Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcZu2IDk4o6KbkobX54JIiNQK7Y.cer
File: pcZu2IDk4o6KbkobX54JIiNQK7Y.cer (raw, json)
Hash identifier: /+gXv+GQ7w37f517MTdahHSztguJGLZZ92EywIAEfOY=
Subject key identifier: A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBBAF294A21EDC57570DFC83CD9965
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.23.212.0/24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 12:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:ba:f2:94:a2:1e:dc:57:57:0d:fc:83:cd:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c66ed880e4e28e8a6e4a1b5f9e092223502bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:56:95:25:5f:c0:22:ab:2b:49:17:88:e0:
6d:e9:93:36:cd:84:d2:ff:a6:fa:dc:28:34:bf:49:
8a:e9:aa:7e:f2:a3:1a:6d:87:b5:3d:f4:b7:15:a2:
4b:36:ba:c2:8c:ac:02:5e:8d:84:e5:b0:d5:4c:c1:
0e:bd:a7:c8:93:0d:a4:14:b7:f7:ee:3d:0f:39:76:
a1:ca:d5:c5:64:f4:10:6c:94:0f:87:d4:da:f8:89:
cb:7e:75:c5:41:85:b4:ca:dd:4c:a5:85:c9:d6:09:
c4:8a:47:bc:38:8a:e9:50:2d:13:9c:14:d3:87:6b:
f7:6d:0c:d6:0b:3e:16:9a:38:05:ef:ac:f7:aa:85:
91:9d:8d:8a:49:7d:3a:8c:b9:46:cb:c6:77:2b:c2:
00:82:87:28:ab:7d:b9:d3:21:eb:af:52:fd:c6:5f:
d7:7c:ea:0b:cc:7e:79:9c:65:e6:ad:b5:b1:25:a6:
ac:bc:5a:d9:f3:18:4f:64:8d:a5:f3:50:a1:48:2d:
b1:38:a6:e8:99:e1:07:ce:ef:5c:49:ff:83:03:ab:
da:d6:55:8d:43:c9:d1:eb:ea:de:1d:6d:a7:c3:d9:
7c:3c:0a:23:5f:29:3f:40:e2:ee:9f:4c:c8:1b:6e:
de:50:9c:b3:f2:a6:1e:6e:84:81:01:d4:32:57:ae:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:6E:D8:80:E4:E2:8E:8A:6E:4A:1B:5F:9E:09:22:23:50:2B:B6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d287ec-09ab-40da-8e67-4fe80d1c4349/1/pcZu2IDk4o6KbkobX54JIiNQK7Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:87:4b:a7:6c:9f:68:66:32:d2:d8:54:c5:e1:f2:55:02:65:
41:47:bc:39:78:a5:67:12:f0:21:3c:37:a3:f1:3c:a6:3d:e5:
ae:0f:ac:e6:49:ba:30:17:75:ff:1b:dc:66:ff:3b:56:c3:28:
15:6e:45:7b:53:bc:cf:bc:34:1d:88:53:cb:74:7e:63:7b:ca:
a4:76:19:60:cd:dc:0c:a8:1e:52:df:bd:67:b7:29:e0:c1:e9:
4b:f0:c9:f7:20:0e:fa:e5:d0:a4:28:78:c5:4b:54:2c:d0:40:
dc:b6:20:5c:6a:de:ce:41:0a:ed:06:53:f8:14:35:46:6a:42:
c9:e0:f7:70:a1:be:a6:57:5c:a0:8e:f2:56:00:72:61:8d:28:
01:a9:3c:cb:8a:c4:c1:96:7c:f8:94:79:24:8b:7c:be:38:87:
d6:29:38:04:d4:bd:ea:29:5f:49:8f:75:15:df:e0:85:17:65:
c7:50:58:8a:fa:3d:9d:c6:4a:e5:99:f9:88:66:f9:27:0e:c4:
ac:ae:3b:e7:0f:10:94:f3:5b:ba:98:9e:27:b1:0a:04:5e:19:
4b:8e:54:5e:75:1b:99:ec:bb:6b:33:93:59:45:86:c0:a6:65:
45:0f:9e:12:19:60:ec:f8:73:52:1d:85:c5:15:6a:22:d9:04:
30:36:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:47 2024 by rpki-client on console-fra.rpki-client.org