Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PvnqkLvN58LP_Pu2MSsbY3ouSQo.cer
File: PvnqkLvN58LP_Pu2MSsbY3ouSQo.cer (raw, json)
Hash identifier: TyrmWwGfZTF/Ptwzj7lD3IDsB2vJcQcC/iI1kIa9Btk=
Subject key identifier: 3E:F9:EA:90:BB:CD:E7:C2:CF:FC:FB:B6:31:2B:1B:63:7A:2E:49:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED410C386511D3F36FE0FCB815553A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/PvnqkLvN58LP_Pu2MSsbY3ouSQo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 171.22.92.0/22
IP: 2a09:3cc0::/29
Validation: Failed, certificate revoked on Thu 02 Feb 2023 11:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:10:c3:86:51:1d:3f:36:fe:0f:cb:81:55:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ef9ea90bbcde7c2cffcfbb6312b1b637a2e490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:ad:3f:3a:d7:34:a6:15:be:61:8c:c1:bb:
76:d4:6d:e8:4a:3c:30:d3:b3:38:c7:a9:22:e8:2f:
f0:02:e7:d3:c5:8a:89:ea:ca:c8:59:67:4f:78:fb:
47:7e:f2:39:84:2d:33:f3:71:c9:b5:a8:81:d7:47:
8b:21:b3:b8:0e:49:12:7c:17:43:40:57:00:55:67:
91:55:3d:84:a1:c3:81:4a:e1:d0:a5:7f:c2:5c:6c:
d1:3e:ce:97:75:18:a7:cf:da:b3:25:99:af:a7:7e:
9c:dc:80:fb:f6:81:f5:70:7f:8b:a9:e0:56:60:8d:
b0:a1:20:21:df:73:4e:a8:ed:77:9c:7d:f9:a0:32:
fa:a1:bc:e9:e5:8a:4d:6f:32:d9:b1:2a:96:59:2e:
f4:67:8c:59:91:c1:60:30:27:02:46:fd:af:64:24:
9a:17:fd:a2:e8:58:d0:85:af:65:ad:60:2e:2f:e8:
fe:fc:01:80:d9:2f:a7:b5:c2:f4:2a:7f:ed:3a:98:
4b:96:e6:1b:61:73:44:fd:4e:b1:ff:9c:07:c4:19:
18:58:65:0f:e9:1e:c1:d0:62:4e:8e:83:67:2c:16:
c5:40:ac:30:1c:ec:ec:c2:85:06:c2:51:29:34:78:
3b:32:bc:a3:8d:d1:d7:d6:94:6d:d2:ca:4d:7d:48:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F9:EA:90:BB:CD:E7:C2:CF:FC:FB:B6:31:2B:1B:63:7A:2E:49:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/0c5de4-ed86-48f9-bc06-f4ca21dbd20a/1/PvnqkLvN58LP_Pu2MSsbY3ouSQo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.92.0/22
IPv6:
2a09:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
77:2e:bf:35:b8:46:09:bb:40:c7:51:1e:21:54:dd:c2:e1:8b:
73:02:1e:b9:31:9a:87:cf:10:f4:d1:6b:bd:a8:7a:4e:d7:9c:
c3:52:db:2b:57:53:a6:da:0d:70:2b:a6:fa:ea:b1:bb:e0:61:
7a:42:31:bf:26:48:b8:6b:5c:17:42:35:bd:a2:9d:69:37:0f:
c1:b5:23:5c:df:d1:92:c8:11:71:2a:17:ed:dd:97:7f:b5:6f:
a6:4d:bd:ed:f9:6b:37:5e:b8:24:1f:d9:b7:84:90:d5:86:2f:
0c:70:84:e1:e8:fd:e4:24:f8:a2:d6:fa:d9:97:e8:55:55:d9:
7b:70:0a:76:46:ce:d5:bb:dd:06:eb:f2:57:e5:af:91:11:b5:
ce:a5:40:1c:19:4d:89:73:e4:b2:9c:9f:bd:a9:a0:f7:46:1e:
cc:e1:fc:3a:fd:6a:35:5f:ec:b1:3f:f8:2b:84:3e:3b:89:71:
b7:b1:8e:dd:27:08:1b:83:4a:a9:18:e4:7c:a9:52:07:80:30:
8a:ae:d1:43:33:8d:b3:d7:1d:fe:68:9a:f3:6c:c4:e6:0f:14:
70:23:0a:33:6a:9b:e7:d1:97:1c:dd:2e:60:fc:81:fe:95:fc:
cc:65:f4:06:af:57:f6:e3:7e:3a:cc:ed:ca:62:e2:d2:0e:03:
60:22:be:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:08 2024 by rpki-client on console-fra.rpki-client.org