Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vNgCTIkR_s3y6q0ehuOsd98frC0.cer
File: vNgCTIkR_s3y6q0ehuOsd98frC0.cer (raw, json)
Hash identifier: IfmKQRqL0ZDr0NTvjLOGcj36D3Njoc1/2UOtulEip0Q=
Subject key identifier: BC:D8:02:4C:89:11:FE:CD:F2:EA:AD:1E:86:E3:AC:77:DF:1F:AC:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D75BC924163F7D42A2E8E87ACFB19DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 18:54:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.115.0/24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 06:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:75:bc:92:41:63:f7:d4:2a:2e:8e:87:ac:fb:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 18:54:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd8024c8911fecdf2eaad1e86e3ac77df1fac2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:b3:90:ec:3c:ac:13:54:bd:5c:ae:58:a5:
75:3c:19:0d:63:ef:97:d0:ce:36:33:b0:42:56:c2:
8b:d6:10:18:44:14:9d:09:db:7d:19:9c:e7:dd:dc:
1e:f6:d6:1e:9e:08:86:62:e6:44:db:66:b6:2d:0d:
7c:80:82:bb:a6:d0:55:03:07:55:d4:59:0d:88:bc:
b1:09:01:ef:d8:d9:8c:61:8a:32:1d:44:f4:9e:a8:
b1:68:b9:77:98:e3:e7:2b:e7:f3:d3:86:db:b2:d4:
9b:a6:5b:46:8a:6f:5a:32:38:c7:04:3e:a8:a7:30:
6a:28:52:78:8d:59:f4:9a:ac:f9:de:e9:d0:48:a5:
2f:40:1f:9d:9f:6c:36:50:a0:52:65:7e:87:84:cc:
28:fc:60:b8:9b:52:88:26:0a:66:0d:2d:ef:dc:48:
53:e1:ee:0a:0f:c4:02:db:d0:85:3a:9e:ea:bf:b3:
aa:bd:04:b1:31:92:65:e5:13:e6:b7:96:99:16:c2:
2d:a1:fc:cd:b7:fe:b1:3d:f3:ba:bc:c4:4a:71:6f:
8a:85:75:c5:b6:ba:86:71:d1:14:16:c0:92:30:c7:
d8:5a:54:77:8a:39:bb:97:89:d1:69:67:8a:1d:be:
5e:d3:2b:d1:59:9d:50:43:4e:e1:8a:bf:e3:df:d6:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D8:02:4C:89:11:FE:CD:F2:EA:AD:1E:86:E3:AC:77:DF:1F:AC:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/60d1d3f7-e122-43f4-b8d8-1e282b452d3d/0/BCD8024C8911FECDF2EAAD1E86E3AC77DF1FAC2D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.115.0/24
Signature Algorithm: sha256WithRSAEncryption
00:af:e1:5f:43:83:d7:60:f8:f9:f4:3a:26:e0:5a:e6:4c:bb:
32:0f:b9:32:52:68:0b:63:8a:ee:47:2e:ba:83:30:47:0c:a5:
14:0b:6f:79:df:65:59:7e:1c:81:47:53:fd:73:56:7e:f4:83:
62:9d:1e:ad:f6:00:34:83:a8:a1:25:b0:1d:5e:4e:42:c2:ca:
4a:f1:f6:37:26:1c:76:fd:d0:df:45:ad:30:d6:93:14:01:b4:
ae:be:3d:27:46:45:44:ef:90:27:0d:7f:49:f5:b4:9a:5c:65:
44:59:f5:af:04:0f:b9:4d:b7:58:77:8f:30:4c:f2:a5:48:3c:
90:87:6d:60:d5:ad:db:75:d3:b2:5e:7b:b5:23:0d:e1:b2:07:
06:17:35:27:42:69:2b:5d:00:a5:88:ff:dd:f9:22:d4:2d:69:
3c:d0:b7:cc:82:8b:68:06:00:69:aa:5f:8a:80:0f:2a:ee:33:
ff:45:9d:39:44:f8:e8:16:9b:8a:3f:cb:6b:20:4e:58:92:33:
c3:9e:8b:05:be:0f:52:f3:19:f2:5a:39:62:ae:3f:39:5a:56:
18:f8:38:7c:d4:a4:85:5b:1b:5d:ae:9c:4b:5b:72:92:31:59:
b2:3d:90:39:e1:04:ad:f3:c9:c3:77:96:80:ed:48:1b:2b:6e:
fc:33:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:29 2024 by rpki-client on console-ams.rpki-client.org