Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.cer
File: VCGCxhFDmVSmi6eQ8B8DWLTTDc4.cer (raw, json)
Hash identifier: unaBwFdIQo+WxZEVZ1Xj6l7lo5/eI1M5mMMwfxJXMiI=
Subject key identifier: 54:21:82:C6:11:43:99:54:A6:8B:A7:90:F0:1F:03:58:B4:D3:0D:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C8C185B6B27BCFBB6A784340FDEBCDC22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 21 Dec 2023 11:17:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211239
IP: 45.89.23.0/24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 12:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:18:5b:6b:27:bc:fb:b6:a7:84:34:0f:de:bc:dc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 21 11:17:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=542182c611439954a68ba790f01f0358b4d30dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:b7:11:21:72:06:2b:c1:2e:37:05:7f:7d:
04:ef:09:ea:28:db:dd:19:93:a1:97:dc:22:99:3a:
53:f4:4f:4e:30:0d:a1:aa:ac:db:17:2b:1c:24:a2:
ec:38:f6:c2:cf:e9:48:78:df:5e:e4:cc:b3:09:ba:
c5:cb:75:72:f6:5f:5f:45:da:1b:03:a7:f6:b8:34:
41:2b:d7:e0:bb:8c:7b:3f:38:9d:94:bd:0f:ed:f6:
99:f8:e8:a8:8e:a9:69:74:34:a7:c6:ea:46:03:54:
46:45:5e:76:27:dc:64:8e:e4:a8:ab:b8:d1:77:ef:
07:1f:0d:ea:8f:04:07:db:6b:a7:42:33:4a:89:03:
38:07:66:ce:25:73:19:1d:99:65:df:70:4f:e2:fb:
75:e7:5e:bd:ce:07:bd:44:95:36:9a:d6:ce:de:3a:
aa:5c:82:0e:7a:88:0b:1d:56:39:30:35:41:b9:83:
94:20:98:fb:9f:2b:18:76:be:2e:87:bd:5a:41:60:
db:ec:c9:05:cd:a2:62:30:9f:fd:2e:bc:d1:b2:1c:
e3:e3:4d:4f:6d:89:b1:77:00:6a:52:82:94:2b:a4:
3d:86:00:c9:49:17:7d:4b:d8:ce:80:4d:cc:be:23:
69:48:d4:63:41:ca:9a:c7:eb:9c:45:1f:ca:fd:22:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:21:82:C6:11:43:99:54:A6:8B:A7:90:F0:1F:03:58:B4:D3:0D:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.23.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211239
Signature Algorithm: sha256WithRSAEncryption
6f:8f:9d:13:90:b9:53:d1:29:45:92:f7:2c:16:d9:95:eb:25:
58:2e:ff:72:87:30:0b:4d:3d:9f:55:61:34:8a:cb:54:b9:6b:
80:91:df:be:20:f6:da:22:f4:d7:30:2a:0d:e8:8e:bb:f2:52:
9b:86:f7:12:43:e3:fa:17:e3:ad:67:02:3e:ae:0f:6c:1e:e3:
60:a6:31:87:6f:7a:81:15:6d:2a:fd:db:61:96:03:f1:24:7f:
66:ea:cd:b9:e9:a7:dd:f2:24:d5:6c:3e:de:27:be:1d:da:fe:
ac:22:3b:0b:92:aa:99:32:f3:53:f3:be:6f:f9:e3:4c:56:9e:
30:eb:b5:2f:a4:43:ac:e1:f4:92:82:8d:7e:e9:8e:a8:90:c4:
71:19:d6:3d:d4:bb:f4:77:65:42:ab:1d:92:90:a7:d8:a3:ef:
0d:dc:7d:a2:16:c0:f2:9e:8f:72:29:f3:9b:db:e1:00:4e:4c:
9e:94:29:27:cd:62:2b:3c:f2:25:d9:d2:3f:1e:dc:06:6b:2e:
dc:6b:f1:9a:0b:e8:a7:17:04:32:9d:63:cf:09:4d:bd:32:ec:
3f:c8:65:ff:ec:db:c1:b3:f4:cf:8a:9d:7d:df:95:48:2c:8c:
12:81:58:ed:95:2e:b7:3b:74:2d:04:98:26:e1:44:96:3a:1d:
00:2a:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:23 2024 by rpki-client on console-fra.rpki-client.org