Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer
File: Pw5J60UHCM9kdAuqjOLRmH0iyRU.cer (raw, json)
Hash identifier: AgBml3AVoO+tuu0Lp75eQd9pRX+7du6b5EhqhHGCXFA=
Subject key identifier: 3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AB1CB759E807832571767591FA7903AE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 20 Sep 2023 08:53:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.53.33.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:cb:75:9e:80:78:32:57:17:67:59:1f:a7:90:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 20 08:53:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f0e49eb450708cf64740baa8ce2d1987d22c915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:9d:aa:8d:33:43:93:fc:41:95:73:2d:0d:
ed:6f:26:76:43:32:1b:89:0d:40:33:b9:37:5c:38:
b3:95:4a:18:33:50:ab:b8:e9:78:f7:6a:be:7d:f9:
ee:bb:fc:01:b3:1f:ac:4a:5b:d8:de:f1:0f:62:42:
f7:0e:4c:e2:95:3b:8e:0a:ef:5f:80:73:5c:c7:48:
a5:98:d4:0b:85:3a:f5:93:65:f8:d2:21:e3:d9:52:
df:04:12:54:5b:81:2b:1e:bf:1a:82:a9:5e:b4:f6:
14:ba:72:86:67:27:ed:0d:d9:98:87:cf:81:61:de:
f9:50:71:4e:38:18:16:96:e8:9c:f5:ba:f6:0f:26:
6b:9f:07:35:b9:9b:1d:34:de:f8:d1:d9:99:8d:10:
8c:d8:8c:db:1e:7b:58:ab:35:bb:12:71:6c:ad:86:
cb:80:57:aa:f9:df:e6:f0:7d:2d:c6:4b:ee:1f:13:
8a:fb:4a:f9:5c:28:55:f5:20:f4:b1:89:a2:f8:33:
9e:fb:10:d9:87:46:22:ef:45:c4:9a:ae:31:06:cb:
98:84:58:c9:ad:9a:36:fd:c4:d5:be:3f:f2:68:ad:
55:10:19:e2:be:23:f3:78:d8:90:70:ac:dc:cb:b9:
a9:4e:f9:bd:20:9e:9e:f4:cd:a4:62:a0:d4:97:aa:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:49:EB:45:07:08:CF:64:74:0B:AA:8C:E2:D1:98:7D:22:C9:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/aefe47-30d7-4440-944a-5eb36b16c938/1/Pw5J60UHCM9kdAuqjOLRmH0iyRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d4:21:ef:6a:12:75:fe:5c:45:49:98:bc:55:53:4f:c7:2c:
85:6a:42:41:7a:9c:89:b6:56:35:d0:fd:dc:d9:40:78:a3:13:
88:2a:4c:d2:73:50:d5:ea:88:92:78:57:3b:21:f2:27:58:5c:
52:11:69:be:6c:c9:0b:14:54:22:60:0b:4b:4d:71:2f:86:3b:
00:c5:dc:e2:bf:7e:ab:60:7f:d1:2d:8a:af:dc:18:26:7f:17:
d5:2f:36:56:16:97:f3:f2:8b:de:1d:60:15:63:f6:0a:3e:75:
6b:e3:1b:a3:6b:87:bd:e6:7b:83:49:29:a6:6c:b0:05:38:7e:
ba:f3:bd:03:de:12:8b:e4:a2:f4:66:7f:37:cb:ed:3e:85:fe:
81:72:f9:57:6d:da:86:8a:74:fa:1c:d7:c2:a3:30:42:1e:fb:
a1:dc:f1:37:88:08:bb:85:5c:4d:22:68:7e:04:7b:7c:4b:ed:
f7:d1:82:a4:b7:9b:e6:18:00:ce:f3:3d:b4:bb:b3:0b:6a:36:
b4:fd:3b:6d:3c:5c:a2:5d:9a:f2:be:30:14:44:88:3b:08:95:
6d:1f:ad:09:91:aa:0a:32:f5:a4:bb:45:1f:c7:d1:e3:b1:2f:
86:f2:7c:c4:26:6a:11:9f:c9:57:b9:5e:fb:82:7c:5c:64:06:
c1:80:b1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 14:18:48 2023 by rpki-client on console-ams.rpki-client.org