Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-wtXndpiXodG4BRozalYteuiZs.cer
File: V-wtXndpiXodG4BRozalYteuiZs.cer (raw, json)
Hash identifier: tjdW92itMgErmXTCBcylT0qbFNKf6vBXMzvMxgSlpC8=
Subject key identifier: 57:EC:2D:5E:77:69:89:7A:1D:1B:80:51:A3:36:A5:62:D7:AE:89:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD12E7C03AABF35749CD2CA7AB5DA4C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/V-wtXndpiXodG4BRozalYteuiZs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.27.0/24
IP: 2a12:2d00::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:2e:7c:03:aa:bf:35:74:9c:d2:ca:7a:b5:da:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57ec2d5e7769897a1d1b8051a336a562d7ae899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:14:2c:35:72:a1:80:b6:e9:e0:dd:59:36:00:
e4:12:ad:d0:1b:64:a6:ef:25:3b:14:c1:9d:8c:7f:
4d:9a:93:f8:8c:14:fe:10:34:dc:7f:c2:bf:de:ec:
f9:9d:c2:d2:91:8e:c1:92:76:80:3c:f2:3d:36:38:
07:22:de:30:e1:86:94:8c:ca:ff:ad:c6:e2:44:18:
6d:c2:eb:50:0a:24:8f:4c:b5:08:45:b6:6d:40:a5:
5e:63:c9:75:4f:cf:00:37:c5:ca:cf:f5:e6:92:38:
fd:1d:b7:b1:92:50:8f:eb:51:7a:c5:87:50:22:2b:
32:d6:2f:da:17:88:32:71:04:ba:a8:fe:c8:64:39:
be:b1:32:77:29:96:71:60:06:dd:85:16:64:fc:f8:
98:60:a9:a8:73:c9:b3:f2:79:8f:63:d1:1d:62:3f:
b9:af:3d:53:9c:2c:d7:58:f6:96:cf:b3:a9:44:aa:
44:5e:4a:76:01:70:97:ec:a1:49:3f:44:d4:2a:2d:
3e:8f:13:91:c0:96:8f:4a:31:09:e7:31:24:0e:b2:
97:e2:b4:d7:6f:5c:33:c6:24:2f:d2:02:73:2b:c1:
1e:0c:f0:e8:70:82:b5:6b:4d:62:65:44:d7:2b:57:
76:5d:39:99:07:75:3a:52:85:d9:bf:e5:43:73:65:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:2D:5E:77:69:89:7A:1D:1B:80:51:A3:36:A5:62:D7:AE:89:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/523d18-ee1b-4e6d-98a7-89c41f2bec16/1/V-wtXndpiXodG4BRozalYteuiZs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.27.0/24
IPv6:
2a12:2d00::/29
Signature Algorithm: sha256WithRSAEncryption
02:0f:8b:88:01:71:70:ec:33:f1:9b:83:c8:88:1f:0d:cc:f5:
8f:93:88:e5:a3:af:49:8d:9e:74:54:35:b2:37:ee:c3:ad:85:
66:60:43:c4:9f:af:fa:8a:cc:ce:99:60:e0:45:5f:7c:20:9f:
da:7a:8f:97:90:d7:81:2b:49:a9:df:94:a2:9d:68:6f:e5:ae:
69:90:b7:ca:d8:6c:e5:cd:2b:fc:38:ce:58:55:d0:7d:4e:e5:
f9:cb:ad:af:47:57:c0:4c:ed:1e:fc:75:52:9e:1a:ac:17:ab:
89:50:63:a8:e2:80:32:a7:83:23:23:fd:ca:50:88:a0:0f:1d:
6b:e9:18:1e:9d:7e:7d:be:1b:35:36:58:9c:99:e2:f6:5c:85:
ac:9d:79:76:4e:d1:f6:0f:66:6e:0c:f0:81:70:18:0a:b1:0f:
8c:ca:91:40:75:0f:f9:e2:a3:02:05:e9:38:cc:4a:04:16:b6:
fe:cb:d7:d2:f7:38:52:76:a1:4b:70:9e:1c:e5:9d:ca:34:28:
83:f9:47:55:e3:e7:65:67:29:bc:ee:f7:35:e8:fe:ea:9a:e0:
9c:50:1e:db:38:e3:2d:0d:0d:56:a4:3d:97:8f:95:7d:94:50:
53:ff:5d:3c:fb:8e:25:de:7f:56:60:20:4b:53:9b:7f:b1:6e:
a0:ac:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:20 2024 by rpki-client on console-fra.rpki-client.org