Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WaN3vGdxgxJknudXFahl9gP8acM.cer
File: WaN3vGdxgxJknudXFahl9gP8acM.cer (raw, json)
Hash identifier: uPLg0b/zE46srtRWL08WOOzmv30CauAvQbauBvmrauc=
Subject key identifier: 59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4247C4CB0BA62881AD2DF092A6DBB67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/WaN3vGdxgxJknudXFahl9gP8acM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.93.0/24
IP: 2a06:a740::/29
Validation: Failed, certificate revoked on Wed 06 Mar 2024 12:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:7c:4c:b0:ba:62:88:1a:d2:df:09:2a:6d:bb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a377bc67718312649ee75715a865f603fc69c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:e1:80:21:59:c6:43:4e:c9:57:2c:44:a4:
35:cb:93:ac:eb:23:75:21:d3:f5:82:da:b6:7f:cd:
43:e8:5e:72:0e:96:f3:82:59:ff:57:a2:8a:e6:4a:
99:e4:6a:b2:d4:47:fd:46:fc:22:81:79:20:80:b4:
d9:86:f6:03:85:80:e4:89:49:d6:2b:e7:75:86:39:
8a:13:bd:3b:d6:42:81:11:71:0e:42:b7:46:13:1c:
59:05:4a:8c:93:b5:15:3c:3c:c9:19:61:ee:6e:c2:
50:4e:7e:0c:04:e9:7d:49:77:ab:ac:c7:8c:13:bd:
e0:5f:6f:91:b7:b5:03:74:d1:1c:10:66:d9:b9:e4:
d0:46:0f:58:0c:16:4f:89:08:9d:fe:a7:b0:86:83:
64:dc:de:d2:ef:f5:66:79:f1:6e:10:a6:55:ba:81:
e2:d4:8a:e3:48:d5:a2:45:56:a3:57:8c:0f:8c:45:
ff:9f:c8:bc:a3:1e:6d:b7:9c:e2:d0:44:3d:e5:ae:
a0:bc:79:7b:14:12:0f:38:87:e1:6e:c5:54:d9:b4:
a5:a1:84:b6:45:77:c8:74:ce:da:82:ee:5b:fa:3e:
10:a2:75:1a:c4:c4:d5:22:c0:69:15:34:6a:a4:02:
89:73:47:e4:e6:93:78:ef:84:f0:42:03:6a:31:ee:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A3:77:BC:67:71:83:12:64:9E:E7:57:15:A8:65:F6:03:FC:69:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/890ae6-4bd7-4853-b1c3-0f232ca17246/1/WaN3vGdxgxJknudXFahl9gP8acM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.93.0/24
IPv6:
2a06:a740::/29
Signature Algorithm: sha256WithRSAEncryption
0d:67:21:4c:1c:75:ba:91:d8:1d:cb:8a:44:52:05:e7:9b:e6:
e1:d3:e3:b6:99:8a:06:72:7c:04:6b:49:a2:45:71:f4:19:35:
6b:47:7b:7e:94:4b:0d:54:d7:a3:c9:b7:d0:81:96:54:86:81:
7c:85:f5:fe:30:90:66:b7:db:de:44:f0:7e:33:cf:b0:b5:6f:
01:16:3a:3a:10:ed:29:05:b9:11:47:76:a7:62:bb:bc:db:11:
b0:f2:c2:26:25:60:f8:c5:9d:38:ca:1d:e6:d0:96:16:ed:b2:
26:da:57:b3:d1:6f:fc:df:6f:3a:1b:e9:1c:90:17:50:2d:35:
17:70:a1:4b:10:97:27:90:e8:02:0a:58:e0:63:b1:de:e1:81:
3e:e8:cb:90:c6:f6:1d:6a:6a:8a:62:18:33:de:78:a2:d4:bd:
bc:22:2b:e5:90:c2:b8:50:49:df:bf:01:ee:c1:14:a5:f7:50:
98:97:10:8e:44:d0:b2:1d:d3:bd:7d:49:ab:9b:aa:c7:e6:79:
83:f5:99:8c:33:81:54:17:7a:6a:3e:cd:2e:4f:b7:c8:92:af:
33:24:c5:2b:2a:a2:82:17:32:bc:6b:b8:e3:4c:cd:81:84:f6:
07:93:36:11:1b:e3:a0:52:c1:8e:71:4e:56:6d:43:99:0c:b1:
cc:55:7c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:43 2024 by rpki-client on console-fra.rpki-client.org