Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
File: SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer (raw, json)
Hash identifier: Vtw580WS1bADSfgHRVV47I7LEEw+M04jPLgrR6i6HMg=
Subject key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAD8D9C9FE8A47A692C41AB62D6881
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.246.50.0/24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 13:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:d8:d9:c9:fe:8a:47:a6:92:c4:1a:b6:2d:68:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=496a77608f1f4472f6fc30273c5560e967caf273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dd:3d:bc:bd:63:40:c5:58:d2:24:4a:16:a3:
b7:d5:71:4b:b7:76:70:f9:98:6f:78:5e:a3:1a:74:
9e:74:54:35:1e:0e:1f:5c:df:72:91:41:27:d9:06:
17:cb:80:35:f0:09:fc:d7:10:ba:36:e2:58:49:ef:
b1:3e:69:eb:cb:cf:42:01:d5:b9:32:1f:85:1d:af:
c6:c3:1f:50:31:db:03:75:f3:69:af:02:b0:2d:85:
5c:c7:c1:04:33:e0:16:61:ab:16:3d:8f:98:d7:4e:
0e:05:d2:fa:24:b2:79:46:31:fd:de:e0:9f:b1:9b:
37:a2:45:7a:d8:d9:65:41:1e:0f:a9:7a:16:3f:11:
43:e5:84:80:0c:87:af:cf:35:93:05:26:21:82:a4:
d2:4e:69:9a:90:2c:b8:55:0a:83:b0:f9:cd:03:09:
aa:ca:43:0e:9d:0a:22:94:e5:40:3d:66:04:f0:95:
61:52:69:22:e1:9d:cb:f1:d0:70:47:a9:78:64:63:
24:31:eb:f5:94:dc:08:f7:b1:65:35:b6:85:18:78:
da:97:37:c1:17:69:fb:e6:41:15:19:f4:46:88:c0:
30:f8:21:27:3a:2b:1a:54:0d:7f:fa:9c:ef:c9:af:
46:56:c6:ca:f5:ac:c7:63:02:08:80:f6:ef:3a:98:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
76:01:aa:3f:a3:34:e9:9f:69:5a:d1:46:1c:ab:29:10:74:cd:
22:73:b1:64:4d:4f:48:0a:11:ac:11:6b:d6:ac:92:25:93:d4:
0d:a7:8f:b1:e1:8d:ea:1c:a2:c8:cf:2d:05:d9:da:f5:48:ef:
f2:e2:b5:1b:00:94:09:b4:b2:f9:25:13:45:10:cc:98:80:2e:
4b:38:99:c3:07:62:35:9d:c5:d0:63:ed:14:da:a4:f6:92:86:
60:de:85:85:32:af:f6:f0:c8:5a:bb:60:e7:23:c0:97:72:ba:
75:d2:8d:58:fc:ef:4a:68:4d:2a:2f:39:5f:aa:2c:fe:bb:67:
66:8a:a8:2f:4c:05:51:da:de:50:e8:c6:1e:da:b8:63:af:34:
7c:74:3b:db:7c:7d:ec:7c:e7:2c:e0:a4:d3:8e:ef:d5:cc:a9:
4e:74:08:93:93:45:6c:be:1d:ab:57:13:40:b7:d7:06:64:b3:
8d:9c:c2:aa:e8:34:19:c1:61:ed:a1:d7:b9:38:71:0e:53:68:
51:e6:09:3c:4b:f6:86:2c:67:f2:db:0c:c7:e0:95:46:1d:a5:
c5:3e:63:62:1b:d7:18:13:4a:60:a2:fc:03:9f:50:57:9f:24:
d5:e4:b8:da:d5:93:fd:ea:92:cf:b7:96:43:87:c3:d9:c2:ed:
ca:c4:a7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:45 2024 by rpki-client on console-fra.rpki-client.org