Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNyNOwxhTdPD8OsWySe3ypiXFNI.cer
File: XNyNOwxhTdPD8OsWySe3ypiXFNI.cer (raw, json)
Hash identifier: SMAoT6e2YilFWLG7JyGEhYR+noa8w1ujYjqNNwE5mVc=
Subject key identifier: 5C:DC:8D:3B:0C:61:4D:D3:C3:F0:EB:16:C9:27:B7:CA:98:97:14:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED4020F420479A9CDA824F254B1D2BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.16.78.0/24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 07:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:02:0f:42:04:79:a9:cd:a8:24:f2:54:b1:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cdc8d3b0c614dd3c3f0eb16c927b7ca989714d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:c3:ac:e5:89:7d:0a:99:c3:d2:ff:06:b3:
7e:47:36:9c:cb:98:24:17:29:1a:18:c5:32:1d:ee:
5f:81:69:78:f6:38:11:93:15:71:dc:54:d3:0b:75:
d0:c3:ea:55:c3:29:44:6f:40:c1:70:48:01:66:d1:
e2:bd:0d:e6:3e:9a:17:60:0b:43:43:3e:83:f1:8f:
41:12:13:a2:06:19:04:05:f5:cb:f8:80:d4:30:16:
32:50:0f:55:f4:c3:b9:33:04:8a:3c:cb:f0:85:11:
71:d2:9b:32:29:60:3c:2d:9d:d0:78:0b:ed:3c:45:
32:fc:70:40:63:4b:95:ad:15:e6:56:82:55:20:43:
d2:c6:98:86:5a:51:01:b0:90:98:17:b1:2e:26:b7:
4e:fb:7d:7d:b5:6c:26:79:5c:50:21:e6:d8:4d:37:
16:ff:2c:34:04:61:06:4a:b8:c7:18:d8:4e:59:b9:
c2:19:09:35:5b:ed:37:94:9b:92:e4:eb:2e:44:3e:
8a:f5:5c:7e:2e:65:04:85:0b:a8:ea:51:ea:42:95:
6a:7d:c7:ca:ff:6a:f6:7e:ee:47:f5:8a:72:28:0d:
2b:b2:6f:99:9e:35:68:d8:c5:b9:ab:b2:71:b8:6c:
e8:76:40:22:3e:08:84:6b:85:58:3b:55:d3:02:70:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DC:8D:3B:0C:61:4D:D3:C3:F0:EB:16:C9:27:B7:CA:98:97:14:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/fcc58b-e615-4dc9-9150-fd8c36b6bc00/1/XNyNOwxhTdPD8OsWySe3ypiXFNI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.78.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f1:c0:24:2e:1b:ff:53:c3:b0:c4:08:b4:b0:2d:91:a0:fa:
08:7a:79:af:e4:23:f4:68:b6:7e:b5:81:95:a7:17:29:d3:da:
6d:da:35:0f:7a:4d:8d:9d:fe:94:f3:79:d4:82:87:2e:43:6e:
74:bc:14:81:6c:33:ce:d1:fc:a8:22:2b:44:a6:7d:26:19:1a:
2e:54:45:54:49:0a:3a:88:36:e9:dd:1f:b5:f1:fd:70:d4:5a:
45:e3:f9:e2:66:77:8b:2b:ba:75:97:ed:a7:6a:ef:2d:70:f2:
e6:bd:f4:11:5e:b7:19:3b:0a:0b:d9:2a:73:41:02:aa:40:30:
86:10:ed:85:ea:74:33:21:a9:f0:b7:97:b4:de:83:68:e6:a5:
40:e4:37:d8:44:3c:de:0d:9f:7c:1b:ae:f9:89:52:ad:5c:c0:
b7:ee:70:8d:3a:0e:ef:73:90:b9:1b:9b:09:20:71:70:46:f4:
6d:5e:e0:4a:d5:fa:6d:10:1e:75:92:ee:3d:e6:7e:6d:f0:2a:
25:46:da:3c:78:1e:79:f7:cf:9a:5a:64:0b:d9:83:5b:60:72:
7f:b5:95:16:24:b3:0b:b3:35:34:90:b6:0b:45:e1:09:7d:95:
a0:1a:82:da:e3:fe:a1:79:89:01:6d:10:b3:2d:bb:8a:13:d9:
a0:04:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:30 2024 by rpki-client on console-ams.rpki-client.org