Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P9vJFg6S2WepG0LEGSyKgQ8kbVk.cer
File: P9vJFg6S2WepG0LEGSyKgQ8kbVk.cer (raw, json)
Hash identifier: MiuEP15kWvDMMmDgeZYMCQsouMMxSKO0ZvJkrc+ixvI=
Subject key identifier: 3F:DB:C9:16:0E:92:D9:67:A9:1B:42:C4:19:2C:8A:81:0F:24:6D:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF782CADAFE10110E3184781D3584C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.129.108.0/22
Validation: Failed, certificate revoked on Tue 28 Mar 2023 08:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:78:2c:ad:af:e1:01:10:e3:18:47:81:d3:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fdbc9160e92d967a91b42c4192c8a810f246d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:6f:82:82:1a:77:f8:b9:30:48:d1:e8:13:
16:88:ba:e1:cf:05:05:c5:22:8a:6a:b4:db:3d:ce:
8d:e6:a0:19:09:5f:70:81:d5:bf:80:b3:b0:4b:61:
06:f6:99:61:ec:89:48:72:3d:5b:05:a9:7f:0c:42:
42:1d:fb:9f:e9:ba:28:de:1e:35:e2:6b:18:62:9b:
45:7a:d1:4a:54:a9:10:cb:45:8d:27:87:25:76:11:
80:a0:73:dd:76:23:be:92:00:ea:82:5d:76:b7:76:
4d:ab:ee:8f:d7:c6:e5:d0:2a:08:52:37:4a:45:53:
00:4c:6b:67:7a:d2:d2:cf:f9:a3:91:a8:28:94:dd:
93:88:40:1a:81:7c:f2:ad:5f:3b:58:bf:79:52:61:
77:d2:15:c9:70:dc:f1:7b:2c:58:3f:e4:d8:30:54:
f8:84:ce:f6:94:a0:56:66:20:f5:41:a9:42:17:7e:
b8:66:a7:a7:b9:e9:17:72:89:2b:c5:ff:a8:be:5a:
c1:37:2e:a5:7c:d0:8e:e4:ce:74:68:40:32:ff:85:
d3:5d:7b:fa:26:d0:d0:ec:31:87:67:b8:13:10:60:
69:62:4e:55:c7:ad:47:2c:ae:31:e0:68:91:2d:c2:
29:3b:6f:70:a1:83:44:c0:e6:6c:0e:c8:ab:9b:8b:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:C9:16:0E:92:D9:67:A9:1B:42:C4:19:2C:8A:81:0F:24:6D:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:97:b3:96:53:43:af:cc:98:29:bf:40:36:84:eb:51:55:35:
94:58:f9:cd:d4:cd:95:7c:69:a9:7c:f9:84:1e:ea:5e:07:a8:
1c:c0:c4:b0:4d:e1:e3:2e:54:3d:33:26:28:89:2d:5d:31:40:
f5:42:62:0f:c7:d9:f0:9c:c7:91:27:f9:29:ac:40:e6:a4:26:
1c:87:76:59:56:44:24:8c:bb:50:08:86:11:24:0c:20:22:1b:
1c:a3:c8:ea:6d:68:21:64:a8:4b:8b:c3:75:36:60:8d:00:59:
75:0d:5e:da:16:83:c5:0f:67:7c:97:e2:2e:f7:79:12:63:fa:
85:28:c6:35:4e:ae:5e:e0:16:3f:b9:b6:a0:56:ea:91:6d:01:
0b:7c:5a:35:5f:bc:b3:b8:7e:62:6b:28:2c:43:82:67:b8:84:
30:50:27:fd:f1:59:b2:35:a5:59:2a:25:12:4e:7f:b6:d7:3a:
66:c0:d6:8d:ef:c6:4d:5a:4a:30:df:e8:8f:43:42:74:93:ee:
86:ea:bc:03:cc:6d:4e:2e:88:99:06:9e:33:c4:f4:40:7e:0f:
bd:eb:f4:39:fa:86:4d:9a:2a:5b:1d:a2:58:0c:6b:0f:17:2f:
75:c9:64:f3:81:73:2a:bc:26:8f:96:07:83:d7:7d:f6:34:5e:
2c:c5:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:50 2024 by rpki-client on console-ams.rpki-client.org