Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wWGZm6CygSUZJtGJxt6qAvogCqY.cer
File: wWGZm6CygSUZJtGJxt6qAvogCqY.cer (raw, json)
Hash identifier: cRo1ysZBB1zewu7GSsR+ImKfEmYkGw0YqNubiZpp3Go=
Subject key identifier: C1:61:99:9B:A0:B2:81:25:19:26:D1:89:C6:DE:AA:02:FA:20:0A:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857244F78183F47C6B1169C4218ECB0101
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/wWGZm6CygSUZJtGJxt6qAvogCqY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:678:3b4::/48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 16:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:44:f7:81:83:f4:7c:6b:11:69:c4:21:8e:cb:01:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c161999ba0b281251926d189c6deaa02fa200aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:bd:d4:48:fc:f7:d7:69:b5:e1:3d:95:11:
a5:67:5e:7f:e0:b4:12:c0:7f:87:50:3a:37:de:56:
c3:0f:d6:6b:c0:43:d5:ee:14:2f:95:fd:da:98:db:
80:1d:a9:2e:90:98:02:55:0c:ad:5b:7a:5e:fe:a8:
7f:0d:bb:dd:31:83:f9:ee:9d:63:34:3d:8c:80:03:
0b:0f:01:71:0a:e9:ed:a3:b1:4f:bf:df:04:62:5e:
41:00:c5:b1:df:4e:55:7b:89:0f:53:c9:91:23:62:
5d:6a:e0:40:98:1d:66:5c:ef:b8:1f:41:b5:1a:3e:
7a:57:b2:46:2d:b8:11:7f:79:11:88:0d:d6:06:e9:
a0:1c:db:99:53:36:46:63:31:a2:d5:ce:15:bc:ba:
1a:dd:54:2b:f5:2a:0b:68:cc:90:d6:e1:12:85:34:
8f:d0:63:c8:9c:8c:3b:6f:72:d1:46:1c:fb:d5:47:
a4:7c:1d:a9:95:90:30:f2:76:76:68:66:75:f5:f0:
09:96:be:28:43:e5:11:6e:04:74:5e:4b:ac:00:63:
fa:0b:19:37:c5:6d:63:f4:25:f2:27:d3:57:dc:a6:
df:0f:e7:f0:06:a8:15:06:f1:6e:f2:fd:a3:cf:9f:
b2:69:02:49:eb:51:25:23:99:ff:72:b9:e0:fc:74:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:99:9B:A0:B2:81:25:19:26:D1:89:C6:DE:AA:02:FA:20:0A:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cbc50f-7cc8-48a2-8209-2f3c3d14b2bb/1/wWGZm6CygSUZJtGJxt6qAvogCqY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:3b4::/48
Signature Algorithm: sha256WithRSAEncryption
0b:29:06:f3:00:f7:ab:54:f3:86:16:30:c0:7f:a8:5b:60:b8:
2e:02:d0:5b:c3:4d:e2:e2:46:cf:12:58:82:70:50:c1:48:8d:
9b:2e:7d:cb:aa:2a:d6:d2:ab:3d:8e:a1:08:7a:77:ed:4e:ab:
af:10:f9:00:de:dd:f1:cd:e2:fd:46:7d:12:d8:65:b6:f1:c2:
0f:bb:e0:e4:fc:b0:70:04:d3:fe:c4:b6:55:b7:78:a9:82:70:
fa:4a:6e:8c:5d:1b:8f:f0:e4:73:dd:6c:97:d9:83:a3:e4:a9:
04:d8:47:16:19:00:f8:e1:29:fc:ff:8a:cb:67:10:84:01:b5:
58:f5:0c:e6:58:4f:af:81:f0:fb:fa:29:6c:5a:a8:70:12:2d:
36:7b:4d:1d:78:10:37:ff:aa:c8:20:5f:29:de:a0:af:a2:47:
83:b2:22:25:40:96:98:74:0e:72:a2:ea:69:03:ff:2a:e9:d2:
cd:d6:72:87:d0:cc:93:dd:d9:d7:b4:af:fe:41:95:ff:07:e5:
a4:1a:2a:e4:5b:55:ff:5a:97:15:b3:81:7d:96:e0:1c:da:59:
52:e8:bd:d8:e3:92:ef:a9:7a:7a:3b:51:7f:2b:22:2e:d6:54:
8a:dd:b7:5c:2b:37:61:8b:82:86:9d:23:18:37:80:d5:94:82:
34:00:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:47 2024 by rpki-client on console-ams.rpki-client.org