Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.cer
File: Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.cer (raw, json)
Hash identifier: Y8Nosaz96MpcSnk9tFp30E4pbrK1VMt/LHXUi4O5xgc=
Subject key identifier: 06:1E:25:89:AF:DB:DE:A5:82:30:6F:13:C9:83:CF:24:E5:D9:E9:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B50E809E825817539846E75514EB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.211.171.0/24
IP: 2a12:d40::/29
Validation: Failed, certificate revoked on Tue 12 Mar 2024 10:54:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:50:e8:09:e8:25:81:75:39:84:6e:75:51:4e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=061e2589afdbdea582306f13c983cf24e5d9e94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:59:02:d3:22:d0:38:c7:5a:bf:86:bf:ea:
f2:9c:48:8c:4f:d4:0d:b2:bc:23:ad:67:7f:3a:87:
b3:39:81:05:2f:63:87:19:a5:b0:3f:a5:e1:30:6d:
2e:26:96:fa:f3:3d:61:7f:08:27:d0:f9:f4:fa:1f:
1c:f9:6b:d4:24:16:0f:27:b3:97:52:fd:86:38:89:
8e:d7:fd:0d:a4:a4:c3:35:0c:83:cd:ab:b1:0c:dc:
56:68:7a:10:bb:39:8a:4a:85:6c:bb:2c:71:68:b2:
2b:4a:99:ff:3d:21:65:43:dd:93:96:12:40:bf:42:
c3:87:ab:3e:c0:44:ce:36:4a:7e:5b:54:d1:24:bc:
56:31:26:e4:d8:d8:88:99:2c:a3:33:98:50:a5:63:
86:a0:ad:43:7f:b1:ec:d2:7e:1e:aa:75:95:ea:84:
f6:db:ac:01:d7:62:ba:a3:42:a7:8a:65:95:e7:fe:
49:e4:3c:16:2b:3f:9a:7a:9d:1f:fa:b6:51:ef:08:
e2:ca:b3:b2:b8:d3:06:37:e2:c9:ac:56:24:fc:80:
d4:d8:e2:9f:93:71:5c:3d:19:a5:88:cd:0e:6b:67:
89:65:8e:e6:5d:5e:87:a7:da:be:78:0f:5b:4d:ac:
cb:10:93:82:dd:26:3c:1c:07:94:1e:6d:ee:2a:9b:
ce:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1E:25:89:AF:DB:DE:A5:82:30:6F:13:C9:83:CF:24:E5:D9:E9:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7f7b6c-4e00-47ea-83fe-6a1e923cb3b0/1/Bh4lia_b3qWCMG8TyYPPJOXZ6Uw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.171.0/24
IPv6:
2a12:d40::/29
Signature Algorithm: sha256WithRSAEncryption
88:25:b7:c4:f5:58:af:e9:e6:9a:89:da:1f:2d:45:b5:03:26:
89:61:e7:a3:1f:fd:96:97:e7:9e:41:3c:5f:2c:93:de:02:1f:
52:c4:5b:0c:d6:ca:8f:45:e5:01:06:50:49:0a:74:1b:c2:30:
98:b2:a8:24:95:29:3b:9f:c3:02:0c:0e:d6:19:86:38:8e:b5:
be:78:dc:4e:e1:34:c3:cd:86:58:4f:5e:4f:28:01:3c:01:9f:
16:ee:ab:fc:5d:ea:2b:4b:f4:85:ad:7e:4e:08:a4:67:ce:fa:
09:1e:e3:59:86:42:32:91:d9:47:88:d4:5a:89:0e:a3:2b:f5:
a7:24:e7:00:58:5b:d7:83:5c:84:4f:d3:2e:ac:a8:71:01:4f:
9c:6f:28:bb:e2:c1:5b:ca:85:e1:04:9d:a0:96:a5:7d:8a:b2:
97:ab:f3:93:c8:39:b2:fe:42:ab:5d:02:6c:01:a1:8d:96:2e:
15:17:2e:d5:51:1e:c0:3a:44:ac:fa:a2:24:56:da:d0:51:62:
75:f9:14:2f:ab:6b:9e:24:7a:92:3b:34:1e:72:ee:9a:c3:ed:
bd:fa:61:d8:57:8f:7d:37:7c:80:0f:a7:53:42:6b:60:09:f0:
9e:b6:95:91:b4:45:17:26:dd:00:2e:dc:9d:37:65:20:6b:95:
b8:36:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 15:26:18 2024 by rpki-client on console.sobornost.net