Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vhYCEpch9EAyxFoBON2JcxexnMU.cer
File: vhYCEpch9EAyxFoBON2JcxexnMU.cer (raw, json)
Hash identifier: +klbXXoXyadQaL9QqymutlPW9ofaCF65QvkC5rE39Q8=
Subject key identifier: BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887C63DFB9812B01F977CE6D22BC2E614E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 13:55:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.122.186.0/24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 11:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:63:df:b9:81:2b:01:f9:77:ce:6d:22:bc:2e:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 13:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be1602129721f44032c45a0138dd897317b19cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:d2:df:86:93:0b:da:2e:19:76:0d:a1:b2:
58:fd:9f:d5:8f:38:09:58:4b:e4:0c:73:2c:e9:fd:
c3:1b:44:f0:49:d1:60:93:b3:65:a6:7c:4c:3b:a0:
4a:f8:07:ce:30:fd:fc:cc:1f:19:7f:38:15:3d:3e:
a4:ea:4f:b5:a3:40:9c:3f:64:e1:cc:d7:ca:39:ab:
66:20:f6:bc:8d:ff:58:e7:49:fa:e0:aa:59:52:05:
d2:93:03:c2:e9:f4:87:0b:f8:d8:34:92:50:97:23:
70:5f:01:f8:c9:43:fd:f0:68:04:c1:be:6c:9b:20:
4b:25:27:ff:eb:00:ec:f3:fd:4b:92:64:09:1f:f5:
b8:a5:cf:e8:93:33:e5:ae:4e:d9:4d:0c:02:98:6b:
ad:f2:f0:d9:e9:79:23:b9:9e:5b:ce:61:eb:17:73:
46:99:f3:81:7b:2b:35:06:a5:13:9e:73:e2:b7:17:
5e:de:ff:50:e1:53:df:5a:6b:68:b8:3f:05:ea:17:
62:20:4d:e8:83:9b:18:d7:89:59:cd:06:44:83:2e:
8a:70:ab:d5:e8:7c:ce:ae:a3:14:bc:c6:af:dd:e3:
6b:37:17:29:d0:d8:d1:bc:88:d2:5d:bd:89:38:17:
67:d7:fc:6a:8a:a4:ec:66:75:63:c0:d7:ef:9a:e0:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:02:12:97:21:F4:40:32:C4:5A:01:38:DD:89:73:17:B1:9C:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7dfc5ca1-6c92-4f33-9364-c5ed35b2b682/0/BE1602129721F44032C45A0138DD897317B19CC5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.186.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1f:4d:f1:72:4b:78:33:af:d6:18:91:82:7f:7a:5c:32:13:
10:f3:ea:62:46:f5:b7:9f:1a:f9:d4:9d:e3:61:eb:0f:07:d3:
39:c0:d6:17:8e:cd:43:5e:e4:48:9e:5f:5e:2d:a2:65:f1:34:
55:03:f7:82:6a:fe:24:5d:18:de:11:36:6a:13:8b:83:8f:d3:
8e:e8:18:48:3c:2f:20:08:6a:7a:4b:8a:a9:13:ad:98:69:9d:
bd:48:1e:73:ab:eb:cb:a8:dd:5a:03:84:8a:ec:2e:a0:1f:50:
e2:fc:e9:ed:4f:f2:85:f6:f0:f9:f6:96:0b:c5:37:f7:ba:aa:
03:30:75:c4:23:b2:e7:0c:34:dd:85:3c:e2:0b:a8:17:11:b1:
3e:9d:0f:85:53:73:d2:1f:79:cc:b7:d1:c9:64:30:1f:b8:61:
29:28:62:8f:c3:2d:87:d7:b0:a3:8d:48:07:0f:f2:38:60:f8:
9a:c0:aa:ea:7b:04:0e:4b:98:45:d0:0f:e1:3f:43:64:eb:83:
c7:c8:ac:0b:b1:4e:77:b6:3d:f3:b7:ee:f4:f3:68:8f:6c:2c:
cd:5c:20:b5:10:1e:a4:2c:db:e8:dc:f7:47:ce:0a:d1:2a:77:
42:23:43:ff:56:a4:a5:e0:ed:8e:f9:5f:fd:c6:84:ce:bd:5d:
4c:76:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:34 2024 by rpki-client on console-ams.rpki-client.org