Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer
File: dULlrAN_3T3RXmV5kX-k7FD0Yh4.cer (raw, json)
Hash identifier: mtNkJrWlB6cBhf3etRE8lNSuoinydlA6EY8/Kwl+nTU=
Subject key identifier: 75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26CF294E25D3AE6FF9B56C3D3290476
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.mft
caRepository: rsync://0.sb/repo/sb/29/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.122.207.0/24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 13:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f2:94:e2:5d:3a:e6:ff:9b:56:c3:d3:29:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7542e5ac037fdd3dd15e6579917fa4ec50f4621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:f3:12:5f:c7:ad:66:71:8c:2c:91:89:68:
0b:70:0d:39:1d:c2:4e:9d:a8:d1:3e:b1:75:9c:4e:
03:8e:88:7d:61:e3:c6:6b:7b:a7:56:a9:a0:e5:20:
7c:9b:2c:36:b9:e6:8c:93:81:2e:58:15:d7:4c:31:
b1:c6:a3:07:c6:96:69:d0:61:2f:d2:ff:5e:df:dd:
f2:cd:44:41:7c:bf:f8:41:16:51:db:3b:fa:1b:ba:
7b:5d:59:21:03:e1:4a:2f:a8:a8:2d:c1:01:e0:be:
cb:8e:f9:08:77:41:7f:dc:cc:ec:3c:b4:35:21:8b:
22:f8:89:63:0b:d8:0e:bf:f3:35:d3:87:e8:1c:cf:
9a:57:bc:88:e8:0a:47:29:84:39:60:63:21:bc:9d:
2f:14:8b:96:d1:6c:63:c7:76:08:22:e1:2d:a9:c3:
18:51:6e:de:ac:df:bc:6a:07:b4:7f:fe:dd:33:91:
b2:fc:e1:94:86:5e:c4:ce:36:b0:85:6f:5f:0a:aa:
5a:dd:45:8a:ef:cd:92:2f:4b:e1:6f:19:f2:a9:b9:
c5:a2:7e:21:0c:53:ef:01:de:9b:d8:71:4a:40:ec:
0e:d7:f2:fb:33:50:a5:25:7e:78:69:43:31:c8:2c:
17:9e:22:de:c6:9d:25:d4:a4:7d:e6:30:79:be:d0:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:42:E5:AC:03:7F:DD:3D:D1:5E:65:79:91:7F:A4:EC:50:F4:62:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/29/
RPKI Manifest - URI:rsync://0.sb/repo/sb/29/7542E5AC037FDD3DD15E6579917FA4EC50F4621E.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.207.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c5:49:b3:7d:ef:6a:39:78:d7:9a:83:ab:e2:e6:98:92:3f:
7f:05:ff:0b:2f:53:2f:11:92:ce:cd:c1:1d:77:78:94:11:1c:
01:12:93:89:a7:25:9f:39:dc:18:36:59:04:8d:3b:55:58:8e:
6a:a0:c0:a6:4c:8a:4c:1a:76:2c:98:97:14:dd:e4:2f:f9:50:
9f:61:da:5f:0d:95:dd:c8:ea:c2:76:72:91:5d:b7:c1:8f:79:
0f:ad:e8:ab:38:4a:69:f5:aa:7a:38:e7:e0:82:12:9b:14:ae:
ce:11:9d:de:20:0c:64:c9:06:5e:ad:72:a0:07:cd:f9:9d:e9:
a2:8f:de:ac:cc:d5:cf:8d:6b:3a:37:cd:c0:24:15:b9:03:0b:
17:ba:0b:d4:4a:fd:74:2c:d6:33:97:6d:85:ed:a4:16:c9:d4:
9e:f7:90:39:b7:6c:26:e4:76:57:3a:00:16:f8:f0:e3:8c:b3:
6a:9f:f9:74:37:d3:84:b2:f8:a7:8c:c9:a8:9d:4e:65:08:bc:
b7:7c:cd:eb:fb:e6:74:c0:9e:b1:68:06:69:5b:52:cc:cf:30:
a8:35:0b:8e:72:98:00:a4:02:4c:a2:cb:50:2f:43:1e:f0:7d:
fc:c5:3d:bc:61:c8:c6:e2:86:37:65:e9:b7:e0:64:03:99:8d:
68:e3:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 17:17:12 2024 by rpki-client on console-ams.rpki-client.org