Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8PWqOlzY8eBubz-TzTx71Y-R05Y.cer
File: 8PWqOlzY8eBubz-TzTx71Y-R05Y.cer (raw, json)
Hash identifier: lTe6JGEJlRvQRWzv1P/1D5UtzYm7RN2+4S8XIRHm0I0=
Subject key identifier: F0:F5:AA:3A:5C:D8:F1:E0:6E:6F:3F:93:CD:3C:7B:D5:8F:91:D3:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC34922E150EB1FB1AC715A1F445D272D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4/F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:59 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211142
IP: 185.83.229.0/24
IP: 2a14:4a80::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:22:e1:50:eb:1f:b1:ac:71:5a:1f:44:5d:27:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0f5aa3a5cd8f1e06e6f3f93cd3c7bd58f91d396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:a9:e4:43:34:99:2a:4f:6e:c9:04:e4:01:
bd:9d:5a:b4:fb:a5:b7:0e:e2:61:04:6a:2f:ae:d1:
32:6d:f5:6d:80:a1:24:f7:47:c8:d5:bf:31:f5:98:
b1:84:9b:69:02:64:62:60:e2:7a:7e:09:c6:61:6e:
cd:1d:a7:2b:2d:08:30:10:aa:08:55:a0:02:26:de:
39:5c:f4:a0:1f:2b:90:a9:24:74:0b:11:16:f4:17:
fc:74:84:8a:a9:74:20:80:a4:72:0f:ec:c6:78:91:
86:a0:fe:51:98:df:80:0e:94:15:3b:14:e3:3b:06:
4e:e5:33:aa:1b:fb:a7:aa:0f:80:15:34:9f:18:bb:
66:64:26:50:c9:a0:3a:d9:53:77:d0:f4:ff:fe:ca:
14:1f:54:8b:a8:a6:b3:e5:23:91:6a:ce:d2:b4:0f:
2b:83:07:78:83:8a:86:2c:fb:3f:1d:70:52:65:58:
4a:87:5f:90:29:4e:b8:b1:40:4e:14:1e:4d:63:4e:
6d:18:d8:37:60:b4:fc:ab:20:e3:96:0f:bb:b1:77:
d9:45:d2:70:94:73:de:0a:4f:81:9a:cb:96:29:e8:
13:fb:62:02:5a:88:c7:dd:5f:21:fc:56:a3:0c:f8:
b1:97:b1:fb:7a:da:29:05:95:b1:d6:fe:a3:89:a2:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F5:AA:3A:5C:D8:F1:E0:6E:6F:3F:93:CD:3C:7B:D5:8F:91:D3:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/4/F0F5AA3A5CD8F1E06E6F3F93CD3C7BD58F91D396.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.229.0/24
IPv6:
2a14:4a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211142
Signature Algorithm: sha256WithRSAEncryption
2f:b1:0c:a0:d1:4f:c2:f3:29:f1:ab:8d:52:e8:12:82:99:ae:
7a:b8:95:f9:17:d3:79:f8:4c:aa:01:55:63:02:6c:0e:95:15:
a3:d5:ac:39:cb:63:04:74:fe:43:89:88:6f:68:97:09:3c:bc:
40:8c:ff:ef:d9:2e:4b:e4:a6:5f:3e:49:4b:76:b2:21:af:57:
e8:b3:f8:04:9b:2c:86:92:be:4d:b4:d0:96:85:a3:26:22:6d:
0c:3f:a0:8d:5f:a4:eb:f1:54:82:9f:02:d9:5e:65:76:ac:bc:
d0:83:cc:b1:da:18:62:28:fe:18:fc:d8:ab:55:6a:dd:cc:e8:
52:4c:79:5d:b2:14:69:29:29:09:22:f8:b7:d1:ce:41:4b:57:
c7:50:cc:9d:83:23:ef:cd:33:16:bc:98:08:88:ac:73:96:f3:
1a:d0:4e:04:36:f2:eb:da:a0:94:7d:2c:03:26:8b:1b:58:4a:
cd:3a:ee:8a:59:22:ce:47:ef:fc:4a:17:e6:4c:4a:e7:07:7f:
ea:29:1e:00:24:21:22:c7:f0:31:4b:e4:59:fb:6c:6f:5c:1e:
65:88:77:cb:86:de:4b:b1:1a:47:a3:79:11:94:bf:ba:38:87:
4e:ce:83:58:73:1b:7e:36:c0:20:12:8d:86:e2:49:cb:c2:97:
0c:0c:36:39
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 2 18:43:53 2024 by rpki-client on console.sobornost.net