Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
File: 3Hc0gOtB_byBdNSK8JxrfwidE0k.cer (raw, json)
Hash identifier: U6Me0GmNEL9rA0QZkSzVqqsuqOJ+9UXYSrI4uSIHXgM=
Subject key identifier: DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD7DD6B2D2CB1C69F8045ED4BDEC0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.232.232.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:7d:d6:b2:d2:cb:1c:69:f8:04:5e:d4:bd:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:c0:30:f0:a4:a1:09:8e:81:38:de:b5:59:
74:51:49:e5:e9:0e:8d:e8:87:91:61:17:3e:42:ed:
8d:80:97:93:4d:0d:be:cc:36:01:b7:ad:ae:54:5b:
f9:86:7c:b4:45:c9:56:79:3e:15:91:80:c4:d2:65:
81:75:9d:b2:90:ab:52:f3:09:ac:79:c7:37:ca:ba:
5f:df:5a:a7:5e:e2:0d:85:c6:e3:c9:35:62:4e:2d:
ca:99:db:14:a2:f7:cc:63:72:d6:6b:9c:d4:dd:34:
e4:7a:ee:04:1d:d7:d6:60:45:57:01:a1:4c:43:1b:
7c:47:c3:1a:1d:d9:49:58:64:d1:ed:23:ef:2f:1f:
af:f8:72:11:15:fd:71:06:4d:47:73:58:4c:63:2f:
25:3f:6f:dc:aa:a5:48:f4:cf:ee:84:11:45:49:59:
a3:9c:a0:a2:a0:39:9c:f9:e9:41:b8:6c:da:7f:fc:
7e:8d:cc:62:10:9b:93:07:2f:30:af:e0:52:df:af:
52:7e:27:dd:5c:39:0f:74:7e:ab:3c:b9:8b:de:10:
c5:9f:a6:7b:89:be:2d:b9:81:00:c5:4c:4c:82:a6:
d0:50:6b:4a:b3:67:eb:62:83:71:a2:9c:4e:76:89:
e5:67:e2:9b:e6:e8:6b:86:f7:6a:a3:95:dd:bc:c8:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:49:13:ae:ec:f9:c8:69:1e:0e:6b:32:b2:07:97:6f:07:f8:
a2:4c:da:90:7a:db:82:54:30:29:08:c7:c0:56:20:37:ac:b7:
3e:66:a3:70:4e:d0:3d:dd:c0:ec:ed:a6:70:04:90:f9:c8:5b:
90:86:b4:1e:c6:f9:aa:5f:dd:62:6a:60:76:78:28:80:6b:99:
fd:1c:11:8c:83:b0:23:a7:e0:7d:d8:ca:b6:a4:3d:53:2e:6b:
2d:37:a1:a4:7d:c6:38:f3:5b:8d:a4:8c:95:ad:4e:27:d5:fc:
5d:7d:fc:3b:c7:25:eb:68:a4:c9:ee:4f:fa:62:1e:92:c2:66:
a7:4d:f6:b2:96:b3:26:c0:79:c1:01:05:6c:fd:34:89:8b:2f:
e5:30:b9:c8:00:60:3f:e4:4f:8b:86:0d:92:31:07:ee:35:dd:
bb:c5:d5:f0:69:38:be:c6:93:e7:38:09:73:88:87:20:ff:d8:
bd:85:67:45:23:55:3a:53:61:c6:99:7b:2d:01:c8:49:41:71:
71:09:2b:d3:16:6d:8f:ef:18:17:3c:f0:c0:15:64:00:34:16:
db:0f:01:fe:bc:32:36:54:d1:51:fa:27:3c:4c:59:7e:be:f9:
e0:d7:41:5f:fd:79:70:2c:e3:44:05:76:4f:c3:a9:8d:e5:97:
05:ce:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:49 2023 by rpki-client on console.sobornost.net