Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8CsWuxSv28yjPr0QZtT0f1bCNNg.cer
File: 8CsWuxSv28yjPr0QZtT0f1bCNNg.cer (raw, json)
Hash identifier: AZ1xtrDRUGCCvNi5MOVa8exRFtv7rFZHWMx6g73sIyY=
Subject key identifier: F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C62848461F5D897CC7AD12ECD9EA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.25.0/24
IP: 2a12:c600::/29
Validation: Failed, certificate revoked on Fri 20 Oct 2023 11:52:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:62:84:84:61:f5:d8:97:cc:7a:d1:2e:cd:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f02b16bb14afdbcca33ebd1066d4f47f56c234d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:e6:98:44:24:f3:84:7c:ea:13:45:fe:b5:
2d:e5:50:24:e2:7a:c4:74:8d:82:88:8f:fe:ed:0d:
69:76:ac:e1:e2:2b:54:46:5c:27:82:e6:76:39:2e:
d5:f2:21:5a:93:01:ea:16:16:97:58:c6:58:14:c3:
23:d4:4c:4a:4d:b9:c4:2b:50:0b:52:b6:0b:e3:83:
0a:86:1d:c0:2f:f9:ab:a1:8c:a5:73:90:ae:57:58:
00:eb:71:21:7d:09:97:07:83:b4:30:c6:12:f3:51:
8b:05:c2:29:4f:f3:e3:2a:55:25:ed:3e:3b:c7:ff:
a5:8c:51:4a:76:1b:fb:6b:91:73:a1:0e:94:e1:85:
79:b3:b5:13:97:ed:64:12:5c:bd:5c:8a:44:7a:30:
e4:03:c2:48:2c:c8:2c:49:3f:c4:e2:87:a5:5f:d0:
86:3b:4b:3c:7d:5c:93:7e:dd:cb:76:33:54:7b:90:
eb:10:bd:2f:58:2c:98:32:74:67:3a:5c:4a:93:7c:
18:18:b3:ce:72:e5:c2:b8:d1:7b:34:26:05:d4:b9:
4d:be:cd:5c:b7:25:e4:ae:7e:73:26:85:38:5b:97:
8d:64:61:91:06:f5:7d:28:0e:4e:c5:48:01:c7:82:
53:9f:b8:00:c9:86:3c:97:10:76:64:cb:e5:5c:8c:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2B:16:BB:14:AF:DB:CC:A3:3E:BD:10:66:D4:F4:7F:56:C2:34:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/200/F02B16BB14AFDBCCA33EBD1066D4F47F56C234D8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.25.0/24
IPv6:
2a12:c600::/29
Signature Algorithm: sha256WithRSAEncryption
8a:a4:34:b3:55:6c:b9:aa:eb:c4:6f:bd:5a:39:de:4e:49:04:
7d:da:1c:82:fb:8c:1f:8e:6f:4e:d4:f8:6d:57:e9:99:3d:1b:
74:9b:0d:e1:09:28:de:1a:1a:33:ef:d2:0c:fd:ca:ff:70:df:
46:8c:b6:21:f1:c7:85:30:63:f7:0c:7b:2d:60:4a:60:e1:ed:
e3:60:81:2c:77:16:67:6a:6f:a9:4c:09:71:5a:59:eb:2d:95:
0d:e3:ee:f9:9e:1f:1d:a8:78:f6:3a:b3:ed:e9:fb:d9:58:76:
24:9d:7c:e6:72:55:8f:1a:99:0c:26:ec:8c:5c:7b:c6:5c:78:
9d:fa:6f:f7:57:10:34:f3:6b:cf:1c:e1:3d:fd:af:14:35:25:
cb:c4:09:57:c8:ba:67:b1:75:ef:67:7d:e4:ed:2e:85:9b:fa:
1f:3b:24:dd:5c:22:53:ea:8a:03:0c:d8:74:c9:ba:14:59:2e:
93:03:c5:95:ae:ef:63:64:02:51:d2:2b:cb:ed:26:07:ce:22:
85:6c:cb:85:5c:f7:c0:68:d5:8a:9a:2d:2a:21:2b:52:88:fd:
b8:b7:8a:18:7b:e5:05:7d:8d:8c:25:69:df:4b:36:34:f3:e2:
52:13:57:16:37:1d:be:f7:60:72:bb:87:89:d6:cf:10:9f:ed:
97:17:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:06 2024 by rpki-client on console-fra.rpki-client.org