Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uN_4FyS_da7_4U-Gv84ggjRBmoA.cer
File: uN_4FyS_da7_4U-Gv84ggjRBmoA.cer (raw, json)
Hash identifier: DdJEMulBlVcNx3XNShClz9Q+Udr+z003cSrB1/PhgGE=
Subject key identifier: B8:DF:F8:17:24:BF:75:AE:FF:E1:4F:86:BF:CE:20:82:34:41:9A:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0186C61B6076BCD1D32A1E95E13528B642C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/uN_4FyS_da7_4U-Gv84ggjRBmoA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 09 Mar 2023 11:22:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.142.15.0/24
Validation: Failed, certificate revoked on Fri 08 Dec 2023 12:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:1b:60:76:bc:d1:d3:2a:1e:95:e1:35:28:b6:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 9 11:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8dff81724bf75aeffe14f86bfce208234419a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:75:e2:64:4c:2c:47:36:8f:4b:0b:a7:0e:
d1:30:31:0c:75:0e:a6:53:42:c7:4f:9b:f3:ff:c6:
cd:f0:fb:a9:94:e2:e3:04:e5:e5:95:69:91:b1:41:
1e:dd:f8:7a:3e:8e:83:59:d2:1f:17:78:5c:c3:c4:
b6:03:73:77:54:8e:ca:c5:fb:eb:58:0a:50:6a:db:
18:c0:7e:2e:f3:ce:2d:ee:84:91:64:13:8c:e9:c0:
64:7e:3f:0d:49:bd:67:b3:fa:67:86:53:aa:33:e8:
84:e9:58:95:60:0e:26:2e:04:d9:43:b3:b2:c2:92:
2c:8c:71:ef:26:02:67:11:6e:12:23:a1:b5:9a:08:
27:88:2b:65:3b:2c:cd:c9:97:45:97:2e:16:64:b9:
c7:e3:9e:f9:14:74:95:4d:8c:89:f4:ab:e5:9d:98:
d6:60:06:4d:25:7e:fe:ff:87:a1:a4:de:0d:91:60:
a9:ed:7d:fe:22:66:76:73:77:be:30:80:7b:c3:02:
89:d8:38:82:d0:1a:11:95:0e:68:d0:59:26:bf:b6:
14:25:f1:4d:5b:71:4e:3d:f6:72:6e:65:8c:30:c8:
44:3a:c4:90:1b:e8:f7:3e:7f:e3:3f:15:44:06:95:
33:ff:66:f6:fe:2e:63:f3:cf:fd:2e:03:32:33:bb:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DF:F8:17:24:BF:75:AE:FF:E1:4F:86:BF:CE:20:82:34:41:9A:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5bebe8-cdef-4d31-badb-0dfa87787260/1/uN_4FyS_da7_4U-Gv84ggjRBmoA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ad:72:23:9a:8e:be:9e:d7:4d:11:6d:a8:1d:d4:69:b8:11:
93:b4:77:cb:53:86:98:c6:57:d1:5c:9a:1d:23:c0:b9:41:59:
d3:19:c6:f4:6c:a6:71:c0:27:05:d3:96:6c:08:a3:15:d4:df:
1b:c7:6b:0f:7e:70:7d:26:75:e2:06:74:9a:fd:02:90:8f:d0:
2a:34:f7:bd:a5:f6:8f:71:18:ad:2b:48:fa:c0:2b:68:f7:77:
6a:39:34:82:94:78:fd:fb:79:f0:0f:51:8e:9e:7b:0a:fe:1c:
d6:6c:cd:d6:c9:78:6a:52:60:02:94:f6:fd:29:d2:f2:a9:5c:
4a:b6:e7:1d:ce:66:b2:c7:d3:ea:ed:74:0f:81:36:11:99:d6:
35:3b:90:43:da:3b:04:d9:37:d5:74:6b:e5:70:12:d8:3b:ce:
76:73:aa:9a:35:0b:20:3e:9a:4c:4c:21:ce:42:a1:4a:10:cb:
d9:25:04:07:97:90:7d:96:8f:2c:65:92:76:f4:d0:c2:43:e1:
99:fe:a6:f1:99:33:39:9b:19:1d:89:0a:1a:76:74:69:ce:f2:
e9:0e:0b:31:57:7b:d0:b8:b0:7f:72:c7:f4:44:b7:74:35:f6:
0a:52:c5:9a:16:75:5b:08:cb:27:3f:47:24:69:a3:7c:6a:91:
b4:f1:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:16 2024 by rpki-client on console-ams.rpki-client.org