Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
File: pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer (raw, json)
Hash identifier: DO43fAQJFaU3ITysv9QXXjv5ps6gmHVMYUPZp6tcRqs=
Subject key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB21CB937CEA4A9E239BF426863C01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2.56.248.0/22
IP: 2.59.56.0/22
IP: 5.181.176.0/22
IP: 45.12.80.0/22
IP: 45.87.172.0/22
IP: 45.91.136.0/22
IP: 45.137.96.0/22
IP: 45.158.56.0/22
IP: 85.209.220.0/22
IP: 92.119.12.0/22
IP: 171.22.76.0/22
IP: 185.172.172.0/22
IP: 193.37.239.0/24
IP: 193.38.53.0/24
IP: 193.39.9.0 -- 193.39.10.255
IP: 2a0a:c280::/29
Validation: Failed, certificate revoked on Wed 22 Mar 2023 17:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:21:cb:93:7c:ea:4a:9e:23:9b:f4:26:86:3c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a44c267fa754cd6509e9f807273123bee96c525d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:a0:82:b5:b4:d7:4d:c5:5c:a4:55:60:16:
6f:44:35:f8:02:9a:09:54:e4:a0:8d:11:5c:4b:21:
c9:f6:6a:e8:ef:59:0f:b7:d4:65:77:29:b9:3a:f4:
2f:e5:84:72:89:12:c3:76:92:30:74:1d:87:89:f2:
b7:78:91:31:38:05:f5:d1:ed:cc:b3:db:ca:d1:ab:
bd:f2:a0:e0:53:28:5b:f9:21:72:c4:79:14:74:40:
2b:be:45:31:d1:53:6c:50:4a:26:a7:22:9c:25:b1:
8b:66:89:37:61:21:02:99:f7:51:2e:34:37:43:ca:
8e:06:09:b6:d7:ea:45:d7:80:b3:b4:58:d5:09:db:
c9:46:dc:30:16:30:37:95:89:97:0d:56:82:5f:8f:
12:9a:15:88:2c:0e:7f:32:be:71:d4:3e:00:76:a7:
8c:03:a7:9a:35:55:fe:e2:79:f2:d2:ca:76:fc:9e:
e7:66:d8:15:2d:1d:ec:66:16:6a:b0:5b:28:67:e2:
45:07:6a:7b:bd:98:9a:a2:fe:b8:aa:6c:fa:7d:32:
f0:75:25:1a:76:59:5f:cf:3d:3d:bc:5b:af:3c:9f:
58:db:6c:83:cd:2b:ec:0d:e1:db:5a:dc:bf:97:98:
0e:7e:0b:c4:af:a1:35:ad:b1:f5:75:37:f4:07:ab:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/22
2.59.56.0/22
5.181.176.0/22
45.12.80.0/22
45.87.172.0/22
45.91.136.0/22
45.137.96.0/22
45.158.56.0/22
85.209.220.0/22
92.119.12.0/22
171.22.76.0/22
185.172.172.0/22
193.37.239.0/24
193.38.53.0/24
193.39.9.0-193.39.10.255
IPv6:
2a0a:c280::/29
Signature Algorithm: sha256WithRSAEncryption
52:4e:dd:97:66:5f:b9:b0:d4:8f:4c:40:9b:bb:bc:ef:32:80:
1f:12:84:ef:b1:c2:0c:b8:f7:06:12:b5:dc:89:df:a0:11:1d:
16:1d:69:3b:0f:7d:e8:d6:59:12:51:94:3f:cc:c9:0c:76:8d:
82:e6:46:d5:d0:05:89:97:bc:63:1c:12:40:0d:d7:a7:de:94:
5f:5c:ab:13:92:39:9a:07:9b:15:ba:f4:17:cd:a0:a1:34:b4:
bf:0d:6e:76:de:9f:24:8b:05:bf:93:ea:4f:f3:31:ce:aa:9e:
15:81:7f:ad:a4:47:eb:7e:2b:ff:b9:35:0e:eb:d6:cf:fc:0f:
80:df:8d:9a:4d:60:5e:11:d4:0a:80:63:a8:d7:99:01:66:4f:
ae:31:da:5f:51:ae:d1:6c:b9:72:f7:0e:0b:a5:aa:17:e9:1a:
f8:ae:b7:3b:c9:f6:6e:c7:e8:3b:47:c3:bf:96:ce:54:7d:57:
e4:79:c4:d0:1c:7a:84:aa:fc:b6:a4:b0:ff:ba:22:76:5d:3b:
73:a4:a2:11:4f:2c:d5:e3:19:e6:69:34:64:48:62:61:16:d6:
81:9b:cf:3a:a3:9a:4f:76:3e:50:0a:79:80:ef:8b:21:e4:a5:
ab:9b:51:55:8a:40:11:47:e7:cb:73:c6:c5:06:84:28:8c:19:
5d:3e:fa:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:43 2024 by rpki-client on console-fra.rpki-client.org