Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pmOr1HnL_3YIIwS_YNA63DGH2TY.cer
File: pmOr1HnL_3YIIwS_YNA63DGH2TY.cer (raw, json)
Hash identifier: VdxGRnNP250GJM3GjhlcQqhkQGw0qM9P/u1U4FCHkt0=
Subject key identifier: A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D1463852AC23FED6BF18B4800D7E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.198.88.0/22
IP: 2a0a:8f40::/29
Validation: Failed, certificate revoked on Mon 12 Feb 2024 10:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:14:63:85:2a:c2:3f:ed:6b:f1:8b:48:00:d7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a663abd479cbff76082304bf60d03adc3187d936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:ad:9b:6e:e2:5e:aa:2a:97:e4:f6:27:68:
30:43:d7:5e:78:45:b3:ce:c7:e8:f0:93:58:77:d6:
be:10:d7:0f:a3:4e:9d:ea:03:47:9f:d0:e5:ec:10:
a0:7f:4e:20:0b:ac:36:e1:4e:41:90:d5:d8:66:2e:
ed:ca:36:13:2f:17:b5:64:19:d8:75:a3:91:b4:cb:
0f:a4:33:3a:56:fd:7c:55:00:11:c8:5b:00:c6:ac:
79:1b:16:74:fb:84:57:2f:a2:90:0d:27:0d:8c:1b:
d0:bb:a5:aa:4b:a3:c8:33:ef:61:77:3d:3c:ce:00:
6f:5b:18:8d:b2:ae:47:9c:1e:7e:a7:aa:71:df:93:
27:ec:01:32:1d:93:3e:4a:ea:92:7a:aa:20:e6:59:
d3:8d:fa:02:f0:68:d2:e9:da:44:8a:f8:c9:08:fe:
08:ff:de:22:86:5c:d4:80:3c:28:1b:4a:0d:9a:66:
81:57:cf:4d:60:6b:f9:c0:71:41:16:81:95:d3:35:
f4:29:21:04:c9:54:cf:b3:aa:6a:60:ee:84:49:b4:
48:e2:d7:06:ac:a8:9a:8d:81:b2:55:88:ba:5c:76:
93:16:b5:bf:41:b1:90:56:ee:d8:f9:d2:5f:99:81:
7b:f2:02:e9:ba:53:4e:be:a1:1f:f4:14:d8:b5:5e:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:63:AB:D4:79:CB:FF:76:08:23:04:BF:60:D0:3A:DC:31:87:D9:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/f42724-d009-487d-a79c-bfa04f6cde50/1/pmOr1HnL_3YIIwS_YNA63DGH2TY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.88.0/22
IPv6:
2a0a:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
9e:e4:1b:86:3b:35:9b:84:cd:25:68:3e:1b:b1:99:a4:5a:2b:
b3:2d:1c:2d:b7:a3:bf:a7:1c:9a:2d:79:b5:4a:97:7d:3e:10:
07:1d:61:6c:7b:f4:4e:dd:7a:fb:5e:6e:4d:b3:0d:47:f6:2c:
49:3f:da:1e:fa:3a:94:7e:ff:5d:62:16:53:d3:1c:16:e2:cf:
3d:8f:58:45:a4:52:f3:58:f7:a4:38:2e:99:cb:6a:8c:12:1e:
a6:7a:69:9b:97:fb:ee:6d:ea:40:e7:e4:b1:e3:d5:bb:b7:53:
29:ce:57:a9:a0:9e:d0:1d:56:b2:21:6c:3f:65:4e:5f:da:28:
d5:cf:31:6c:f4:9c:d9:38:e7:bd:a7:1e:c6:8c:d3:53:f8:43:
06:0a:b9:05:7e:9d:64:6c:7c:e4:19:49:25:95:26:69:8f:b5:
3e:b1:1c:de:a5:85:b7:16:df:53:68:8f:7d:68:d1:fc:2e:ea:
ae:02:0f:d6:bf:35:9d:8d:68:16:75:24:33:e4:40:f7:32:94:
21:85:72:fa:c2:79:64:c9:50:4a:fc:2a:c7:b0:17:63:a6:55:
4d:92:ff:b9:1f:71:c0:64:ec:ec:6f:cf:01:2c:f6:39:02:54:
d3:c9:5a:39:bf:15:33:63:cc:7e:bb:17:f0:d4:58:f8:05:ed:
25:21:38:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 15:17:09 2024 by rpki-client on console-ams.rpki-client.org