Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/STN38L1GdUjaTM1UIymnFWuJcqI.cer
File: STN38L1GdUjaTM1UIymnFWuJcqI.cer (raw, json)
Hash identifier: cHxKOEQNN0IEOHn5SzhT0d95Lx6v3VIPnwrBZpCOfvU=
Subject key identifier: 49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887CE25C5981B301D009FFCF2573F71A8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 16:13:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.23.0/24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 14:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:e2:5c:59:81:b3:01:d0:09:ff:cf:25:73:f7:1a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 16:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=493377f0bd467548da4ccd542329a7156b8972a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b9:7f:e3:d1:10:a3:dd:1a:1c:73:9c:ea:05:
89:3c:ed:6a:43:e2:d8:ce:6c:04:cb:7e:2f:a8:cb:
e3:bf:3d:97:9c:8e:e9:af:1a:6e:6d:f2:d7:67:3f:
91:07:8c:ec:e8:cd:24:0f:4c:ba:85:f9:e7:aa:61:
65:1f:ef:4d:ed:06:b6:71:7d:f1:a1:20:67:70:41:
67:59:3b:66:b8:dd:09:c4:a4:9e:94:ca:45:01:df:
7c:e9:42:22:a3:3a:a6:22:bc:85:69:84:3d:92:58:
58:de:ad:82:73:f3:5e:05:62:97:97:b0:9e:d3:8a:
e0:54:66:f5:9b:9e:1e:79:66:2a:7b:64:d9:d0:16:
05:31:1f:56:85:b5:f7:70:84:f7:75:73:a2:d0:74:
c5:06:4f:d6:f8:07:d5:76:2a:07:67:93:dc:a7:98:
84:22:de:bc:f5:2d:da:d7:c0:8a:50:5a:47:17:08:
f9:50:ef:92:3b:e8:5d:ca:f7:4f:81:66:b6:a3:0d:
fc:5e:2d:d0:d2:fe:d5:95:da:c0:f7:4d:39:0b:f0:
20:a3:86:d2:1a:b9:5d:76:59:59:36:3a:2d:60:98:
3d:d1:3e:cd:3a:6d:cd:49:f3:1b:af:45:07:b4:87:
a2:ab:42:59:48:bf:28:a5:de:f0:3f:8d:6f:14:48:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:33:77:F0:BD:46:75:48:DA:4C:CD:54:23:29:A7:15:6B:89:72:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a23f781f-5185-434f-94a0-867238fab201/0/493377F0BD467548DA4CCD542329A7156B8972A2.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:38:32:8d:92:0a:ae:a9:9b:cc:74:c2:b2:07:3e:9f:9f:d0:
2a:00:3a:a0:5a:43:24:e0:8d:7f:f6:90:99:cb:ba:73:35:c2:
6f:c7:af:c8:b0:54:f7:d5:c4:66:60:b3:a6:a1:94:e7:ce:25:
62:01:c1:89:36:84:f8:1f:73:dd:c6:1c:fa:59:e0:33:a7:89:
9f:f8:4e:de:18:bd:92:b7:64:24:a0:8d:ba:ee:27:97:72:de:
10:d7:b1:d1:d7:01:4c:4b:5a:29:11:ed:36:3c:e5:84:14:71:
f2:ad:aa:ac:27:b7:90:8c:c1:38:0a:33:b9:8a:76:72:e6:be:
58:f1:93:42:14:5b:f9:3f:06:63:74:02:f8:ab:bd:b5:94:fa:
ec:d9:e3:ec:86:e8:ac:a7:fe:b5:0c:62:a0:d0:e7:ac:85:81:
e7:ae:34:61:e9:04:07:a5:56:c0:5b:5f:9c:bb:32:30:fd:29:
01:88:e1:50:f1:1c:f7:f0:a3:c0:0f:49:99:f6:19:e9:4d:2b:
dd:07:cc:b6:b7:66:38:31:46:d9:70:e6:f5:c8:5c:bf:41:a7:
f0:96:42:4c:ab:4c:61:ce:49:be:3c:e9:4b:87:77:11:1f:0c:
97:90:cb:ae:0b:04:89:93:97:50:83:dc:11:22:00:b7:25:dc:
11:44:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:44 2024 by rpki-client on console-fra.rpki-client.org