Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hzoG7HqXdFYvbdtKJNPu0cGi64s.cer
File: hzoG7HqXdFYvbdtKJNPu0cGi64s.cer (raw, json)
Hash identifier: IgFirGmlNdtIITR/0dtnRoB6cN5r0A/+DoLaRKQWiVg=
Subject key identifier: 87:3A:06:EC:7A:97:74:56:2F:6D:DB:4A:24:D3:EE:D1:C1:A2:EB:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186A11F1E552178DD2DCC59EF2AA6B259F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.mft
caRepository: rsync://rpki.sub.apnic.net/repository/A9140C620000/1
Notify URL: https://rrdp.sub.apnic.net/notification.xml
Certificate not before: Thu 02 Mar 2023 07:00:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.145.237.0/24
Validation: Failed, certificate revoked on Thu 16 Mar 2023 08:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:1f:1e:55:21:78:dd:2d:cc:59:ef:2a:a6:b2:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 07:00:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=873a06ec7a9774562f6ddb4a24d3eed1c1a2eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:bf:45:8c:f4:c3:90:72:af:64:b8:27:58:
67:f5:7f:d7:bd:4d:05:71:52:9f:8b:56:66:94:af:
41:38:83:86:43:a4:ed:03:53:fc:94:25:e1:e1:76:
bf:3a:7e:a9:10:fb:3e:8c:34:47:2f:0b:3f:0e:b2:
9b:83:eb:27:bc:bf:78:bd:34:95:92:72:0e:70:4e:
55:b1:6e:46:33:70:20:c1:b8:cc:2e:4d:71:58:73:
cb:04:0b:af:97:ee:ff:76:8e:6c:4c:00:3b:96:64:
9b:79:43:96:c6:1c:3e:11:3e:1a:72:f6:b7:8a:2f:
11:07:38:04:ab:a0:c5:87:39:12:9c:2d:ba:2f:93:
30:d0:e6:1e:e0:72:40:ab:b5:21:11:63:c4:99:85:
cb:b8:2d:85:27:34:bb:b4:43:c1:ca:3f:e3:cf:4d:
70:c8:0b:11:a2:67:33:9a:77:84:b2:f9:7a:10:ff:
c2:49:99:f7:a2:c2:cf:dc:cf:b8:2b:d8:48:30:f6:
f1:84:c8:fe:fe:c2:84:ff:56:b6:e5:cc:29:26:e7:
0f:45:39:df:2a:a5:00:e0:5b:8c:21:48:92:b3:c4:
04:94:c1:99:43:07:78:c5:d8:40:2a:07:62:ac:e7:
e8:a2:9a:0c:4f:c3:48:17:e5:83:a3:cc:9a:70:c9:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3A:06:EC:7A:97:74:56:2F:6D:DB:4A:24:D3:EE:D1:C1:A2:EB:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/1
RPKI Manifest - URI:rsync://rpki.sub.apnic.net/repository/A9140C620000/1/873A06EC7A9774562F6DDB4A24D3EED1C1A2EB8B.mft
RPKI Notify - URI:https://rrdp.sub.apnic.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:03:83:24:61:a6:7d:49:08:c4:45:bd:9f:83:f3:7f:eb:4f:
0a:97:cf:7b:3c:13:35:e3:93:e5:95:eb:24:de:e5:89:c1:c6:
01:76:e1:13:4f:3d:d2:16:0a:0d:4c:12:ca:b4:54:38:55:b1:
a0:db:60:68:9e:d5:b3:e1:ec:00:b5:88:63:29:48:ef:f9:4a:
e8:80:64:3b:49:c7:b7:b3:ec:3c:09:e4:67:0a:ab:ce:8b:2b:
bb:bd:67:ae:c5:f6:ac:01:5d:f5:99:e1:86:15:7a:6a:ef:91:
b3:a2:3c:2f:a9:f8:3d:35:97:82:12:ce:13:59:ad:df:1d:cb:
f0:06:77:70:53:85:9e:ab:a2:24:89:a8:67:41:9e:19:4f:2b:
1f:1e:12:fc:83:96:12:8c:88:5b:c2:e9:d0:93:9e:a5:b3:d2:
f5:b4:dd:3e:b9:05:f1:11:8c:2c:60:4e:0e:59:e5:a7:4a:04:
bd:d4:e2:30:4f:9f:9a:5f:a4:e2:c4:6a:fe:a8:a1:cb:e9:b1:
3f:0b:ad:ad:34:6d:ff:fe:8d:92:06:83:7f:20:cb:0a:6a:76:
10:b9:c7:1b:bb:c2:db:c1:e6:15:13:31:fc:cb:5c:2d:0e:33:
4b:47:ea:a9:1c:a7:9a:d7:07:11:2c:8a:36:13:46:12:c9:bc:
9e:fe:e6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:22 2024 by rpki-client on console-ams.rpki-client.org