Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BXxvR7wwmaTshr7ClgUmkUCtcxk.cer
File: BXxvR7wwmaTshr7ClgUmkUCtcxk.cer (raw, json)
Hash identifier: idG0xeOVGF2aY/SD7+rYu8sxRXKxk9N2DC9Zc87E54I=
Subject key identifier: 05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571691BA9A4D35626D02C9C5332A1096B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48538
IP: 194.99.158.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:1b:a9:a4:d3:56:26:d0:2c:9c:53:32:a1:09:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=057c6f47bc3099a4ec86bec29605269140ad7319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e6:a0:5c:cc:47:7d:c9:4c:94:e6:97:cf:a5:
9d:3e:42:0c:30:3e:7e:19:e1:6e:cd:b1:60:95:3f:
5b:93:28:00:9b:3e:e0:d0:f8:d3:03:b4:5e:30:7a:
59:be:b1:a1:c3:e2:4d:d7:ad:54:5f:37:c5:f7:d2:
2b:29:aa:2a:81:d1:fe:ee:4a:07:4b:f0:29:e8:90:
05:df:e4:6d:54:d6:97:3b:fa:c2:e4:4b:b4:12:8c:
2d:bb:fa:a0:a6:f7:46:e3:54:78:ae:a5:ec:59:6a:
37:5d:64:4c:f2:3b:48:6e:0c:93:9b:56:ba:c5:66:
84:3b:93:6a:15:fb:f2:1f:9d:1a:95:30:08:2b:19:
46:9a:23:5c:99:4f:9a:d9:66:40:4f:da:47:6b:ea:
39:40:84:06:8c:8d:1c:d9:e7:96:ae:80:80:4e:62:
25:2b:0f:b2:59:54:4b:4d:81:3d:b7:56:81:68:24:
36:fe:73:89:bf:be:27:82:89:0d:3f:33:01:81:eb:
a8:ba:4d:ab:85:85:58:6b:ba:dc:ce:33:de:e4:78:
a8:f6:e6:3e:00:32:fd:d9:96:b6:ff:3a:f8:c8:c0:
c7:1a:0b:99:9e:02:bb:08:fd:a1:38:6d:27:3f:5a:
22:92:79:18:eb:5f:e9:63:3c:10:e7:52:0a:4e:ed:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:6F:47:BC:30:99:A4:EC:86:BE:C2:96:05:26:91:40:AD:73:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b6d95f-630a-4d80-80c7-4678e8855e6c/1/BXxvR7wwmaTshr7ClgUmkUCtcxk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.158.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48538
Signature Algorithm: sha256WithRSAEncryption
9a:a4:71:5d:ac:ad:b2:83:b6:71:81:3b:82:47:a0:c0:b4:d2:
7e:32:ce:7c:39:e0:50:48:f5:26:30:4b:25:98:f6:df:fa:20:
ce:33:7d:e0:1e:d0:cf:85:73:a5:f7:20:46:f8:f5:21:3e:8a:
38:55:7d:97:fa:41:89:bf:bf:59:b1:81:85:2d:ee:10:a2:ce:
05:b7:17:8e:2b:d4:ff:97:76:7c:15:ab:da:3c:9e:94:3a:0a:
b3:fb:fc:69:9e:b6:72:0b:dd:11:15:08:09:ac:a2:b7:01:f4:
b9:08:e1:0f:e8:3e:dc:3e:46:23:f4:fe:d0:f4:68:7a:8e:c2:
49:3c:e8:7f:4e:29:9a:a2:9a:f6:aa:f5:0d:f7:bb:a3:ec:63:
df:15:f5:fd:49:04:bb:fa:68:aa:50:17:51:e9:56:de:fc:25:
5d:0c:68:d9:2d:62:dd:8f:f5:ab:d7:1d:89:77:a8:77:9d:bb:
b8:dd:74:c6:be:be:59:14:8d:aa:66:70:a2:a4:14:a9:66:b7:
22:2b:76:ac:61:40:05:6b:85:69:45:2e:23:20:3e:f4:ad:54:
08:f8:60:8a:d7:10:c9:08:2c:c6:ba:a2:f5:4d:b2:0f:7e:7d:
8a:55:72:ce:c2:01:e4:10:74:ad:23:f7:76:ea:33:dc:3e:1c:
9b:fa:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net