Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer
File: C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer (raw, json)
Hash identifier: nmoRlhfiiM+gkEqjIiF+OoqfKzYUoaBI5w0SSX4eDQs=
Subject key identifier: 0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD40DDC27A3648FE0C4ECC8F40D920
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.237.87.0/24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 12:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:40:dd:c2:7a:36:48:fe:0c:4e:cc:8f:40:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:49:70:97:68:d5:17:24:7a:c2:08:a2:9c:
51:c2:66:da:30:fb:21:37:93:f3:f4:ef:18:13:ad:
23:32:9d:4f:dd:95:ec:10:53:46:39:f0:f1:b4:38:
a0:46:55:d4:78:28:43:63:22:33:2f:15:a9:1c:f5:
d1:c2:59:a2:de:c4:55:3b:93:43:63:8f:05:f8:1e:
89:3d:9c:40:ed:ee:a3:d2:3b:90:cd:b6:a1:9f:10:
b5:76:6f:f7:a9:ab:51:0d:b8:a2:3e:30:ce:9d:80:
23:47:65:9f:cc:d0:f8:43:0f:15:a1:22:04:79:53:
ee:1b:64:31:32:80:bd:aa:42:d9:64:01:7a:3d:76:
4a:e8:8d:88:72:7d:12:bf:f9:18:b9:10:08:78:98:
ee:16:cc:c7:3e:3e:f3:d7:9b:33:b2:24:20:eb:9e:
13:d4:0c:19:01:ca:55:25:90:69:08:73:26:29:2c:
f7:5b:a0:43:4d:d8:bc:cf:b4:e9:39:7f:a8:1a:a1:
5a:7e:c0:8e:c2:b1:8a:6a:ca:9f:31:e9:39:3f:7d:
c4:cd:0a:ac:16:ce:b1:83:b2:db:c3:aa:e4:e9:92:
17:72:3c:18:43:44:36:f1:85:30:a3:3d:e0:31:2e:
35:49:a7:63:2d:b9:2d:c4:15:db:30:d7:2d:29:d2:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.87.0/24
Signature Algorithm: sha256WithRSAEncryption
50:16:21:f4:7e:5c:5b:99:59:21:03:a9:b7:23:dd:84:29:d1:
6e:fe:0a:24:5b:70:04:2c:92:03:2c:23:eb:ca:a1:b0:04:a8:
df:89:6d:71:0c:ed:25:3c:55:cc:0f:a1:85:fb:40:12:83:19:
be:a7:d6:3c:75:58:9c:0d:16:5e:c9:60:aa:99:d8:77:cc:20:
ab:12:b6:80:27:f9:d2:bc:90:89:c5:9a:08:d9:ae:7c:1d:8d:
fd:d1:0e:49:35:66:f6:d7:3d:2c:02:34:17:92:76:be:33:a8:
f1:e5:57:08:f8:84:a6:ff:5b:25:71:3c:df:41:af:76:e6:ed:
3c:e4:d1:c0:91:05:6e:63:cb:b6:d7:da:a5:85:b5:e2:0a:b7:
33:b3:13:b2:85:fe:19:59:f7:5b:21:c8:ac:2a:8e:bb:b1:0e:
f8:78:80:d3:89:c9:fb:6b:a3:70:46:fd:6e:ff:66:02:95:78:
cf:b3:f8:a4:ac:85:24:4d:dc:68:70:94:cb:5a:69:0c:c6:2e:
d8:d5:b9:b8:c8:70:6c:4e:93:25:12:9a:8e:89:3e:b9:93:03:
ab:04:b1:41:64:3b:67:d7:b9:78:9e:15:ba:e6:2e:a7:f8:da:
8f:63:64:f2:f1:0b:08:b4:25:17:3b:a4:e1:9e:36:34:7b:fc:
5e:01:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:28 2024 by rpki-client on console-ams.rpki-client.org