Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
File: 9EV_vhDrKubg-Nx-pi1w8zFsNds.cer (raw, json)
Hash identifier: MIn0a2gplH/LzU9ReCnUC2U7fGFP+th6iYu+hlZrnbc=
Subject key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BBED42CFB46A9D4E57844A3E448044
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 109.205.191.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ed:42:cf:b4:6a:9d:4e:57:84:4a:3e:44:80:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:55:8f:ad:be:62:4a:4d:e3:d4:9c:31:47:
d9:34:67:b6:06:b8:31:f6:0c:2c:cf:8c:25:e1:ac:
f4:71:61:86:bc:b2:0e:c6:64:72:5e:ad:17:22:66:
3d:05:f0:80:b7:7f:2e:13:38:91:24:4a:9e:ba:8f:
b6:85:a9:d2:40:c9:d8:86:ee:b7:c2:47:4e:35:1d:
aa:30:e8:3c:8f:c1:68:ac:f5:98:76:0e:bb:7a:76:
43:78:6d:bd:1c:4b:37:cc:32:e6:6f:3f:fb:65:c5:
c8:49:6d:f3:40:3b:10:e1:09:50:51:ea:3a:ea:70:
5f:76:68:7e:d8:b9:00:6c:b4:21:96:1b:ea:d7:66:
f8:fb:a2:59:0b:55:12:2e:dd:9c:a9:c7:0d:d4:be:
be:ff:e5:58:3f:36:0d:84:5c:c2:34:d8:a3:11:a7:
5e:20:30:b2:7e:dd:2f:59:9f:92:8f:0f:55:1e:bd:
69:0a:7b:e7:25:52:d1:41:a0:1e:da:f7:aa:5e:b4:
70:c2:7f:96:31:58:6c:d2:3e:28:8f:d4:e1:48:45:
d7:ee:e2:67:ab:09:d3:16:90:0a:8f:83:39:28:1e:
6a:cd:0e:e4:ec:96:78:f3:e5:ca:e4:f8:8c:69:b8:
69:1f:88:29:17:e8:90:87:c1:87:5a:a3:b5:4d:d3:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ae:af:d3:3a:97:5d:c8:45:bc:6c:7e:2a:0c:5c:20:a6:2f:
5f:3d:73:27:9a:0c:6a:06:ca:48:e8:99:f6:12:d8:13:f1:fb:
e2:32:6b:ec:6a:e9:9d:55:af:51:78:95:45:5d:11:59:1a:56:
5a:44:81:7a:7e:54:72:f3:41:ba:1f:a5:00:c5:1f:4a:4f:28:
f8:a8:69:24:b9:74:cc:b8:88:66:45:d7:0a:65:e2:a3:de:77:
58:53:0e:19:8a:a2:db:26:29:fc:e5:d8:b0:5e:a6:36:6d:64:
a3:75:2f:a3:c3:d8:78:09:59:6f:bb:7f:b0:e4:5b:97:6b:c0:
d6:a9:0a:53:86:17:ce:4b:44:e7:10:04:db:8e:de:48:ea:5d:
02:51:32:f8:72:d7:f4:bd:38:dc:b7:17:92:ce:77:a5:7c:04:
65:5c:b0:d2:36:2e:0b:d6:2c:8f:70:fc:1d:3e:b2:1e:2d:d4:
d7:46:11:f4:7e:ba:05:e0:eb:47:94:27:04:d6:7c:a0:a8:f7:
f6:dc:b8:af:9f:70:04:df:88:70:15:6b:2b:5e:44:10:3e:e4:
69:e8:7d:3b:2c:83:2a:43:07:81:34:ae:f6:e6:fc:ba:dd:8b:
aa:f8:d8:d6:18:88:3f:05:a5:88:60:2e:71:c4:50:f4:3f:d1:
3d:cc:d6:f3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzJu+1Cz7RqnU5XhEo+RIBEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQ1N2ZiZTEwZWIyYWU2ZTBmOGRjN2VhNjJkNzBmMzMxNmMzNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi1Vj62+YkpN49ScMUfZNGe2Brgx
9gwsz4wl4az0cWGGvLIOxmRyXq0XImY9BfCAt38uEziRJEqeuo+2hanSQMnYhu63
wkdONR2qMOg8j8ForPWYdg67enZDeG29HEs3zDLmbz/7ZcXISW3zQDsQ4QlQUeo6
6nBfdmh+2LkAbLQhlhvq12b4+6JZC1USLt2cqccN1L6+/+VYPzYNhFzCNNijEade
IDCyft0vWZ+Sjw9VHr1pCnvnJVLRQaAe2veqXrRwwn+WMVhs0j4oj9ThSEXX7uJn
qwnTFpAKj4M5KB5qzQ7k7JZ48+XK5PiMabhpH4gpF+iQh8GHWqO1TdPq+wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPRFf74Q6yrm4PjcfqYtcPMxbDXbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzk0NWYw
ZS0yNjhlLTQ5NDctYWJiMy1hOTQyNGQ5NDgyNTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvOTQ1ZjBl
LTI2OGUtNDk0Ny1hYmIzLWE5NDI0ZDk0ODI1MS8xLzlFVl92aERyS3ViZy1OeC1w
aTF3OHpGc05kcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAbc2/MA0GCSqGSIb3DQEBCwUAA4IBAQCarq/T
OpddyEW8bH4qDFwgpi9fPXMnmgxqBspI6Jn2EtgT8fviMmvsaumdVa9ReJVFXRFZ
GlZaRIF6flRy80G6H6UAxR9KTyj4qGkkuXTMuIhmRdcKZeKj3ndYUw4ZiqLbJin8
5diwXqY2bWSjdS+jw9h4CVlvu3+w5FuXa8DWqQpThhfOS0TnEATbjt5I6l0CUTL4
ctf0vTjctxeSznelfARlXLDSNi4L1iyPcPwdPrIeLdTXRhH0froF4OtHlCcE1nyg
qPf23Livn3AE34hwFWsrXkQQPuRp6H07LIMqQweBNK725vy63Yuq+NjWGIg/BaWI
YC5xxFD0P9E9zNbz
-----END CERTIFICATE-----
Generated at Tue Jan 2 16:36:44 2024 by rpki-client on console.sobornost.net