Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fRbYLxZJtghrnJJZ8x8fR-DV_wc.cer
File: fRbYLxZJtghrnJJZ8x8fR-DV_wc.cer (raw, json)
Hash identifier: Yp6NTncsfQAL6s9906yRVfDES4yC+v1xuuD9X+OKMzk=
Subject key identifier: 7D:16:D8:2F:16:49:B6:08:6B:9C:92:59:F3:1F:1F:47:E0:D5:FF:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245E395959C3C94856014E054AEDCAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/fRbYLxZJtghrnJJZ8x8fR-DV_wc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.150.169.0/24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 07:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:e3:95:95:9c:3c:94:85:60:14:e0:54:ae:dc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d16d82f1649b6086b9c9259f31f1f47e0d5ff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:24:2c:9b:6f:c7:ab:16:ad:17:5a:d6:28:
f9:84:5e:ee:c7:6b:cf:d4:38:aa:ea:65:e3:52:c5:
b5:9c:e2:d7:ca:00:bd:e4:85:dd:46:d5:9c:f4:f7:
e4:a9:df:aa:b7:29:5b:74:91:9e:26:f5:09:c0:88:
8c:7c:c9:be:90:1c:25:64:8e:f2:a3:06:83:c4:52:
45:33:72:92:15:0c:05:fa:99:6b:7d:fe:bf:7d:28:
11:53:b1:f3:90:b2:5b:20:3c:f2:6a:62:9d:ab:83:
44:1a:ad:9d:37:99:67:f1:cf:df:93:4c:a1:be:2b:
d2:03:d0:12:0a:9c:f9:e7:81:30:d8:2c:ef:dd:fb:
d7:58:b7:2e:ee:f8:7e:6d:89:4e:39:a4:e9:30:81:
47:1a:f9:1e:b0:88:66:4f:7e:e2:71:23:35:ab:9b:
99:41:cb:1b:e4:86:f4:bb:1e:3a:be:58:6f:97:f8:
fb:9c:f9:52:ce:7e:c6:8e:3e:94:3f:de:29:d0:14:
13:1f:4d:7c:00:5c:e0:be:b7:ab:6e:e9:93:4a:54:
4f:63:0b:fc:e0:3c:e7:62:35:3b:6e:91:7d:c7:69:
95:53:a5:c5:13:eb:0e:6a:d0:0e:4c:cc:1e:39:16:
33:ab:2f:ae:84:4f:e8:73:7c:82:ed:2b:4f:0b:e6:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:16:D8:2F:16:49:B6:08:6B:9C:92:59:F3:1F:1F:47:E0:D5:FF:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d9fb3-291b-4465-b2ab-10f81ddbacd1/1/fRbYLxZJtghrnJJZ8x8fR-DV_wc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.169.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ea:07:a8:c2:3b:e9:34:23:f8:ea:28:2d:66:87:47:ab:01:
2e:f5:6d:90:d7:f6:08:14:b1:5a:1f:76:f6:93:a2:dd:b5:cb:
01:ce:dc:68:4d:3a:9c:9d:de:79:cb:1e:71:c6:91:63:8d:2f:
5e:47:b8:0b:97:b8:fc:15:7a:57:1d:50:72:af:13:b5:0d:e0:
bc:22:91:64:5b:fc:5e:71:df:1f:3e:2b:18:5d:79:a6:3a:e0:
f2:86:92:09:b1:75:20:ee:d0:16:1d:64:b3:50:79:27:8f:86:
46:c1:44:36:47:dc:30:04:1b:8c:22:1d:4c:4c:c6:01:5a:04:
6e:31:f8:d0:bb:77:ba:e0:97:4a:b8:29:40:01:d7:e5:52:8c:
d0:dc:a6:d0:13:3f:03:28:f3:1a:eb:05:de:35:9d:ec:2e:46:
6b:cc:31:bc:b1:5a:5b:c1:96:c9:7d:6d:75:73:ff:cf:c6:eb:
c5:01:4a:17:53:28:51:3e:2e:80:75:bf:2e:73:76:72:99:6d:
94:a1:88:d4:c3:29:e1:4a:ba:f8:6b:04:b2:b7:79:8f:a2:33:
6e:88:84:ed:34:3a:1b:43:35:a3:cc:11:2e:bf:45:10:28:4c:
71:50:96:88:d5:42:cd:94:3e:9a:fe:6c:f6:d4:e9:66:55:b5:
04:0d:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:45 2024 by rpki-client on console-ams.rpki-client.org