Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcrmoB2FSr35JW3MJClhfVXwO9k.cer
File: pcrmoB2FSr35JW3MJClhfVXwO9k.cer (raw, json)
Hash identifier: nb/hpCYUP+X2Y0AycyJP3MFohItN2omUeA59y8s1MZ0=
Subject key identifier: A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B7ABC58A840F90154C9DB72143F457
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:35 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.187.18.0/24
IP: 2a12:df80::/29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ab:c5:8a:84:0f:90:15:4c:9d:b7:21:43:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5cae6a01d854abdf9256dcc2429617d55f03bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:92:68:26:01:a6:3d:65:cc:f4:05:35:6c:4a:
02:f0:e2:6e:d4:8c:65:4d:82:ee:80:6a:18:df:d6:
0f:0a:6a:ea:ae:01:cd:e1:0f:ff:cd:9c:43:bb:07:
57:75:3f:60:45:30:3f:5f:83:ec:f1:be:e0:ee:18:
c3:53:93:65:6f:dd:37:fe:1f:c8:e6:d1:6d:4a:51:
01:bc:8a:ac:2d:40:81:21:7a:e1:9b:c9:2f:ef:4f:
cf:8d:b5:8d:45:04:7e:e6:b9:82:ab:e8:ef:62:ae:
4b:07:39:15:79:c9:2e:d5:99:3b:4c:3d:b9:0c:8a:
f4:e9:03:8b:96:47:fd:d8:f6:b2:02:80:6c:88:22:
3a:05:28:39:6b:4e:4b:5c:5a:ab:57:2e:f3:1e:c7:
9e:33:b4:4b:b0:bb:9d:62:18:ee:b4:97:9f:83:25:
6b:1d:a1:4e:36:4c:8f:d8:07:1c:38:b2:49:b7:15:
aa:01:91:be:7d:1d:af:29:ad:ed:22:59:71:d0:ae:
07:d5:b6:ac:ca:fb:5d:aa:47:96:bf:cf:14:a9:bb:
86:e6:b5:3f:94:70:f5:ea:34:81:11:37:a9:95:77:
30:f1:d2:ac:b9:f7:42:52:9d:dc:ed:c3:41:1b:af:
bf:d9:3e:f7:f2:f6:2c:95:f7:f9:ba:a1:ae:03:27:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CA:E6:A0:1D:85:4A:BD:F9:25:6D:CC:24:29:61:7D:55:F0:3B:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b73781-247e-41f8-ba33-93f2860a212b/1/pcrmoB2FSr35JW3MJClhfVXwO9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.18.0/24
IPv6:
2a12:df80::/29
Signature Algorithm: sha256WithRSAEncryption
30:c1:57:c5:86:70:68:da:c1:18:2b:3c:ee:54:c0:5f:7f:f3:
16:a5:3b:e0:06:74:64:b6:8e:6c:36:81:77:61:ac:c9:83:3c:
3e:18:cb:b6:f9:ff:a6:e1:b3:41:16:2d:18:0f:10:b3:47:fa:
e0:40:e3:af:1f:63:bd:a8:72:db:e4:6f:fd:ef:66:0c:fe:81:
c0:35:1f:62:0d:2b:8b:58:90:c1:c4:b7:50:71:ab:90:5e:82:
44:67:6c:93:67:bb:69:72:44:41:39:45:ab:9d:d0:3c:ff:9c:
52:ce:16:70:11:68:20:bd:b8:a4:d6:5f:47:8c:f2:f3:45:84:
80:b8:74:2c:0a:3d:21:2e:68:50:41:6f:a2:9e:07:f5:f6:4f:
e0:c6:ea:a4:e6:ef:b5:70:59:2b:58:78:a5:8b:ca:9f:af:7e:
39:1f:67:6a:f4:2e:9e:de:78:61:04:85:c1:e8:bf:96:99:97:
41:d2:2a:21:a1:f7:dd:da:d6:36:cc:6d:0b:1c:30:2c:55:bc:
17:d4:e0:94:f4:7a:88:c1:2b:6a:c8:bd:00:1a:67:43:54:0e:
95:2e:66:dc:33:77:91:59:06:83:5d:80:2a:8d:94:49:1b:85:
93:3b:b0:0c:36:e5:7e:65:c0:5c:ac:a0:a6:f3:e0:43:30:33:
35:6f:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:44 2024 by rpki-client on console.sobornost.net