Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P-6VK61O_tDuWxeTenX77IYdv_c.cer
File: P-6VK61O_tDuWxeTenX77IYdv_c.cer (raw, json)
Hash identifier: ZUnDwWLIbDCBQ6PVdovKpvZvy5grfNQ9Pfbz6pQYAvg=
Subject key identifier: 3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018737F95B7714485DB57B6CB37D5A778243
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 31 Mar 2023 14:01:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.145.240.0/22
Validation: Failed, certificate revoked on Wed 05 Apr 2023 06:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:f9:5b:77:14:48:5d:b5:7b:6c:b3:7d:5a:77:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 14:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fee952bad4efed0ee5b17937a75fbec861dbff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:6e:24:43:1c:2a:3d:4e:25:05:58:ef:2f:
93:76:93:21:2e:39:01:58:c5:0f:7f:4e:bb:83:49:
62:e8:44:d2:f9:b0:b0:36:44:6c:0e:d4:86:9e:8b:
49:34:fc:dc:8c:fc:16:18:2f:4d:72:43:07:f5:68:
f8:12:67:46:94:c9:00:cd:9e:97:ab:99:95:68:cc:
05:42:4f:75:5a:84:25:63:05:a3:0d:85:70:ee:3a:
30:dc:c5:c0:34:83:3b:b6:52:47:a7:e0:45:ee:18:
c7:f5:bf:20:54:ef:32:b6:d9:59:61:27:1d:d1:94:
68:70:05:27:0f:d6:40:d9:6b:d2:b8:80:b5:7d:46:
fa:c9:06:eb:6e:6f:a1:61:a7:64:c4:0d:74:45:d2:
7e:d9:3b:a2:92:9d:23:1a:bc:a3:79:0c:39:c0:78:
46:83:de:16:12:a4:73:2c:3f:7d:d1:81:6c:85:b9:
51:e2:e9:68:90:8e:fa:67:cc:b1:71:5a:2a:c7:67:
88:9e:52:f8:28:34:91:1f:19:ec:ec:bf:5f:be:8a:
bc:d1:48:cc:b6:fe:8d:f3:41:e3:21:14:b5:91:43:
88:43:f5:0f:f1:06:0f:ec:dc:f9:17:0d:40:7c:43:
f0:b0:a9:27:40:84:ff:a6:5d:a1:0b:62:e3:37:64:
da:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EE:95:2B:AD:4E:FE:D0:EE:5B:17:93:7A:75:FB:EC:86:1D:BF:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b138f581-e8b2-4416-8302-716b6ce65206/0/3FEE952BAD4EFED0EE5B17937A75FBEC861DBFF7.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/22
Signature Algorithm: sha256WithRSAEncryption
65:21:a4:35:2a:88:9b:63:05:fe:42:c1:02:3d:32:55:e1:70:
fd:1a:6c:3d:ec:c7:62:7f:ea:dd:ea:94:3b:bc:7f:43:56:3b:
5e:84:6e:e6:f0:9d:3b:90:b2:26:c6:48:b4:a1:de:2c:89:a2:
46:39:48:46:59:54:dd:eb:64:90:82:04:ea:14:30:07:e5:26:
84:a5:38:21:4a:b5:34:97:89:29:d6:9b:28:0b:c5:0e:de:f3:
0c:38:28:06:f3:91:53:be:76:af:f4:51:35:79:89:6f:fb:97:
46:ff:ac:88:6d:08:15:14:3e:5d:0a:b5:e5:18:8c:59:3a:60:
a4:d7:0c:ff:20:00:e3:29:16:7e:fa:d1:a1:75:f1:55:40:7d:
8c:cc:31:18:47:1e:97:f0:55:65:3b:27:fb:b8:e1:14:40:a9:
f0:c1:6c:8e:1b:4b:40:03:e6:92:5a:90:1c:5a:d2:9d:97:15:
e7:bf:cd:b8:f8:81:98:2f:b9:88:dc:15:11:24:5f:05:41:85:
5b:26:51:51:ba:61:1b:9a:ee:48:07:b5:47:8c:43:52:3f:ed:
3c:2e:2d:e8:03:f3:f2:5e:1a:28:a8:3e:12:69:c5:35:af:22:
f5:01:c8:2d:f5:0e:03:43:e0:da:8e:fe:c1:d1:e7:7e:dd:60:
8c:5a:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:56 2024 by rpki-client on console-fra.rpki-client.org