Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer
File: PsnKHX1VV7AYXqnO3gRUgOdiiSs.cer (raw, json)
Hash identifier: 6fOXoyFFI3Q0/VFOyq+XZuR7LyhFPzUyIAnapMufIu0=
Subject key identifier: 3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB2067BE99F8768A9D00DFD491538F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 178.211.149.0/24
IP: 2a12:ec80::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 12:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:20:67:be:99:f8:76:8a:9d:00:df:d4:91:53:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec9ca1d7d5557b0185ea9cede045480e762892b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ea:16:ac:bb:67:a2:78:ff:45:fe:e8:7a:a0:
04:cb:62:e5:29:ff:1b:cd:31:c1:b5:ba:81:74:c1:
cc:c3:89:f2:83:bb:80:bb:1e:5b:30:d5:3f:9d:6d:
c1:91:c1:bd:64:0e:6a:30:e8:f3:e0:90:03:cc:8f:
d0:46:1f:d5:eb:59:2e:06:31:1a:54:3d:e0:c5:6e:
7d:85:2c:5d:c7:65:7f:6c:d5:ba:66:d2:23:4d:d9:
cc:bc:fa:86:56:a9:4e:aa:43:ce:06:13:81:6b:a5:
e9:bc:42:e1:70:c2:8a:57:82:a5:03:cb:80:40:c6:
e4:ae:5f:31:c4:d8:f9:92:20:18:32:0b:3c:ac:95:
78:87:fd:01:1b:4a:51:1a:29:68:88:df:67:83:0e:
10:54:5f:93:aa:c3:dc:1f:41:ec:be:77:30:ef:d0:
3c:f6:04:9b:88:c5:aa:2d:0d:3a:45:a4:e1:82:bc:
38:22:3b:a5:c8:bb:a9:ee:26:95:ba:b9:de:35:5f:
94:e2:d5:24:1a:94:d4:88:c7:ff:fc:3a:65:24:5d:
0a:98:fa:02:34:c4:fc:e3:5a:74:8f:84:04:37:f4:
4c:36:a7:a1:d6:1c:a2:2b:ae:0d:12:1f:5d:8d:55:
e4:bb:01:d7:69:dc:18:57:07:3d:da:35:8c:ad:96:
d0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C9:CA:1D:7D:55:57:B0:18:5E:A9:CE:DE:04:54:80:E7:62:89:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e251d0-be4e-4f00-8b52-679b0f7ed128/1/PsnKHX1VV7AYXqnO3gRUgOdiiSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.149.0/24
IPv6:
2a12:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
8b:ac:17:a4:82:39:41:e7:bf:7e:2a:70:a2:ec:27:91:e1:73:
4a:11:93:85:84:7b:53:5c:0f:57:c9:55:65:e2:11:b9:d8:82:
34:1f:57:03:48:c8:ec:ad:7b:15:15:67:4e:01:7a:b5:1a:01:
bb:2d:60:00:bb:ee:0e:d4:e4:34:6d:17:9c:96:9a:dc:4b:34:
9b:15:fb:38:da:24:d7:2b:29:ab:7b:e9:cc:fe:d7:8d:6f:f2:
7a:71:ec:58:a2:ab:2e:52:2e:8a:e8:4d:d6:50:d0:c8:c7:9c:
ab:8f:2d:c4:bb:de:49:3b:51:c9:02:08:bd:6b:18:86:2a:36:
6f:e5:ea:7a:39:7c:18:b2:c7:07:63:9a:b4:7d:59:55:aa:d8:
49:a6:87:3f:1c:13:73:27:98:2f:13:af:73:70:6e:26:19:d4:
9d:35:19:34:7b:ed:a1:d0:b6:c0:33:f8:ae:5b:f4:be:d3:36:
8c:01:cb:e1:96:4d:e5:10:2b:49:a8:1d:ee:cb:10:d2:f9:72:
eb:c7:8d:aa:2a:76:3b:a8:ba:fa:c3:f3:f6:fc:8c:ea:13:39:
76:06:fd:97:d6:6f:e0:9a:3a:f3:6f:cc:f3:f3:2d:99:c9:c4:
78:71:33:f1:e2:26:87:af:ee:a1:98:36:72:91:dd:dc:5c:52:
bf:0b:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:02 2024 by rpki-client on console-ams.rpki-client.org