Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
File: DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer (raw, json)
Hash identifier: nscGxn5yWprnMBkIEvhuSvPEP28Hgo8B6LLGl/hKzsE=
Subject key identifier: 0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC49359861C51F10FC83D8474015C8154
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:40 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.110.81.0/24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 10:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:59:86:1c:51:f1:0f:c8:3d:84:74:01:5c:81:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d3c383b2d395162314b034871b8e94c92384e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:3b:52:f8:cb:5b:73:17:e1:09:f0:fa:15:
1d:6d:72:0b:4f:79:6c:2d:cb:b0:82:34:1b:20:19:
4c:8f:43:54:74:6b:d4:a2:e2:62:9f:61:43:b7:0e:
b8:2d:a6:86:86:89:e0:2a:20:e0:0c:0c:88:60:68:
44:60:dd:02:6f:f2:ef:79:57:11:0b:2a:0b:0d:2c:
65:7c:e9:08:2e:92:63:54:5c:2b:3b:01:80:d9:62:
4d:e6:15:a1:a8:87:de:61:4f:98:67:e0:91:1a:1c:
20:64:dc:cd:04:62:70:31:44:a8:23:77:d8:f8:76:
0d:f3:94:6d:58:d5:40:ef:df:22:30:1a:a7:22:9a:
02:bc:88:d7:16:67:d9:a9:ac:f8:58:c0:83:05:1a:
96:a0:5c:02:68:31:32:f7:ff:75:d2:c0:d5:07:ca:
a0:8d:fa:5a:47:09:5a:de:23:0c:66:ba:1e:f4:a2:
cc:17:de:d1:d5:c6:3c:9a:33:fb:3a:4b:0b:7e:c4:
41:ba:2a:37:03:61:d9:a3:aa:99:83:f9:b0:88:6a:
42:a7:02:68:b1:78:80:86:f1:b8:ec:53:ad:3e:7a:
4a:90:7e:e2:3f:40:17:e1:96:9d:a5:04:8f:24:7d:
98:93:84:5f:9c:48:94:e1:c6:c3:94:24:4d:0c:f3:
10:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.81.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d4:23:84:10:f0:a4:ad:90:39:9f:8d:9e:a9:70:80:36:a8:
06:f8:f6:df:82:15:07:56:67:16:57:ac:7b:f4:3b:f7:8f:70:
c7:b3:4e:a3:ae:1f:26:fc:d0:a6:a3:64:e7:fe:d7:7d:d5:37:
8a:7b:aa:91:42:bd:57:38:fd:89:09:83:cf:33:a2:18:5d:d6:
4c:d3:73:62:3b:64:ed:fa:e5:3d:77:7e:4e:3a:c5:da:d9:a1:
81:09:4e:9d:b4:4b:40:65:ed:5b:b7:8c:d5:ac:ac:35:c6:35:
fb:1e:ab:b4:a6:bd:cf:cc:d6:d1:54:8e:36:67:ec:a7:88:b2:
c0:71:de:9d:a3:6f:d4:05:4a:54:9d:67:e5:d6:8e:56:57:71:
79:11:61:41:aa:24:10:8f:b3:f1:21:1e:f2:cf:bf:1b:57:0f:
3b:73:50:c0:a1:83:80:ac:03:ab:b5:1f:69:d6:56:c3:ce:a2:
39:45:6d:34:45:fa:fc:a2:73:ec:85:e2:b4:b3:4f:63:d6:b8:
b5:da:9b:2b:d9:7a:55:80:d0:7e:3d:4f:4a:af:24:69:37:50:
ed:f2:e1:82:03:cb:8d:e5:fa:9a:07:ae:eb:a7:50:ad:54:b2:
f5:4f:19:ab:b2:db:24:87:e2:fe:43:cd:f5:0f:39:bc:c6:7f:
77:3d:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:46:21 2024 by rpki-client on console-fra.rpki-client.org