Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PDeEQD2GsthbPR0eAtPcAKBBPUE.cer
File: PDeEQD2GsthbPR0eAtPcAKBBPUE.cer (raw, json)
Hash identifier: +OH9rLqsPrHY+dJRceGT//6uVciaAN4sZv0Y5KJiJjI=
Subject key identifier: 3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63443F25B339FC74000B86F90A4E9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.221.0/24
IP: 2a12:9800::/29
Validation: Failed, certificate revoked on Tue 14 Nov 2023 08:53:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:44:3f:25:b3:39:fc:74:00:0b:86:f9:0a:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c3784403d86b2d85b3d1d1e02d3dc00a0413d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:1d:55:9b:09:e5:61:97:4b:86:07:a0:dc:
d4:91:5e:9e:c7:f6:99:53:b5:96:9e:ab:6b:68:10:
69:be:0c:22:b6:24:d5:b3:d3:4b:f8:8b:34:e3:35:
b8:6a:bd:ba:6e:4c:35:58:86:1d:f0:de:0f:7d:3d:
ac:03:b2:2f:6d:ee:23:6b:bc:dd:2c:a9:58:0d:13:
ea:73:3a:e0:fb:03:6a:1c:68:1c:a7:94:aa:75:e7:
97:40:70:e0:27:82:52:5a:0c:00:ae:81:9e:39:6c:
f1:62:01:95:d8:24:ee:98:38:13:0e:ba:0f:9b:b0:
f5:ba:5a:93:a8:4a:4e:0b:a9:db:84:9f:21:bd:23:
fa:4e:2b:94:33:e0:c0:f4:22:c7:00:c1:e2:13:e8:
38:8b:4c:fa:60:a8:f9:5d:38:dc:ed:b7:b3:f1:4e:
00:2c:56:c1:66:de:7e:d8:f8:85:fc:92:80:9b:0c:
6f:c3:a9:c1:12:a7:f7:15:2a:9f:7d:3d:65:82:99:
d8:b3:5f:ea:f1:be:2d:32:71:ca:bf:c3:3d:01:84:
99:69:d9:28:c0:e4:da:08:b7:b8:0c:1e:50:24:48:
e7:5e:1b:28:c0:8d:dd:1e:f1:17:a3:12:ae:ba:d1:
be:2d:dd:9c:b9:10:a4:5d:bf:23:d2:d2:bf:75:6c:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:37:84:40:3D:86:B2:D8:5B:3D:1D:1E:02:D3:DC:00:A0:41:3D:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f0cb6-ab28-4e49-8b2d-8b0cb4432ac6/1/PDeEQD2GsthbPR0eAtPcAKBBPUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.221.0/24
IPv6:
2a12:9800::/29
Signature Algorithm: sha256WithRSAEncryption
2f:0d:66:f3:54:b3:61:2d:9d:16:ba:9b:6c:e7:03:e1:6b:fd:
9b:49:17:c1:9e:7f:67:6d:ab:c2:72:f3:40:6f:59:f2:fe:da:
26:f5:38:4c:67:53:47:45:1e:47:a7:30:08:c0:3e:54:8a:4f:
96:49:46:0c:48:b1:da:f1:73:39:07:08:95:2d:de:ba:04:ca:
79:52:78:b0:4d:7e:b1:a9:f3:35:9a:d2:5f:13:18:2b:ba:46:
53:62:9b:6b:c9:47:91:ae:3b:c8:40:39:8b:14:59:ff:c5:15:
be:9b:f3:81:42:df:ac:9b:89:69:0d:fe:be:93:32:ed:a7:76:
16:57:75:93:c9:5c:aa:e7:7a:85:74:d0:36:60:7c:56:1b:a3:
5d:b6:cd:91:a4:7c:74:80:8a:75:13:7b:fb:55:7e:04:87:8f:
4a:d0:87:81:c1:13:e9:65:93:27:c2:ad:21:12:68:e9:c2:35:
17:f2:bb:04:f0:0e:aa:5f:25:6c:99:03:ec:93:a7:73:12:4f:
63:93:bc:3e:85:1a:08:44:0e:15:91:8a:73:eb:71:28:e9:3d:
ca:85:4c:73:d9:d8:b2:0f:81:3b:2b:4d:0f:e5:36:61:0f:e8:
a6:73:76:77:2b:bc:d5:37:0a:bb:bd:b7:c5:29:92:d5:5a:5b:
d3:b2:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:59 2024 by rpki-client on console-fra.rpki-client.org