Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9iUymQAfLRoBpRcFbNV39Bw063E.cer
File: 9iUymQAfLRoBpRcFbNV39Bw063E.cer (raw, json)
Hash identifier: 6c0F+kbuySNDmoV0zLXNkWqJ1ZSjD/KhTrNCY7opizg=
Subject key identifier: F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887C282910B1ED10DCA231FC21DA30A270
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 12:49:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.114.0/24
Validation: Failed, certificate revoked on Mon 11 Dec 2023 14:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:28:29:10:b1:ed:10:dc:a2:31:fc:21:da:30:a2:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 12:49:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6253299001f2d1a01a517056cd577f41c34eb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:53:79:f4:b8:3e:27:90:47:7e:df:5c:61:
c3:d9:f5:d6:8a:c5:1f:61:d1:3f:e7:0c:39:ed:25:
87:55:ed:4d:31:e6:21:a5:1f:eb:de:a9:ea:8d:dc:
88:b3:e9:ab:81:4e:b4:7a:69:fb:4a:31:e4:de:6d:
bc:fe:7d:38:9f:2a:75:88:a3:88:3d:13:83:a9:85:
6f:06:33:f2:a9:0b:b5:09:af:cf:e9:04:47:11:84:
04:b8:01:4b:56:5d:c4:56:0f:35:f7:d8:23:29:2b:
c5:8c:06:ea:9c:18:f7:77:30:bb:6a:27:6c:7c:57:
6a:10:0a:54:e7:f8:a9:ca:35:ec:8f:33:7c:bf:96:
bd:d0:d7:a9:e2:28:31:46:1c:9d:dc:53:8c:51:be:
6e:86:07:76:e3:13:db:d4:d2:f8:b5:e2:77:b6:9e:
d7:f1:17:74:71:9f:89:f3:bd:0f:58:45:f1:d9:96:
68:59:ce:54:0f:c9:85:07:fb:0c:c6:82:97:55:35:
e4:76:c6:62:54:95:66:a9:27:21:2c:0b:6e:63:6f:
17:a5:63:fe:40:fc:34:82:16:8d:89:1a:3f:df:77:
b6:e1:7b:10:00:05:12:d7:79:50:52:9f:a9:fd:f9:
bf:94:94:46:46:b2:e4:85:6e:cc:b3:cc:9b:69:97:
6e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:32:99:00:1F:2D:1A:01:A5:17:05:6C:D5:77:F4:1C:34:EB:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/25346f32-f80e-44b7-8777-52c9451a1cc8/0/F6253299001F2D1A01A517056CD577F41C34EB71.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.114.0/24
Signature Algorithm: sha256WithRSAEncryption
67:51:a9:a1:95:d9:e9:2c:51:48:ed:35:d2:ec:19:b0:f4:32:
67:91:64:21:fb:a6:32:d3:6c:85:f0:b4:e1:44:1b:4b:2f:0c:
c1:a6:cf:b2:76:ad:4b:f4:6e:9f:ee:01:ff:43:00:85:cd:86:
52:06:2b:32:63:2f:a3:27:13:a0:e3:7f:c8:ab:ee:07:ee:5e:
86:4d:9d:03:57:cf:30:d0:c7:ad:f2:ae:01:37:24:8c:e0:54:
9b:ef:98:fc:95:2b:62:ec:36:87:9e:d6:ae:82:30:f4:10:b8:
48:ea:06:cf:a5:15:5d:40:26:0c:52:9b:a9:d3:99:4d:24:19:
73:d0:23:85:07:ad:f4:f8:2e:b1:e1:01:c6:b8:36:b2:82:2a:
c0:5f:fd:d9:4f:26:66:74:03:1b:a5:48:22:70:c8:cb:7d:97:
39:4d:0a:65:0c:4b:e4:47:44:a7:d3:78:52:0a:32:20:3f:31:
89:10:f1:43:37:87:ce:a2:49:bd:e6:0e:f5:c4:3c:1f:b0:c5:
99:eb:2b:98:22:aa:ac:f3:94:fb:67:04:a0:0a:8c:3a:4d:4e:
ae:91:d6:c8:55:ab:ed:12:26:5e:d9:71:69:1b:76:22:cc:19:
d2:e5:51:68:7e:11:9a:98:d6:ba:45:3a:ce:10:ba:b6:00:6f:
1a:3c:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:41 2024 by rpki-client on console-ams.rpki-client.org