Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ydO3JgIQg036xB8VhaHgogVQZa4.cer
File: ydO3JgIQg036xB8VhaHgogVQZa4.cer (raw, json)
Hash identifier: wLunYW16dN+/rfpEGAdmdxUU++VBjm5M8fKRAtOyrTw=
Subject key identifier: C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187482989F5CB2662C7D5DD79735370E52B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 03 Apr 2023 17:28:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.128.12.0/22
Validation: Failed, certificate revoked on Wed 05 Apr 2023 07:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:29:89:f5:cb:26:62:c7:d5:dd:79:73:53:70:e5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 3 17:28:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9d3b7260210834dfac41f1585a1e0a2055065ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:a3:b1:3d:2a:6d:0f:68:c2:86:f6:ef:46:
87:59:bb:41:2c:00:12:f2:75:9e:ee:9a:ca:5c:85:
6e:ba:ce:bc:96:47:ee:7f:10:60:03:5c:e0:a2:58:
05:0d:31:c5:0c:05:f4:8f:08:09:0a:b1:8a:dd:1d:
e2:b5:96:3d:ff:04:08:57:b1:b1:dc:b5:fc:95:63:
1e:b0:8b:d7:40:09:10:a3:c6:d7:df:fb:ee:dc:1c:
be:70:63:c2:65:14:dc:24:a8:69:ec:15:a6:3e:78:
13:b8:e6:64:49:85:34:2d:60:de:aa:60:fd:e2:68:
45:04:7c:4a:37:57:ba:e2:d1:fa:78:cb:7c:1d:f3:
de:fd:ac:05:32:9e:bd:10:e0:cf:e1:b8:e6:2b:7d:
64:96:64:da:1b:d2:21:7d:46:53:c0:00:c4:9d:c5:
48:ed:9b:e3:0a:dd:43:15:32:f6:1c:8f:fa:81:39:
f7:11:a7:ce:99:9d:91:3f:49:5e:d1:33:46:ec:24:
77:2e:2f:8d:b6:60:a2:00:10:80:18:91:92:94:0c:
77:3a:a6:aa:9a:5b:6d:e3:b3:22:c3:90:77:81:53:
b8:87:2b:14:f5:61:2c:59:64:3b:ac:9e:78:cb:17:
94:70:0f:a4:6f:4f:f8:40:79:86:4f:bd:c7:85:32:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D3:B7:26:02:10:83:4D:FA:C4:1F:15:85:A1:E0:A2:05:50:65:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/23fd73ed-1860-4eef-bc29-516c705dd2af/0/C9D3B7260210834DFAC41F1585A1E0A2055065AE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/22
Signature Algorithm: sha256WithRSAEncryption
19:e1:b4:b5:d7:6c:e6:6f:f7:8e:0f:43:f4:bf:91:6b:d4:d9:
f6:23:55:c8:e7:da:29:db:45:6e:dd:0b:0a:a7:11:75:06:9e:
47:05:ba:6c:b7:2b:bb:bd:d1:54:64:9c:b8:97:cd:4f:7e:df:
22:d0:13:8d:56:1d:05:2e:87:4a:70:b3:f6:c4:62:c0:87:6a:
b5:42:51:0d:57:ab:99:db:09:67:47:0a:50:76:61:fe:89:7d:
29:13:0b:16:61:85:dc:18:f2:04:c8:cb:27:80:f6:0a:7a:45:
a7:e0:74:ea:16:51:56:80:29:9c:9a:50:41:13:33:df:95:df:
ce:0e:0f:9d:a5:85:25:32:a6:91:f9:33:07:87:eb:62:d5:e9:
54:16:a4:8c:53:a7:e5:43:b2:85:4e:c3:69:7b:4d:c2:c8:f4:
ba:5a:3a:86:fb:47:39:dd:aa:99:53:a4:ec:d3:30:a2:25:3c:
be:1b:18:43:28:de:28:ca:b1:65:81:f8:4e:db:8e:41:ce:bd:
1a:db:d5:c9:62:de:4b:86:93:4b:f9:bb:5d:73:bd:9b:c5:fa:
89:c1:36:f5:49:ce:61:5c:5b:59:0b:c1:a4:63:6d:5b:b6:e9:
da:87:f9:81:41:f4:7f:4c:91:34:29:75:87:84:ae:0e:47:98:
39:f8:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:10 2024 by rpki-client on console-fra.rpki-client.org