Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer
File: cvuKvDPRQcSRNwga9ChugqTKzJY.cer (raw, json)
Hash identifier: p+7N6/ItSF+YfV28ZZWgd+yYWYXJfWOCForwDSIqKNg=
Subject key identifier: 72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724621053A0496271DA574D55B3B047A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.157.108.0/24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 08:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:21:05:3a:04:96:27:1d:a5:74:d5:5b:3b:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72fb8abc33d141c49137081af4286e82a4cacc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:6b:10:63:01:cf:98:c6:05:13:1d:56:61:
72:24:2c:c3:0e:4f:39:07:91:b4:f5:9e:77:05:4a:
87:df:70:d1:61:ff:b9:01:a4:20:37:fd:de:37:31:
a1:6f:12:45:23:5e:93:51:f0:6d:21:e0:31:0e:b2:
e4:95:3d:82:68:1a:48:c5:58:de:75:7e:2e:ba:49:
e6:67:37:cd:37:ce:0a:f2:29:f2:91:ca:fe:0b:68:
69:3e:62:28:ae:31:f5:e3:ff:20:b0:5b:c0:bd:21:
fc:45:02:42:2c:ca:7d:ec:05:b5:fa:49:72:5d:00:
88:3e:65:42:9a:b7:5d:7e:35:77:67:20:34:42:89:
88:c1:a9:3f:3d:dd:ec:56:ff:4c:79:17:21:26:cd:
e5:b5:92:96:c4:84:90:b3:15:d1:39:2b:ff:3e:17:
a7:86:1d:c7:15:22:3e:36:9c:de:8b:f4:7c:2c:be:
46:26:7a:ec:4e:c9:09:b3:a8:50:ce:00:be:a6:77:
09:79:20:ea:5b:fc:e9:1f:71:1c:4f:ec:68:82:f7:
51:06:a6:78:2e:ce:e2:af:56:38:aa:80:a1:40:af:
d1:96:35:12:a2:20:eb:58:a9:55:cf:21:de:7a:1a:
b1:53:c5:01:81:dd:76:f5:70:e0:be:fd:72:35:8d:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.108.0/24
Signature Algorithm: sha256WithRSAEncryption
95:98:8f:3d:a2:23:7d:85:2c:7f:61:ad:7d:46:19:e3:be:88:
29:55:c9:70:14:31:15:d4:dc:43:f6:c2:fd:05:00:54:c5:23:
79:bc:76:11:30:99:3c:de:b6:e3:f7:bd:e2:d5:15:6a:60:73:
9e:8c:bb:16:24:75:70:d7:09:01:d5:52:7a:78:0f:ea:d1:32:
65:c1:7b:1f:fc:e6:52:c1:66:72:bc:b8:f9:ed:35:79:54:02:
3e:59:40:07:63:c7:86:28:3d:91:10:04:a8:20:8b:e0:bb:f4:
72:4b:63:f6:0b:ed:43:98:89:d1:fe:5f:b8:33:a3:c9:09:0c:
7c:0e:97:4c:ad:cc:f4:40:9e:d5:0e:46:e5:99:a6:31:78:a8:
85:fd:a4:6a:05:0b:32:24:7a:bd:bb:c5:30:32:2d:de:67:11:
bd:40:da:c3:30:a9:95:24:ea:0a:5e:06:f9:f2:ea:4f:2e:b5:
b2:ee:f4:2c:c9:f4:7e:90:d4:f5:64:33:b5:aa:cb:02:ac:f1:
4b:a0:34:51:40:48:49:34:d2:52:1d:99:4b:f6:62:ab:78:b0:
a6:95:85:cf:68:66:54:b8:b4:e5:1a:47:46:5e:62:f3:78:04:
68:14:ca:52:43:60:9b:dc:fb:45:84:ba:2d:b2:29:19:b6:20:
7d:49:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:16 2024 by rpki-client on console-ams.rpki-client.org