Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r7IBFMQJApHsQCR5piDd6ua61iA.cer
File: r7IBFMQJApHsQCR5piDd6ua61iA.cer (raw, json)
Hash identifier: 3nK2Gtq5xDqta3sqy8JC8QSQSJy1SKTMJn6Rffzr8/c=
Subject key identifier: AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D9DD554E5E56A682842F1FC431CB45E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 19:37:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.212.113.0/24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 11:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:9d:d5:54:e5:e5:6a:68:28:42:f1:fc:43:1c:b4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 19:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afb20114c4090291ec402479a620ddeae6bad620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:5f:1e:7e:48:26:39:ae:8c:8c:a9:86:ca:
b7:37:67:61:8c:21:08:ee:61:c8:01:a5:c7:8c:ed:
5d:27:9b:0a:bd:17:6c:6a:c2:29:c9:73:51:14:8a:
0c:f1:68:c7:74:e5:95:d0:0d:a4:07:54:a0:09:fa:
10:e0:55:f1:eb:3c:46:37:6c:1d:02:51:6c:ff:af:
c5:af:c4:64:23:88:15:5f:77:55:c7:c6:f4:de:e7:
c4:d8:dd:fa:a9:40:dc:2c:e4:eb:60:21:da:5d:47:
ee:68:26:8a:81:83:cb:5c:1b:c1:b1:e5:a9:c8:74:
ec:c8:b1:a5:2a:33:49:6f:d7:a8:37:ba:c9:9f:3f:
54:7b:27:29:2d:9a:9e:1a:a6:bf:20:39:74:7a:1b:
68:cd:5e:98:f4:04:07:87:fc:2f:d8:5d:1a:90:da:
b8:01:7a:b6:f2:97:45:99:70:42:3e:5d:9f:92:0f:
da:76:b0:dc:ff:63:2f:83:ef:ab:66:29:d4:1e:a2:
34:9d:28:75:2a:b0:ab:3b:68:c0:42:f1:b8:97:d9:
7d:02:20:df:19:4e:50:e4:b5:cc:12:3d:a7:2c:24:
56:86:b0:2f:dc:89:cf:23:e0:63:ee:d7:b8:04:13:
b8:8a:30:fc:a2:ce:24:27:95:bf:7f:19:3a:30:8a:
73:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:01:14:C4:09:02:91:EC:40:24:79:A6:20:DD:EA:E6:BA:D6:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/948906b5-432c-4e6a-b5e2-110f2945863b/0/AFB20114C4090291EC402479A620DDEAE6BAD620.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:74:0d:4d:c1:c4:0d:cb:13:bc:67:75:cb:75:83:c7:e0:be:
09:e7:c2:69:17:cc:e3:f1:96:a2:ff:f8:1a:2f:13:d6:7c:5b:
02:fc:c4:f3:f9:29:ba:d8:65:37:02:99:de:62:d0:cc:f7:30:
f9:19:dd:7f:29:d0:69:5f:bf:13:03:ff:da:7d:fd:a2:e0:d5:
19:66:90:6a:a2:4a:92:0e:4f:bf:b7:21:ae:1b:7f:d8:4a:e9:
8b:eb:c9:b2:b9:03:ee:a0:3c:c8:cd:e9:d1:53:6b:1c:ef:34:
5e:ad:7d:33:a4:e3:8d:63:32:b9:29:c3:64:30:7f:3a:3b:5e:
87:a2:40:2d:c9:ec:92:62:49:29:a1:b6:b5:c3:d0:83:b4:ed:
0f:ff:43:2d:8c:cb:7b:90:e0:0f:d6:1d:2b:f7:3e:62:3f:a0:
dd:b8:91:e5:50:df:b2:7e:73:95:08:e3:9d:10:45:1f:fa:af:
01:66:1a:3b:92:29:59:1e:d9:a3:a6:75:64:61:6a:30:a4:53:
03:cd:b7:9d:5a:94:68:56:87:c0:a3:1a:22:c5:f6:28:2d:8a:
26:db:55:8a:82:a8:6e:5a:bb:1a:fd:d3:82:43:51:b3:62:62:
7d:d1:1a:0b:8b:c5:9b:81:31:81:50:8a:dc:ce:b5:20:ea:41:
cc:43:d5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:33 2024 by rpki-client on console-ams.rpki-client.org