Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PWlfr9YSbRH98CAO1zJYWY-XvS0.cer
File: PWlfr9YSbRH98CAO1zJYWY-XvS0.cer (raw, json)
Hash identifier: 1qZ5t/rhi9KRrGf820dcLyttbkbIzBUFIQSk+gctcRI=
Subject key identifier: 3D:69:5F:AF:D6:12:6D:11:FD:F0:20:0E:D7:32:58:59:8F:97:BD:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B72DCF27B052A216615B1A9E084807
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:11 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:678:824::/48
Validation: Failed, certificate revoked on Mon 11 Mar 2024 09:57:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2d:cf:27:b0:52:a2:16:61:5b:1a:9e:08:48:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d695fafd6126d11fdf0200ed73258598f97bd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:8b:e3:43:74:93:c7:2c:4a:4d:cc:65:ed:
2d:cd:16:52:cb:8a:48:3b:81:45:e0:9c:13:89:04:
21:dc:90:29:8a:b1:38:03:df:1c:1e:a8:ea:b7:20:
76:b6:1c:2f:c0:85:8e:27:29:9e:f1:6f:b4:da:b4:
ab:ed:d9:24:ba:16:e4:aa:06:90:30:22:b1:2c:f2:
72:c2:bf:e4:23:34:d9:90:c4:11:e1:59:93:e8:bd:
f7:9c:fc:07:13:cc:96:4e:56:0f:b1:4f:c6:eb:61:
d7:b6:cb:a1:f5:00:1b:36:77:31:66:20:80:3a:3c:
68:e2:c0:e8:1b:6c:3f:46:6b:67:a2:bb:87:7e:a7:
32:a3:c3:e3:2e:8b:be:a6:85:c1:92:c7:b6:7b:1c:
16:7e:38:91:c8:a5:7c:ca:a7:e6:2d:11:ba:8f:52:
60:ef:51:d8:1c:2e:ee:59:5d:b1:b2:12:1d:c6:a3:
90:c2:44:9c:27:9f:15:1c:1c:7c:2e:1d:54:29:77:
84:b3:ac:ba:c0:42:78:e4:c4:06:0d:5d:d6:4c:88:
d5:12:63:de:48:70:13:49:d5:a1:97:7f:8c:5d:f5:
dc:f7:7d:b8:48:30:34:e7:95:28:38:6c:e0:7a:67:
39:2a:b4:5f:73:15:d1:a6:72:c1:e9:67:98:be:c4:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:5F:AF:D6:12:6D:11:FD:F0:20:0E:D7:32:58:59:8F:97:BD:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:824::/48
Signature Algorithm: sha256WithRSAEncryption
a4:ee:76:e9:59:64:d4:8d:94:68:87:bb:6f:5f:ba:7e:a4:65:
34:7c:77:d0:e6:a1:5a:ae:7a:a7:30:5c:59:f0:ab:a0:14:99:
fa:6a:2b:ee:80:e3:3e:7d:28:64:8e:eb:dd:10:57:ba:f8:50:
ed:65:47:82:d8:96:e9:86:47:9a:58:76:75:3e:38:73:37:05:
b2:2c:2d:1e:3e:e6:01:5d:f9:61:f9:68:f4:b6:93:29:9a:7b:
9f:6b:47:ad:39:41:35:20:70:4d:e7:67:9d:4e:a6:41:84:4c:
2b:a4:80:c4:1a:88:2f:f8:c6:df:f6:39:ad:52:a9:15:59:18:
06:cf:3d:58:00:b7:0b:73:94:5d:16:23:8a:2e:56:fd:0f:cc:
ef:c1:f8:b1:9f:94:70:b1:86:53:54:8f:0d:c0:2e:0f:d9:ec:
35:8d:dc:22:09:84:17:f1:9a:47:62:8c:5c:b8:8d:a1:5d:67:
fb:cd:cf:c2:2d:3e:f0:a6:b9:40:5e:4d:4c:63:01:33:54:e3:
57:4a:d0:30:e6:5b:ee:fe:66:48:fc:8f:1c:62:8a:de:c1:55:
32:8f:c7:f6:52:cd:cc:f0:85:7a:a1:cb:5b:23:f5:a6:e3:36:
07:fb:33:79:a2:ca:60:dd:b5:95:c8:49:73:6c:40:6d:99:48:
67:ef:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:56 2024 by rpki-client on console-ams.rpki-client.org