Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-AcidaPf97cLd-yVTRZzIy9vOg.cer
File: R-AcidaPf97cLd-yVTRZzIy9vOg.cer (raw, json)
Hash identifier: hzijqK/1sx2WLVlW3G05AJ3PJEy+6m9etuPFsGPxZAc=
Subject key identifier: 47:E0:1C:89:D6:8F:7F:DE:DC:2D:DF:B2:55:34:59:CC:8C:BD:BC:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E0891911EBEBD9DE5993C39953507
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/R-AcidaPf97cLd-yVTRZzIy9vOg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:34:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.38.0/24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 09:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:08:91:91:1e:be:bd:9d:e5:99:3c:39:95:35:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47e01c89d68f7fdedc2ddfb2553459cc8cbdbce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:32:e5:2b:b1:78:39:0f:34:6d:7f:53:a9:
05:3b:ec:88:cb:e4:9b:a2:2d:1e:40:a4:b8:e8:7b:
33:5d:37:4f:69:fa:1c:2b:47:a2:6f:17:61:b5:bd:
1d:48:78:f9:99:aa:a9:68:21:b5:b6:83:c0:1d:e5:
ed:df:34:cd:ce:50:bb:f7:d6:e5:1d:7b:c1:8e:77:
e2:c2:a5:da:af:cd:46:0a:d0:10:1f:11:0c:20:52:
c8:dd:5e:7b:5d:5c:96:06:10:59:ee:a9:d4:67:ae:
24:04:52:38:8d:ec:d2:47:53:49:3c:98:87:1e:67:
42:09:0a:5f:ba:70:9f:b6:16:3a:88:87:c3:b0:d0:
ad:db:82:3d:0c:1f:8c:26:79:17:cc:b1:50:a8:51:
69:4d:b9:4d:15:d2:b6:08:4c:d3:8a:6b:ee:d4:6c:
c3:af:80:12:93:71:32:8e:f4:2d:fc:3d:8d:16:93:
1c:01:90:52:39:d3:d0:bd:0c:fc:72:70:dc:0c:cd:
f6:61:d2:0e:42:e0:19:c5:69:8e:a5:41:60:96:be:
cc:aa:81:8b:bc:f1:96:86:22:5c:5c:9e:6b:84:26:
23:19:34:16:e8:75:3c:0d:07:92:30:54:f1:f9:f7:
8d:5e:fd:41:6d:f7:e5:85:fa:0b:35:df:9b:35:2c:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:1C:89:D6:8F:7F:DE:DC:2D:DF:B2:55:34:59:CC:8C:BD:BC:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c7888-e713-493c-ad83-480d4502f501/1/R-AcidaPf97cLd-yVTRZzIy9vOg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.38.0/24
Signature Algorithm: sha256WithRSAEncryption
16:74:5e:81:a2:8f:70:8d:b0:89:38:a0:96:ef:57:c2:24:c5:
d4:28:7c:2d:72:3c:ec:58:c1:60:24:ff:d9:f5:64:2c:8d:c5:
42:39:39:ee:65:53:3a:69:bd:61:c8:b7:c8:61:0d:20:d6:df:
0f:eb:89:91:3f:0c:72:c1:1a:c5:4e:cd:43:e9:7d:90:fc:d2:
37:fe:26:a2:f5:cb:47:55:0c:8d:cc:a1:8a:57:d9:57:ff:16:
75:44:5c:fe:6d:11:19:31:b9:55:d1:7b:9d:60:41:58:91:e9:
47:3f:c5:39:9f:5a:e1:54:fc:a5:81:8b:c2:04:d1:6f:5b:13:
00:04:b3:16:12:ee:71:80:af:db:5f:be:37:c7:7c:e5:ff:d5:
58:40:ec:2f:a4:ef:a5:07:74:82:c1:61:03:67:b2:9b:66:a0:
c3:7e:47:53:63:1d:f4:da:9f:eb:32:b6:98:cf:29:d1:e1:de:
37:28:94:60:4f:c1:93:4a:1a:ff:f2:2a:8a:e5:2f:be:4f:a1:
f7:97:4b:df:22:1f:86:36:d5:f9:1c:af:68:97:a0:3f:2a:2e:
3d:70:75:eb:3a:3d:0c:98:7f:da:70:dc:29:db:15:7e:15:3d:
81:0d:4e:94:9c:89:7c:2b:97:a9:fe:ff:10:58:31:55:1b:03:
25:82:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:22 2024 by rpki-client on console-fra.rpki-client.org