Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YvRQuCdCOClOP55W0CWQfxAi56Q.cer
File: YvRQuCdCOClOP55W0CWQfxAi56Q.cer (raw, json)
Hash identifier: vePH7dG2J87eVRy6UtwB3lOLBY6spq6mjvnV1ghB7rk=
Subject key identifier: 62:F4:50:B8:27:42:38:29:4E:3F:9E:56:D0:25:90:7F:10:22:E7:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD13C7A962AFD5CD3D5808EA6106A18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/YvRQuCdCOClOP55W0CWQfxAi56Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.148.156.0/22
Validation: Failed, certificate revoked on Tue 14 Nov 2023 12:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:3c:7a:96:2a:fd:5c:d3:d5:80:8e:a6:10:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62f450b8274238294e3f9e56d025907f1022e7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:b6:47:af:65:b4:62:39:a1:4c:de:78:d1:
e7:6f:86:ef:de:d2:1a:cc:97:2a:c5:5d:e7:4a:dd:
f3:c7:f1:7e:01:a8:d7:5a:dd:48:57:49:09:08:c8:
c8:d9:20:35:84:e0:d8:34:98:f9:fc:a9:60:98:3c:
f0:c2:3e:f1:00:97:3d:87:77:29:84:44:f8:a1:5d:
30:52:17:14:0a:29:88:ea:43:fd:80:69:90:25:93:
2a:4a:36:33:69:20:dc:07:6e:1e:7e:d5:83:80:36:
96:d9:b1:0f:2a:19:de:4d:99:8e:6a:bf:de:a9:84:
e5:72:fd:09:d2:c5:e0:94:b7:22:be:de:48:d7:98:
6e:a6:d6:d8:dc:ae:be:64:06:35:c5:2a:da:11:4c:
38:b8:a0:20:e2:8e:76:11:83:69:97:f9:08:7a:7b:
00:25:2d:31:8a:d1:be:ad:eb:93:96:1f:93:23:36:
cd:9a:a6:93:95:d6:7d:1a:6b:fc:2d:df:5f:86:ac:
ba:5d:30:3c:5e:a1:62:4d:df:d5:89:26:b6:62:81:
70:93:ce:a0:e6:94:a3:e3:bf:85:8a:09:c4:65:ab:
69:91:e5:0d:c0:38:9a:fc:b6:95:ed:32:50:55:5d:
2b:bf:6b:77:54:98:63:84:e3:9d:c4:fc:58:e5:f2:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F4:50:B8:27:42:38:29:4E:3F:9E:56:D0:25:90:7F:10:22:E7:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/63ea5c-fc32-4d0b-b75b-8e6519599bc0/1/YvRQuCdCOClOP55W0CWQfxAi56Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.156.0/22
Signature Algorithm: sha256WithRSAEncryption
92:45:e0:c1:d6:d0:a3:7f:ad:03:c3:92:3b:71:7c:ec:f5:ce:
a2:e1:22:6f:8c:03:23:86:41:4d:9c:7c:85:df:d6:44:7a:4a:
ac:8f:42:98:c2:75:9d:91:72:d0:fd:b2:f3:57:83:f7:ba:ab:
2d:30:ab:3f:d2:71:37:f6:fb:bd:db:e0:e5:c0:2f:c2:e6:4a:
95:3a:02:e8:e8:78:1f:ae:de:9f:43:db:06:8a:5d:82:09:43:
a4:b8:6a:d6:d5:aa:eb:8e:e9:79:a3:a6:e2:d2:42:5b:4c:a8:
4c:56:60:74:1c:60:f7:b4:fe:75:cc:11:ff:c9:f2:d3:c3:7c:
36:60:d0:6a:7f:9c:2a:8e:f1:d3:85:1d:df:a5:49:e3:9e:fb:
89:47:b5:94:85:6d:70:b2:1e:86:72:2d:04:21:87:dc:45:5f:
1b:57:7a:d8:58:a7:6a:8f:8e:1c:01:fb:07:70:aa:b2:34:05:
99:48:9b:4a:e7:96:6e:f1:18:b7:44:fd:ca:d8:53:7f:33:c3:
22:a3:07:3f:4a:57:33:bb:e5:78:c8:91:9b:8c:b5:08:fb:cf:
f3:d9:1a:eb:db:90:85:be:07:92:64:1e:ff:95:ae:11:de:63:
0e:00:6b:05:81:51:d1:22:86:bf:59:4e:e6:04:16:98:02:20:
dc:0a:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:16 2024 by rpki-client on console-fra.rpki-client.org