Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AvgcN-ntJNCyDpTBhpDoiuSzEco.cer
File: AvgcN-ntJNCyDpTBhpDoiuSzEco.cer (raw, json)
Hash identifier: iuPWTSsHwG2ycqHXKRQndH6GDTun3+oRTpFRPXJ/6mg=
Subject key identifier: 02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFACC7392559ADDCDED096DDE129922
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.19.96.0/21
IP: 37.203.192.0/21
IP: 185.4.192.0/22
IP: 2a02:4940::/32
Validation: Failed, certificate revoked on Wed 08 Mar 2023 08:43:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:cc:73:92:55:9a:dd:cd:ed:09:6d:de:12:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02f81c37e9ed24d0b20e94c18690e88ae4b311ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:39:ea:7d:d3:0d:ba:c6:40:16:ec:00:4b:7d:
04:9e:c1:4b:2f:4f:e4:dc:0f:6c:27:e6:0b:d2:4a:
4a:ea:84:0d:09:03:4f:62:5d:0f:ab:cd:b3:f4:49:
2b:d0:28:f6:17:bc:3a:52:da:e9:84:55:43:6c:af:
fc:e3:ca:f2:38:ef:f4:3c:2c:0e:87:e7:30:93:98:
eb:07:67:c8:2f:72:20:7d:d2:d7:8a:92:cb:a2:17:
d4:c3:e3:a1:3a:f9:d4:e1:2b:50:0e:c9:0a:84:0c:
cb:14:53:e3:65:00:4e:19:90:7d:4e:30:74:e7:43:
a8:36:e2:82:9c:a2:f7:9d:ff:fd:19:b5:06:0d:e4:
01:05:9c:8e:9b:41:77:6e:73:7c:1c:23:1d:ac:92:
d2:c1:8a:8e:ee:ad:fc:45:af:80:f6:f3:20:28:6d:
4e:68:c5:4b:a2:1a:14:73:90:7a:01:d8:4c:91:f2:
bd:1f:50:45:50:75:61:7a:8d:93:9e:b4:3a:2e:12:
28:00:b2:5b:23:ba:57:94:88:7e:5e:e0:79:e1:6d:
6f:72:90:bc:ce:f3:a4:52:0f:2d:a1:17:58:72:f1:
a8:c3:7e:fb:a7:b9:27:79:3f:0b:62:8d:dc:7e:86:
25:b2:59:c7:00:7c:34:0e:d9:e2:ab:9d:88:93:19:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F8:1C:37:E9:ED:24:D0:B2:0E:94:C1:86:90:E8:8A:E4:B3:11:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/01fa18-ab6a-4899-b475-92a3661ec26d/1/AvgcN-ntJNCyDpTBhpDoiuSzEco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/21
37.203.192.0/21
185.4.192.0/22
IPv6:
2a02:4940::/32
Signature Algorithm: sha256WithRSAEncryption
74:b6:ba:88:99:94:fd:0e:4a:45:8d:5a:69:e9:db:98:84:24:
a8:6d:10:a3:ca:25:04:86:73:d0:74:44:ce:b5:3d:56:8f:46:
30:8b:47:33:0d:bd:04:45:dc:fd:36:be:80:94:d4:44:41:ee:
5f:87:d1:4b:3a:d6:fb:b3:8d:53:ef:7a:8a:de:f0:bb:35:e1:
ee:f0:cd:4a:57:a6:42:94:89:9a:35:1c:3c:80:55:2b:72:1a:
0e:bc:e7:cd:b0:ed:6a:6c:c6:4f:a5:9d:54:cf:60:75:01:51:
a8:6e:8f:6d:24:38:07:39:8e:2c:0f:14:69:ae:b9:37:5d:e6:
d0:ec:4f:c5:4b:62:fd:4b:d9:9e:90:70:cb:01:9b:06:b4:0c:
c1:31:8e:6c:a4:f0:5b:33:6f:1f:d4:a9:69:c7:0b:74:76:70:
80:c5:f4:aa:eb:9a:c7:2d:4f:99:86:80:dd:ba:19:46:c6:fb:
22:1c:8c:97:22:d6:04:5b:d9:fd:37:30:8a:23:75:80:4e:cc:
f6:84:1e:58:ef:8a:aa:7d:a4:dc:34:cc:27:dc:ce:5e:85:9c:
0c:08:76:f9:84:8a:8e:2f:48:e6:6f:f9:d3:ac:2d:91:90:98:
b5:ae:c7:d3:aa:35:13:ab:38:90:14:81:cb:78:1e:f0:3f:2c:
22:59:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:34 2024 by rpki-client on console-fra.rpki-client.org