Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zWYlIc5x7GBLuPnT3AQiP0EsVgo.cer
File: zWYlIc5x7GBLuPnT3AQiP0EsVgo.cer (raw, json)
Hash identifier: diRpU6iq/qOgvStZw+uwH29B1MA/p+jOG40kOZBMt5A=
Subject key identifier: CD:66:25:21:CE:71:EC:60:4B:B8:F9:D3:DC:04:22:3F:41:2C:56:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D0C9724D0E4A1F86C27C7E637662FE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/CD662521CE71EC604BB8F9D3DC04223F412C560A.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 16:59:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.5.128.0/24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 11:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:0c:97:24:d0:e4:a1:f8:6c:27:c7:e6:37:66:2f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 16:59:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd662521ce71ec604bb8f9d3dc04223f412c560a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:64:45:a8:15:48:44:f2:54:3f:cc:3c:06:
cf:6e:f1:aa:ea:21:74:56:34:d3:1f:aa:16:d8:73:
f4:95:61:ee:90:ec:72:8e:51:8d:7f:3a:43:5d:26:
c1:4d:e2:4d:1d:68:d6:ba:ad:d9:ba:89:69:b0:45:
d7:af:ac:43:dc:42:d5:8f:e2:f2:27:7c:60:55:85:
c4:58:0a:2d:8c:ac:ab:3b:70:1a:d6:e0:26:37:90:
54:fe:91:a3:e0:71:4f:4c:78:55:cc:e1:9e:2b:b1:
fc:62:45:90:59:f8:8c:19:2e:fb:21:4a:2b:1f:59:
16:2d:e4:77:85:69:2c:8d:c3:ef:3b:90:a5:79:0f:
6c:dd:09:f2:b7:f5:1a:8f:28:28:2a:8b:8b:21:2d:
2f:84:8c:82:54:b5:c4:be:96:ed:2a:c4:36:f9:0b:
cb:4a:92:91:c0:05:e9:16:e1:65:3d:2b:ed:55:44:
2a:d0:d3:a9:cd:44:d9:fa:21:7b:32:dc:56:8d:f8:
f6:ca:42:6f:ad:ef:23:9d:42:87:d6:2a:ef:1f:63:
85:59:06:fe:06:5a:d8:e6:c4:f6:df:82:ab:c0:5b:
bb:6b:65:4d:24:75:52:b3:c5:51:10:79:2f:d5:a9:
4d:1f:97:2a:d6:02:62:86:2d:7c:22:b1:40:ed:06:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:25:21:CE:71:EC:60:4B:B8:F9:D3:DC:04:22:3F:41:2C:56:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b5d639bc-9931-445b-89d9-bcb1a617358a/0/CD662521CE71EC604BB8F9D3DC04223F412C560A.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.128.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8d:a6:6f:09:57:ab:b5:d5:a1:1c:de:17:22:96:71:50:d1:
1a:b0:b7:4b:a3:34:e1:f8:76:ae:3f:70:9e:5a:df:90:1f:b8:
25:ad:05:2e:5a:73:55:8e:10:a9:17:f9:f5:7a:45:9f:b0:b3:
4f:5f:91:aa:74:e8:91:92:b3:95:9f:20:06:3b:45:ca:f3:b2:
9b:d8:f5:ca:90:65:7c:ce:99:89:48:ff:5e:d9:3e:ba:a4:3f:
50:9e:21:9e:13:d2:46:ae:5b:c7:5d:66:bb:af:b4:4e:b0:f0:
5d:b1:e9:db:10:a6:c0:20:13:e5:bd:c3:2f:f5:f0:22:d6:a6:
ab:2e:68:0f:a8:28:07:c3:a0:88:41:22:53:1d:fe:3f:80:2e:
65:d1:3d:05:01:00:ab:e6:32:9b:85:3b:07:0e:c4:a5:1a:30:
e9:c1:9a:03:4c:b8:f1:fa:bf:01:04:54:3c:36:89:f9:32:ee:
82:8b:48:8e:5c:d8:05:2f:a8:5e:58:19:0c:7e:ad:d2:ea:a6:
e7:45:b7:b6:90:9a:5b:04:67:92:f9:bf:34:ec:0d:00:a1:98:
dc:ae:3c:68:3f:dc:f3:48:5d:e4:6e:b3:e1:99:0f:11:fd:0d:
46:01:b8:4c:52:76:16:6b:4f:b6:62:b4:e7:91:95:3d:ce:a3:
47:41:4d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:18 2024 by rpki-client on console-fra.rpki-client.org