Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
File: RAzmhNVwHdsComtV4p6sn-gE3to.cer (raw, json)
Hash identifier: b+q2XNjsz/Ldw+VQRkyf9H3Bqv+Tp8gwMdtsZY6UqcY=
Subject key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4922F7A27A95FE9614703F1A577B344
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 94.103.176.0/24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 07:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:2f:7a:27:a9:5f:e9:61:47:03:f1:a5:77:b3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:65:5d:7b:e6:bd:81:91:91:cc:62:a0:e8:86:
ae:29:3a:0f:9a:51:d7:d3:15:65:cc:0e:e3:2d:3f:
65:ed:8c:c8:8e:0c:50:7f:de:b9:cc:61:30:82:43:
f8:82:4a:0d:41:9e:da:c9:72:b2:3f:15:01:c2:1d:
9b:e4:6e:0c:0f:0f:b7:05:42:96:b9:88:46:d7:e7:
89:a0:86:02:b0:b0:44:aa:96:db:e4:11:2f:b3:4e:
13:4d:97:ec:2a:a8:e7:c0:03:c5:9d:66:58:50:ea:
21:96:c1:a4:f2:57:fd:92:52:0d:db:a9:39:ea:56:
5a:cc:07:d7:7b:2a:db:ea:7a:75:5b:39:90:83:8b:
a2:b6:1d:6c:2e:a7:72:2b:7e:19:01:40:8f:92:68:
97:0b:b9:77:1d:5a:be:55:54:e4:f6:89:f1:2b:ab:
96:7e:39:8c:0a:75:85:7d:ce:2a:56:b7:f6:bd:f0:
e3:26:7c:18:fb:43:f2:95:48:5c:87:6b:4a:08:c1:
b3:91:28:6a:a2:7c:ac:9a:ec:86:38:a2:67:7c:19:
28:01:65:61:56:69:08:85:7a:c5:a6:e4:d0:f8:4d:
a6:0a:f6:68:e6:34:21:14:c8:86:d5:06:c1:7b:d2:
d1:6f:dc:bf:92:b8:ed:2b:28:f7:cb:35:ee:cb:44:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.176.0/24
Signature Algorithm: sha256WithRSAEncryption
89:58:ee:e2:ba:64:45:9f:74:57:0d:c8:d9:d5:2d:1f:84:1a:
d4:8d:dc:4d:dd:df:db:fe:3f:f6:db:3f:43:26:2e:bb:a4:5d:
1c:98:cf:51:ad:d7:45:c6:76:31:f7:95:6e:a1:a5:3c:fa:c7:
cb:db:b6:86:58:f1:65:72:5e:a2:2d:e3:7e:a2:43:b7:85:37:
e8:f1:d2:68:9d:7b:6a:b8:3c:22:93:a8:75:d1:a6:35:93:38:
56:1f:76:72:04:6f:04:be:a4:22:b1:2e:96:e5:bd:e3:ff:a6:
34:d0:e1:fc:7c:96:e9:b3:95:27:e5:4d:16:20:32:20:16:ca:
62:d7:0d:ca:5c:a4:1f:86:de:e2:a2:2d:3b:2e:49:66:6c:cc:
3c:ce:ee:dc:ef:29:45:a4:20:ca:3f:45:8b:0e:20:a5:74:f1:
2f:41:32:8f:3d:05:f7:08:75:9e:eb:fa:44:f6:e0:d2:2e:8a:
f8:20:45:82:a4:72:f6:91:a0:b5:32:44:2e:32:57:67:be:22:
73:d2:af:88:e5:bb:40:07:87:16:6b:03:00:2d:5d:24:ec:94:
80:85:01:b4:b7:1a:cc:75:13:56:6d:63:06:a9:6c:f9:17:bf:
0b:ca:38:cc:7b:ad:58:96:16:f9:c4:44:14:6b:c0:74:f9:5e:
45:31:9e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 12:38:58 2024 by rpki-client on console-ams.rpki-client.org