
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer
File: DkZF5B-uqNgmQ9GkotxNsmBPL3s.cer (raw, json)
Hash identifier: ZyPaBHgMcCJiaS7INm4moGI6h7E+5WeBaXaX7r1L5sA=
Subject key identifier: 0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65E47F13FA637BC77632A5E52305CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:34:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.156.128.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:e4:7f:13:fa:63:7b:c7:76:32:a5:e5:23:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e4645e41faea8d82643d1a4a2dc4db2604f2f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:75:53:1f:f3:5b:01:7e:cb:c1:e4:2c:36:4b:
88:f2:33:17:91:48:ee:06:80:05:61:96:b4:54:0d:
4e:aa:08:a6:0c:75:01:c2:8f:b1:5c:e6:de:cd:95:
23:58:a1:03:32:76:a8:bc:24:ed:f0:3b:ea:03:e7:
66:e2:93:51:42:99:6b:37:44:7c:8d:89:26:83:e8:
42:c6:1f:12:9e:6d:9a:e5:a6:be:67:7e:40:57:1d:
18:9a:93:e6:50:ac:c2:ba:ec:c4:fb:d3:69:dc:9c:
7c:76:ef:7b:77:4f:cd:d5:a6:a3:5e:0c:61:8d:0f:
16:d5:66:b4:ff:1e:ab:74:9f:3b:9e:0d:c9:34:c1:
65:9e:cb:e0:bb:1f:93:34:c4:4f:08:a9:94:92:a4:
c5:84:35:c5:c1:f6:4c:8c:a9:4f:08:0f:b4:df:8b:
cb:db:7e:20:20:1b:a7:92:49:ac:00:44:7d:e2:74:
ec:e9:05:66:80:38:f0:4a:c6:2c:6c:5f:63:a6:1a:
a5:9d:fe:b2:3b:b5:51:8c:a8:4c:1a:dc:19:21:f7:
5e:d2:09:30:ba:d5:b0:a7:53:99:b8:d2:5c:fe:7a:
37:16:51:41:e5:30:98:bb:2d:08:2f:73:c5:f2:7c:
39:76:9d:80:e0:04:9b:9a:f0:f3:ea:4d:00:06:88:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:45:E4:1F:AE:A8:D8:26:43:D1:A4:A2:DC:4D:B2:60:4F:2F:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5256f2-590b-4956-91b0-943ad28dd62b/1/DkZF5B-uqNgmQ9GkotxNsmBPL3s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.128.0/22
Signature Algorithm: sha256WithRSAEncryption
32:8f:df:41:7c:f6:15:e9:c1:06:12:d7:2c:0c:82:43:f9:45:
7f:57:4f:d3:6f:d7:6d:d9:91:a6:c4:de:91:48:72:84:13:71:
f3:18:f9:be:e2:3b:8b:1c:c4:7c:bf:44:2c:8e:c3:e0:37:12:
1b:fb:33:a1:de:3c:50:da:1d:37:ae:e1:2d:5b:81:3d:43:ef:
71:c3:8a:24:4a:65:22:b8:8d:ba:e8:85:f6:88:03:af:04:c9:
13:6d:cd:0d:8d:ee:73:d4:91:0f:81:a5:68:90:a1:9c:46:c1:
ab:0f:8f:d0:8c:49:b8:19:0d:ff:78:3a:4e:df:40:59:a6:c0:
32:9e:47:3d:68:e7:db:46:f8:ad:54:c7:de:eb:84:2a:f6:0b:
c5:c9:65:06:45:d4:61:e1:25:26:48:13:9e:d0:c8:f6:23:63:
80:a3:df:5b:01:72:ae:bd:d8:e5:66:22:02:0b:d0:83:97:1d:
d7:43:87:37:f8:50:8c:5a:ca:96:54:30:a7:79:d3:9e:30:c8:
f5:b5:a9:7d:dd:56:e6:a5:7e:f6:9b:9d:05:19:b2:21:97:a7:
4c:24:28:3e:1f:f2:96:38:a1:ee:c6:8a:85:d5:8a:41:a7:63:
bf:1f:96:5c:4d:2d:07:3f:6c:db:c6:8e:5b:4f:c0:5f:4e:a8:
a6:d3:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:04 2023 by rpki-client on console.sobornost.net