Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer
File: c5pzWPcwOaHaiGXvLy_2-fyZ_zg.cer (raw, json)
Hash identifier: MjnVs/rA1Qtd/RcVqETKBuAvo0aqG8nkDkNvyrIMAak=
Subject key identifier: 73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4D5C38EDAD4F4B76E1E9E4E33D36A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.72.142.0/24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 13:20:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:d5:c3:8e:da:d4:f4:b7:6e:1e:9e:4e:33:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739a7358f73039a1da8865ef2f2ff6f9fc99ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:7b:e1:cd:41:b2:60:3e:33:70:0b:c6:2c:
c2:79:5c:4d:2b:7a:09:93:d4:c9:31:2e:2f:3c:88:
96:2b:fc:e3:97:ac:b4:3b:08:f5:15:84:8f:26:d4:
a2:2a:1a:07:4c:4b:0a:18:43:36:57:d0:ce:b5:2b:
13:d1:43:2a:ac:73:ab:d5:04:fe:83:20:a0:87:4f:
44:8b:9b:29:45:75:df:91:76:56:66:9b:93:5c:dc:
2b:fe:99:4d:be:2b:e6:5d:93:37:8e:c2:a5:a1:92:
42:b0:8b:ec:2c:e8:85:b7:08:c6:a6:45:8d:da:28:
1e:ed:b2:84:2f:89:bd:d2:f0:5a:c9:d8:00:f2:71:
aa:d0:50:36:fe:b7:5e:55:2c:1c:63:69:d7:0b:5c:
67:23:cf:59:3e:cb:05:a3:c7:e9:eb:57:59:3e:69:
f8:8c:37:77:ba:f0:21:c0:4e:cf:5a:02:27:19:04:
1c:c0:a0:48:cd:47:c7:d9:61:ca:7d:fa:1e:92:94:
5e:38:1d:66:14:4e:0a:97:0d:1e:32:ec:0e:dd:61:
42:6b:4b:52:ba:e4:71:0f:25:f9:10:2d:6f:65:fd:
08:6d:32:e1:a1:10:17:28:17:1a:ce:e7:8e:5f:41:
b1:59:a6:25:b8:06:d1:00:ee:14:f4:5c:d5:a1:b1:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:73:58:F7:30:39:A1:DA:88:65:EF:2F:2F:F6:F9:FC:99:FF:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4514ee-3dab-49fe-8577-3c8efcfc14f6/1/c5pzWPcwOaHaiGXvLy_2-fyZ_zg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:25:5b:84:d0:f2:5b:b7:04:0d:26:66:61:3c:b8:2a:6e:b5:
86:aa:e5:02:c3:f8:4d:92:30:0a:24:06:1d:40:de:20:6e:f5:
95:0d:0d:40:98:ce:f9:74:88:6b:5a:98:53:b5:75:8c:98:af:
04:c1:be:ea:25:11:45:ae:b4:98:5d:ba:ac:e8:3f:20:dc:47:
15:40:41:4a:92:d9:ed:1a:dd:0d:53:73:7c:2b:50:f9:53:a4:
82:0b:70:04:8c:f4:18:03:d2:fc:e9:f0:6a:92:86:a3:00:f4:
a1:6d:23:22:77:19:83:39:59:c2:52:69:16:f1:19:a5:d6:f2:
03:44:df:c0:26:76:ce:bb:51:7c:ea:02:5f:6d:6d:d9:31:9c:
fc:1c:30:62:64:fd:8c:83:9a:7d:68:bd:75:4f:3e:ca:35:cd:
9b:5f:d7:43:97:34:f3:cb:38:6e:fd:71:50:95:20:2c:28:b9:
d4:69:01:9d:4e:87:26:da:dd:cf:ac:ba:8e:ee:8d:b0:dd:4a:
c9:2b:6e:da:18:d7:ea:5e:bb:ac:c9:54:35:8b:75:b4:0f:4e:
7f:5d:25:0d:00:09:06:91:e0:35:5d:f3:78:e8:d9:70:b5:a7:
b6:e6:eb:2e:cf:c4:ea:8e:85:c5:02:4d:91:c7:de:f1:28:a3:
3c:77:e8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:11 2024 by rpki-client on console-fra.rpki-client.org