Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/paclUEsO1-gGupANs5hH7FJ4Wfs.cer
File: paclUEsO1-gGupANs5hH7FJ4Wfs.cer (raw, json)
Hash identifier: Lri5HeKFr6z8kF0QGUFN5FWYNEXDeud9lr1TlPALWIA=
Subject key identifier: A5:A7:25:50:4B:0E:D7:E8:06:BA:90:0D:B3:98:47:EC:52:78:59:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01873671394456BD449615E6903E67F546CE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/paclUEsO1-gGupANs5hH7FJ4Wfs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Mar 2023 06:53:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 151.216.64.0/19
Validation: Failed, certificate revoked on Fri 14 Apr 2023 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:71:39:44:56:bd:44:96:15:e6:90:3e:67:f5:46:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 06:53:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a725504b0ed7e806ba900db39847ec527859fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:49:ab:18:fe:8d:e5:3e:73:0e:1f:d8:e5:
4d:c8:92:83:d8:a9:5d:81:11:71:ba:c6:00:d3:eb:
d5:76:58:f5:2e:98:22:21:e7:a7:ba:61:5a:ea:d9:
bf:dc:35:6b:25:f1:4f:9e:4e:0f:0b:fa:d6:df:3b:
21:58:3a:84:cb:a1:c2:19:94:7d:73:17:c0:7d:5c:
69:43:3a:cf:25:5f:50:02:04:ba:9b:25:3b:97:c9:
66:e5:eb:70:e0:74:3e:13:90:b9:86:60:ed:f3:54:
13:f8:58:68:f0:06:e5:82:a7:85:6c:36:b8:35:49:
d8:ae:76:3f:68:5f:e6:45:18:0f:03:c0:2e:74:00:
a8:60:c6:59:e6:f1:fb:b8:a5:80:ce:ee:0b:76:df:
2c:7c:f1:fa:90:b0:7c:f3:98:28:9f:cb:3b:c7:46:
e3:e7:67:9d:f3:64:14:f8:38:2e:0b:25:d4:d2:a7:
a2:27:00:8b:22:e0:66:60:2b:47:2e:f8:a9:e7:95:
52:35:cb:47:bf:d5:69:45:a4:4f:68:d1:d4:54:f2:
98:66:fd:11:cb:1d:2a:09:28:f8:e0:f9:81:99:05:
15:fa:df:9c:d9:b2:55:69:bd:3b:84:56:c9:31:d4:
a8:b3:5b:9d:35:38:bc:6d:12:e4:ca:39:2a:80:66:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:25:50:4B:0E:D7:E8:06:BA:90:0D:B3:98:47:EC:52:78:59:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/paclUEsO1-gGupANs5hH7FJ4Wfs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.64.0/19
Signature Algorithm: sha256WithRSAEncryption
86:e3:e5:b1:9b:6f:c9:c7:69:58:5a:45:c5:84:50:f8:c7:d5:
e4:b8:14:1d:d4:91:ce:20:b7:0d:3e:e6:5f:c2:0e:44:f2:da:
ea:43:2c:0b:03:51:32:b8:52:08:82:eb:04:42:34:c4:0e:3a:
41:6e:8d:89:e6:10:b0:49:0e:31:6c:63:7c:6f:98:0f:b9:2d:
64:4e:2a:f2:be:f0:48:a6:03:12:c2:42:30:6b:ea:88:23:54:
e2:62:09:78:21:86:8b:dc:67:c5:2b:32:94:da:4c:3f:5a:c0:
39:d0:1c:04:61:22:e2:4a:c1:23:8b:23:86:09:15:93:11:00:
8b:fa:34:88:ec:48:de:be:6c:d9:e9:bc:13:3f:0a:c5:20:21:
47:2d:cf:e5:a5:b3:b2:42:08:32:ab:54:04:a7:77:7d:f3:90:
58:fd:f9:69:bb:40:e3:8f:b8:0e:4a:28:1c:44:2a:1a:91:e0:
dc:06:31:e7:6f:2c:53:b6:24:6b:a5:10:32:57:f3:24:fe:e5:
13:e7:10:4c:03:b1:1f:21:95:fd:a5:3c:4f:a9:51:c4:a2:2e:
7a:66:7f:a8:95:29:07:9b:c8:f0:f7:e6:1f:4e:c5:d5:fb:ee:
8b:d9:4e:f3:d0:92:35:29:e0:61:3c:cd:8c:34:8f:b2:be:21:
5b:6e:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:02 2024 by rpki-client on console-ams.rpki-client.org