Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JDYD7_dtr5RULyPVYPn8pXmsl-0.cer
File: JDYD7_dtr5RULyPVYPn8pXmsl-0.cer (raw, json)
Hash identifier: 0Q2y7q2m0r/Xqi8YvE4DeyL+1ZV7ulCUdr53wePWnzw=
Subject key identifier: 24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAE60642DBB59573B64CACAD8BD58DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:32:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.90.0/24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 09:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:60:64:2d:bb:59:57:3b:64:ca:ca:d8:bd:58:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=243603eff76daf94542f23d560f9fca579ac97ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:49:2c:b1:1b:55:56:3e:21:95:d1:3a:d9:
0d:a8:cc:e7:6c:40:b0:30:29:8c:21:65:79:2c:38:
a5:60:80:e5:d8:57:53:fe:46:4a:0c:9a:c1:9e:5a:
bc:4f:5b:84:98:52:01:f6:e0:a2:80:b2:d5:b8:ec:
0d:6e:10:e6:52:dc:4b:af:88:fd:09:6f:a4:58:2e:
b5:76:ef:f1:7c:10:fa:8a:d3:05:c9:b3:74:f5:86:
07:86:76:47:7d:d1:db:6f:b1:0f:92:dd:39:94:e7:
f6:cc:6c:f1:f2:7c:7b:37:76:9b:ac:a7:a9:27:e5:
dd:f3:19:9a:17:53:93:7d:a1:30:66:4f:bc:8b:97:
dc:d7:c8:ed:9e:82:40:04:3b:7b:24:b9:d8:73:d1:
66:b8:89:36:b8:27:52:3a:67:19:b4:34:6d:54:dd:
c4:90:4c:03:14:de:64:8c:5f:2b:44:2d:bb:a9:60:
32:d1:5b:43:93:d5:e3:44:fa:c8:6e:6a:a6:fb:93:
08:25:0b:01:33:e7:5e:3e:a3:a3:55:46:f2:86:d8:
1c:20:b0:af:5e:8d:1a:a2:92:be:e6:40:59:0b:9f:
2a:96:a7:c5:fe:29:b9:53:b1:fd:e2:b5:ae:45:e0:
0a:b8:86:d2:20:23:64:52:f4:11:31:15:b8:e2:08:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:03:EF:F7:6D:AF:94:54:2F:23:D5:60:F9:FC:A5:79:AC:97:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f8a4ce-0117-4cc5-9826-7ef6e17049e5/1/JDYD7_dtr5RULyPVYPn8pXmsl-0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
49:3a:8c:92:37:34:15:58:67:77:bf:89:63:96:d3:cd:72:82:
e4:d1:77:ca:ee:43:ee:48:b7:66:ac:90:ab:9a:9a:9e:41:a2:
45:ba:77:87:e8:3c:a2:fa:45:24:49:4f:d5:61:a0:60:ba:38:
61:da:9f:f9:8d:06:2c:4c:b8:ff:6d:4e:42:31:9a:f5:75:de:
65:56:b7:de:a7:54:ba:e5:f4:c3:00:46:95:ba:14:e0:d8:12:
ae:a3:f6:a6:e7:b0:9f:17:b2:b1:0a:2a:3e:72:42:52:48:b5:
a5:35:69:93:3b:fe:42:50:cf:5b:94:12:18:7a:f1:76:4f:73:
50:ba:15:08:cf:26:bb:fa:2a:a7:f1:76:9e:3d:14:23:1b:a8:
6c:5f:13:66:18:d2:2b:5d:d6:44:43:17:8e:b2:12:12:a4:b6:
59:ec:3d:37:b7:1c:68:61:ce:ec:7a:1a:12:80:c6:e3:7e:63:
47:80:ab:bc:ea:31:6d:9f:7a:e7:d8:08:eb:87:09:6b:b4:26:
e9:8a:0d:97:e7:cb:28:98:44:7e:10:a8:56:64:c5:72:c3:e8:
f4:e2:26:98:b9:d6:8d:4f:ae:8f:5d:6d:48:6c:f3:95:d8:7d:
e2:98:2b:5e:0a:bf:10:3f:d3:ab:6d:0a:ab:43:8d:66:1b:9e:
8f:08:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:29:53 2024 by rpki-client on console-ams.rpki-client.org