a5:b1:5b:32:f6:dd:
72:5d:96:a5:34:19:5c:06:d1:4e:9c:99:02:ea:7e:5e:37:6a:
ca:fa:b7:9d:21:77:49:2b:5f:23:57:c2:7e:04:1f:31:01:17:
65:03:02:68:b2:bc:08:6f:c4:3d:03:d7:32:25:a5:3b:d8:c5:
c9:67:6a:d2:48:f0:a9:cd:7d:c9:57:67:43:78:a3:c7:41:09:
8c:36:bf:d0:cb:56:54:4d:b7:7a:b6:f3:1c:3d:2f:ee:78:8a:
d2:34:59:0d:20:a4:54:b7:56:20:93:13:81:80:8d:81:ad:6a:
38:d1:1a:9b:22:6f:d6:53:bd:b7:0a:3c:45:74:14:a4:29:48:
4b:3d:13:1d:eb:02:dd:a1:f8:fa:f5:8d:fd:65:89:16:2b:24:
da:55:35:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:19 2024 by rpki-client on console-ams.rpki-client.org