Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_t94AnF5fziOCFYeW1PlJZ2SyGo.cer
File: _t94AnF5fziOCFYeW1PlJZ2SyGo.cer (raw, json)
Hash identifier: SagMFYVAjPor53iCIqUgbbDZA1AzooPfEG0IwVkTLEo=
Subject key identifier: FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887C16C12013FAA7A699AB1633BFDCF00F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 12:30:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.18.0/24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 06:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:16:c1:20:13:fa:a7:a6:99:ab:16:33:bf:dc:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 12:30:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fedf780271797f388e08561e5b53e5259d92c86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:8c:ea:93:3a:9b:26:46:12:22:6a:42:be:
7d:30:ce:ce:99:7f:3c:4b:e6:42:43:c4:b4:2d:38:
fd:7c:53:c6:c6:bf:26:5b:61:37:e5:81:06:ae:2f:
34:32:60:32:cc:22:17:68:e1:27:bd:8a:dd:ec:1c:
6b:5d:02:0a:21:4a:9a:3b:fe:60:b4:a9:f2:1a:56:
7c:d1:53:ed:8c:ec:80:93:21:15:69:a7:d6:a9:f2:
3f:3a:43:3f:49:e6:aa:f3:9a:e3:53:1b:c0:6b:26:
06:7b:e9:62:aa:7c:7b:68:74:ae:1b:8d:60:75:2b:
59:8a:cf:e0:40:a9:15:d1:59:94:ce:c4:94:7b:ed:
69:13:c7:e6:58:d0:04:a6:27:99:c6:0d:cf:be:3d:
11:fd:74:56:58:d6:7e:11:61:5e:ee:e6:cf:e8:03:
0e:56:fe:72:2d:32:70:ad:19:fa:30:2d:a1:da:e2:
70:e8:ac:6c:29:b6:8e:ac:c1:f3:71:f4:79:1e:3c:
99:b4:4d:c5:bd:a8:85:06:9b:96:57:27:a4:1a:98:
29:54:c9:35:84:08:19:03:21:0d:5b:de:f2:b5:46:
a5:4d:5c:46:ae:7e:2d:5b:32:aa:2f:82:96:9e:68:
61:4f:06:52:0c:d0:30:a4:b6:e6:91:cb:47:23:b1:
f4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:78:02:71:79:7F:38:8E:08:56:1E:5B:53:E5:25:9D:92:C8:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3a77c937-930c-4135-b179-7002fb166676/0/FEDF780271797F388E08561E5B53E5259D92C86A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.18.0/24
Signature Algorithm: sha256WithRSAEncryption
03:cb:b1:56:1c:08:38:c3:bb:1e:8c:f6:a3:51:68:1c:a0:ca:
97:12:5c:a2:b9:d7:74:24:82:8d:17:48:69:18:d8:96:b4:9d:
fb:57:66:40:4f:c2:a3:fd:cb:0b:02:ff:59:0a:e6:67:62:32:
53:9e:33:6c:7a:67:3a:d7:72:7f:bf:30:c8:8d:df:6e:bc:5d:
78:00:66:ec:07:af:f4:f2:83:af:c3:ac:bd:a0:f1:ca:77:3f:
37:48:5c:74:13:cc:93:3b:63:62:2d:fc:81:36:9c:16:2b:50:
d3:12:52:42:37:6f:d0:8f:da:21:94:4c:5b:10:87:8c:aa:15:
75:86:0b:a0:46:c9:3a:39:8d:b2:62:aa:b9:58:f9:c7:35:ce:
e3:ea:1d:40:ed:66:c1:8b:fb:f6:cb:2c:87:72:fd:9a:6f:47:
35:a3:36:a2:bf:9d:e4:74:fb:c9:5f:98:02:47:ca:37:1f:5c:
eb:60:26:14:52:51:f3:46:6d:e6:6d:8e:ec:68:30:f7:17:8a:
5f:31:09:15:d5:da:9b:71:d5:1f:f3:df:a2:bf:62:70:92:5a:
20:f0:9c:dd:51:b6:dd:de:44:2d:0c:06:de:1c:52:d6:03:54:
0b:cf:f8:1d:a7:58:bd:6f:a0:b4:e9:f7:98:5d:16:e1:28:c8:
1e:c1:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:40 2024 by rpki-client on console-ams.rpki-client.org