Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BjW8GOMfmBXsKHJhY4_xJTQMTm8.cer
File: BjW8GOMfmBXsKHJhY4_xJTQMTm8.cer (raw, json)
Hash identifier: NHt/6/CLhaOe1VspiHSHUE7+dnQeCyJinXukzoAbJww=
Subject key identifier: 06:35:BC:18:E3:1F:98:15:EC:28:72:61:63:8F:F1:25:34:0C:4E:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887C58BB53D1EEC028FF3BD4AECC9C5257
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 13:42:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.20.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:58:bb:53:d1:ee:c0:28:ff:3b:d4:ae:cc:9c:52:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 13:42:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0635bc18e31f9815ec287261638ff125340c4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:1e:de:31:ed:5c:bc:14:43:f6:62:a3:ff:
3a:84:b4:53:00:dd:c2:25:9b:4f:08:36:d3:2f:bb:
83:44:d1:b7:92:38:0f:76:98:97:d8:a0:d1:31:be:
dc:6d:76:a2:97:97:f0:97:4b:2c:16:3f:e2:01:00:
6c:6d:2b:41:61:05:16:19:6f:64:24:05:5a:6e:5e:
fd:58:b6:df:e0:e4:05:b0:c6:72:21:7d:74:60:a5:
f6:99:f0:45:09:41:24:f4:25:4e:80:18:9f:5d:15:
83:fd:34:c3:08:10:9f:58:83:f3:11:69:f6:f5:cb:
66:1d:23:95:92:28:53:c6:e5:8a:9e:21:6c:d9:20:
d2:00:9b:9c:c7:63:cf:5b:0a:02:37:e8:80:ce:13:
37:82:d1:2d:2f:30:50:a1:fb:06:1d:3a:19:bc:a6:
08:2a:f9:d1:66:e2:82:08:60:3a:6f:75:01:ba:e6:
e1:b1:6a:89:84:d3:0f:4f:1d:d9:0a:11:3d:ab:04:
1f:25:5c:31:3a:6f:32:cb:13:69:98:47:3f:8a:d8:
f2:31:04:56:85:65:20:ad:71:f5:80:31:e9:dc:d6:
a1:66:64:68:77:e8:7c:e1:4e:86:7d:40:f8:34:1c:
07:6e:d4:d3:ec:c8:ca:d1:23:e5:20:1c:53:66:10:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:BC:18:E3:1F:98:15:EC:28:72:61:63:8F:F1:25:34:0C:4E:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/d4221cc2-e3a8-4de3-a6f5-5a86232398e3/0/0635BC18E31F9815EC287261638FF125340C4E6F.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.20.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f3:e5:98:93:be:a4:95:2b:dc:3b:95:40:67:7b:f1:64:54:
1e:98:d9:30:e7:c8:a4:c9:74:b2:4f:38:72:08:0b:50:be:cf:
b0:89:be:15:71:92:92:eb:78:fc:17:27:62:93:4a:7f:8c:91:
13:f1:91:e7:6a:6c:84:0b:7a:13:9f:b8:5c:91:6e:12:6f:17:
5f:f4:68:12:4d:61:cc:c0:08:90:e2:d2:a9:db:de:f9:61:31:
9b:48:da:d4:95:cb:71:ad:cb:2e:c9:09:f7:a5:dd:fd:5b:bf:
ca:b8:0f:d9:70:78:ba:ae:18:14:96:2c:fd:6f:58:10:cf:a9:
53:8c:a8:38:08:fc:0c:b8:2b:6d:69:6d:48:b4:43:a8:10:c3:
18:4f:fe:0a:94:6c:ad:b0:85:d3:d2:04:48:37:23:0e:ff:73:
b5:f6:5b:5b:32:f8:fe:b3:dc:2a:02:ed:45:68:55:e2:2c:fe:
65:bc:57:d7:01:ef:a0:3a:a1:df:92:5c:7b:8c:00:52:44:d6:
b3:b0:00:50:b0:1a:2e:cc:4d:92:e0:da:d8:37:9a:11:bd:d4:
bb:7c:b6:44:fa:88:2e:a5:3b:49:b5:98:f8:83:a4:b4:1b:8a:
5c:c1:dc:15:76:f3:42:2a:4f:8d:17:90:bf:d5:30:10:dd:ce:
78:3e:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 14:55:58 2023 by rpki-client on console-fra.rpki-client.org