Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
File: yu7S4btQUEmts5iEQ2zyyz50UiQ.cer (raw, json)
Hash identifier: tIzayGvaADxCfJGjzO7X4thgPNY9WWPCFWBL6P2fE+w=
Subject key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F05A3D5F4C6D61D1E7233B27CA9727FA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 22 Apr 2024 11:49:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.106.66.0/24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 11:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:a3:d5:f4:c6:d6:1d:1e:72:33:b2:7c:a9:72:7f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 11:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:cc:72:72:5c:a1:71:1e:29:45:65:4e:02:
b9:e3:0d:66:0b:a3:f7:4b:c3:04:1f:3c:ef:11:5a:
e0:1d:1a:0c:42:27:fc:25:df:b4:ef:b1:66:9e:28:
36:95:16:21:85:fd:b9:05:de:a5:6b:0e:99:a4:af:
cb:4a:50:28:aa:99:81:7c:02:d4:de:6f:5d:7c:16:
f3:d1:bf:86:2b:3c:3f:90:28:42:1f:30:8a:7e:d1:
04:6a:fd:3c:94:b2:f7:38:db:64:d1:0c:f2:ef:a9:
13:e6:5b:cb:60:c8:08:77:d6:60:af:63:45:12:ec:
29:69:16:35:11:0e:0c:c7:b6:68:00:94:c0:f3:1c:
28:e4:39:bf:36:53:58:8b:08:75:55:57:54:50:99:
ef:0b:d4:42:6f:3e:17:90:0a:2a:e2:8e:99:1d:c2:
cc:7b:bf:48:68:02:d6:81:7d:66:6d:de:22:dd:6d:
ff:14:aa:b8:79:bf:5a:ea:aa:91:81:96:dd:dc:76:
90:f9:5d:c7:5a:39:b1:10:fd:68:4c:f9:fb:8c:8a:
ed:ec:d5:7c:15:e8:7a:56:72:c8:bf:36:87:5e:8a:
28:da:5b:dc:da:3c:9c:f3:44:a2:fd:3f:93:72:0a:
67:44:9c:83:e0:44:b6:23:00:80:cd:23:1f:f0:98:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.66.0/24
Signature Algorithm: sha256WithRSAEncryption
32:fc:2d:1b:a4:c9:6c:8c:d1:20:78:11:20:96:84:93:c0:b1:
09:47:ff:35:ec:54:da:3a:19:3f:54:f8:48:16:b4:36:91:3a:
7a:54:5c:75:ec:1f:32:f5:ed:d7:9a:bd:f7:07:45:e3:ab:e4:
d1:a6:20:5c:03:17:d4:c6:be:8a:49:b9:6f:1c:e0:17:a0:d6:
36:21:90:1e:c6:a6:07:38:88:d3:0b:7d:39:90:8e:19:00:8d:
86:be:7b:6e:24:37:e6:10:6d:3c:ad:0b:72:90:bf:40:d9:38:
10:f6:fc:e4:e9:2a:f5:b5:64:b4:be:59:70:42:ca:24:9d:85:
c9:49:1a:9e:f1:3c:d6:32:55:e8:b0:d9:47:f5:db:3d:42:b2:
82:64:0e:1d:9d:de:66:77:53:b6:58:ce:d1:ee:3e:5c:ea:d4:
fc:0b:fc:45:f8:26:c8:8b:67:c4:1e:83:85:85:66:44:b5:82:
f8:ac:55:a2:3d:87:81:d5:51:1f:c0:11:4e:7b:d8:57:32:7f:
6d:89:89:b8:84:5d:64:5a:a3:2d:79:c3:b8:07:a0:de:6d:7d:
b1:4b:76:69:e0:3a:b9:0e:b3:28:34:90:3e:00:04:96:9b:f5:
47:18:4c:5f:63:de:65:a6:54:8d:a3:0e:8f:39:d6:ea:a2:1e:
7e:fc:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:49:16 2024 by rpki-client on console-ams.rpki-client.org