Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g-cBwvzpe1ZytKumIRuQ-X4Ze20.cer
File: g-cBwvzpe1ZytKumIRuQ-X4Ze20.cer (raw, json)
Hash identifier: yB/VbSHRDkBiUZeEFwL48OWKGNdIdPffRgNmDitUBt8=
Subject key identifier: 83:E7:01:C2:FC:E9:7B:56:72:B4:AB:A6:21:1B:90:F9:7E:19:7B:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D477A8CC3AC78E466A0F324E1A500D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 18:03:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.116.0/24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 08:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:47:7a:8c:c3:ac:78:e4:66:a0:f3:24:e1:a5:00:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 18:03:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e701c2fce97b5672b4aba6211b90f97e197b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:9c:f2:ad:2d:28:eb:1a:60:a2:b5:8b:22:
9c:ca:3d:9e:69:c3:c2:35:87:ab:14:30:09:20:f2:
d0:80:82:fa:9c:a1:95:ad:ee:26:e2:cd:d3:cf:a5:
21:f3:8f:1e:d3:63:18:c2:dd:e0:48:0c:c3:80:d7:
ae:61:82:75:bb:9e:c3:36:8f:a0:c1:e4:7c:8c:e2:
56:db:94:71:30:2d:6a:5e:c9:a6:d4:e5:32:e0:2c:
54:06:dd:70:b8:c2:67:73:8c:47:72:3f:c7:9a:6a:
b5:f6:c8:86:dd:f5:50:f3:0c:12:02:8c:09:88:e6:
1a:06:11:0d:c7:92:54:fb:0b:bf:7a:05:e6:db:fe:
ed:ff:0b:e0:85:79:86:b9:76:fd:b5:38:a6:32:60:
8e:95:a0:ce:3e:fc:06:46:f9:ac:65:18:51:8f:cb:
a7:88:d8:a4:d9:1b:c8:a0:e2:a5:b7:75:e5:43:00:
e8:e2:2d:d4:9e:2d:71:d2:4d:e3:f1:ea:c2:a5:ad:
2d:6c:68:c3:ae:aa:8f:71:1b:3a:d9:6d:1f:ce:c6:
2b:72:2e:3e:e2:99:9b:8a:2f:6e:4c:8f:14:4d:a5:
7a:59:c8:e9:24:d0:73:c5:6e:52:0f:50:d6:3f:61:
96:d2:15:dc:5c:cd:f2:21:c6:15:62:04:db:7c:73:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:01:C2:FC:E9:7B:56:72:B4:AB:A6:21:1B:90:F9:7E:19:7B:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/62ad68d2-ec08-495c-8516-addef1f77496/0/83E701C2FCE97B5672B4ABA6211B90F97E197B6D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
30:33:f7:4e:4e:29:62:d0:f7:ad:8d:a4:bd:2e:82:23:7a:d0:
b3:72:c7:82:ad:f6:e1:94:c5:30:07:47:9b:0e:02:f7:34:20:
62:aa:c4:b5:59:59:39:4e:6f:d9:c6:e2:06:19:63:f3:be:5c:
a2:8d:18:27:8a:7b:bb:e5:31:c1:4a:1c:47:ce:bb:87:b0:84:
48:fe:d2:aa:e0:83:b2:de:ac:20:50:69:de:11:ea:fd:2c:87:
77:76:ec:07:45:d8:85:a4:74:4b:01:99:f5:40:c1:3b:89:1e:
0d:95:86:01:f4:5f:9c:2a:49:99:c5:02:c3:90:fb:38:63:a9:
84:b7:56:d2:43:5b:46:a2:2c:96:62:d9:79:af:69:94:f3:f9:
d7:0e:07:81:db:36:7a:de:c8:0a:6f:42:51:1e:5a:f1:70:15:
95:1d:1f:fa:5f:02:02:a0:22:ad:19:eb:28:f7:86:c4:1a:07:
39:8d:ab:d6:ac:4f:62:77:6a:39:ac:24:cf:7e:30:81:35:b1:
13:1c:85:67:24:d8:9a:d9:fc:af:7a:90:88:54:f5:70:00:75:
a3:35:cd:dd:64:75:fc:1b:e9:9e:d0:0a:f8:8e:db:9e:65:6a:
d9:65:f6:20:dc:44:4f:34:7f:ac:77:ba:51:55:25:01:4f:1b:
6d:85:5c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:58 2024 by rpki-client on console-ams.rpki-client.org