Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer
File: WPrzkJq0BhAxSPPzL5Wnn43jXQ4.cer (raw, json)
Hash identifier: F8fG4Bv8ku6gMWR7V25KS3Kpo3sJtyUBi0GmpILSe4c=
Subject key identifier: 58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A946B057CF47F518A6B7ADC64C2BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.227.196.0/22
Validation: Failed, certificate revoked on Sun 05 Nov 2023 11:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:94:6b:05:7c:f4:7f:51:8a:6b:7a:dc:64:c2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58faf3909ab406103148f3f32f95a79f8de35d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:3b:6d:e8:82:46:dd:7f:92:57:75:67:9d:
76:f9:ce:fd:60:09:c8:bf:f1:67:36:56:2b:46:6a:
e4:4a:34:d3:ec:51:83:f6:8f:59:b2:e9:00:71:b6:
50:45:b3:9d:92:ed:d4:b4:f4:82:a3:dc:c3:33:b6:
86:a5:6e:9f:7a:cf:6b:80:7f:2c:34:4f:f9:48:0e:
c7:13:a9:30:3f:3c:82:d8:6d:b8:e3:fd:da:e0:6f:
91:1f:b8:10:fe:33:21:3a:f2:69:79:0f:ad:71:42:
63:9b:34:16:57:e2:e4:e5:3f:bc:fd:55:31:e6:96:
0a:3d:67:aa:a6:86:0a:9f:85:fe:aa:8b:5e:47:27:
12:55:08:4f:77:8d:91:0f:51:1a:ab:e8:5e:c5:3d:
55:85:27:b3:6b:4b:87:5f:46:88:01:a1:b3:59:ca:
e1:36:05:79:94:cc:04:2c:b2:5f:01:5d:ca:1a:de:
ba:02:6b:92:cc:a9:5a:a2:40:26:90:ef:bf:36:ae:
1c:ab:bb:8b:6b:f2:8d:39:be:d2:58:5f:45:b6:74:
2f:ef:9b:b7:43:ac:fd:f9:c7:01:33:08:c2:93:b9:
38:cc:51:1b:c3:0d:2a:28:03:ca:61:36:f6:35:7b:
c8:8d:f3:bd:a7:f7:ac:c1:9c:59:ca:1b:42:50:5e:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:F3:90:9A:B4:06:10:31:48:F3:F3:2F:95:A7:9F:8D:E3:5D:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ae7b9-3e56-4f89-bad6-6e1b0d6478c0/1/WPrzkJq0BhAxSPPzL5Wnn43jXQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.227.196.0/22
Signature Algorithm: sha256WithRSAEncryption
92:02:73:53:9c:29:0b:b1:a5:6e:9b:83:f6:34:a2:b0:65:ab:
c2:0f:fd:5a:71:08:ae:29:68:7d:8d:4e:ce:17:f2:d8:9e:0a:
1e:60:1c:28:b2:66:8b:d6:4b:d9:b1:58:1b:6b:1d:56:14:15:
f9:c7:70:1b:f8:e1:2b:c6:eb:ab:27:a0:8c:4c:50:46:d1:cd:
1e:f4:7d:ec:5b:44:3d:a5:c3:2d:0e:b2:c6:b3:8b:b9:9b:5b:
cc:7b:73:c0:c3:cc:c6:8d:76:c5:08:7b:7c:c1:57:5f:c8:b8:
0e:2c:b9:9d:9b:64:2b:16:3c:73:2b:f2:5c:62:e4:42:12:bd:
82:80:ad:db:4e:01:dd:9c:e3:79:71:d8:8d:12:26:38:23:fa:
15:0a:a1:38:23:c3:53:28:0d:ff:c1:74:d5:e1:bc:33:e2:7b:
94:03:a6:9a:1d:82:c9:fa:5c:64:c2:d7:ce:81:81:8e:ca:5e:
7b:97:67:d1:0f:f4:fa:d6:80:09:a7:aa:f7:d4:0a:ac:1d:3e:
87:7a:fa:08:72:86:e9:84:13:8a:92:2f:8d:04:03:1a:9b:05:
89:eb:04:32:3f:a4:18:c0:d2:56:1f:fc:35:6d:d2:21:55:82:
1e:c0:43:0b:98:e9:bd:7a:96:db:87:e7:88:6a:a5:92:76:1b:
ed:46:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-fra.rpki-client.org