Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer
File: HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.cer (raw, json)
Hash identifier: /o3Wo9VKYinEwerEUdWVlDRbwb8Od6opAcRSQ5Ee9SY=
Subject key identifier: 1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAFFADC4E1821B543195A41F68A3AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 211265
IP: 185.197.150.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:ff:ad:c4:e1:82:1b:54:31:95:a4:1f:68:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1df2710c06d0df0bef46d9b1cb58aff520f8c584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0e:b4:9e:a1:c3:ec:9f:2f:74:bb:34:65:50:
8b:fa:4e:ec:bf:ab:b9:83:a6:43:ad:f5:eb:9d:77:
78:d1:33:ed:33:f4:bf:fe:74:1e:42:e7:a4:d0:ef:
34:8f:81:13:81:8e:01:00:1e:2b:c7:d3:4d:14:a0:
30:49:ae:27:51:59:4d:cd:b4:0c:d4:da:87:b8:1c:
1e:08:63:ea:eb:65:40:22:28:c2:d8:c8:3a:eb:8a:
58:3b:56:2c:53:20:dd:53:02:2e:99:9a:83:0e:55:
cd:dd:91:27:ea:ff:8c:07:d3:3a:19:b0:38:56:98:
24:61:9b:8d:66:3c:c4:d1:cf:98:cb:1e:4a:19:5a:
6a:df:54:c6:f1:d1:53:ca:56:12:f3:11:7e:c8:01:
6f:e0:40:49:e3:64:71:c4:f3:b1:93:1a:35:3c:55:
aa:34:ad:51:d9:5b:d2:87:2d:98:2e:6f:ec:ab:f8:
19:92:48:d1:be:c4:be:be:be:d8:f7:0c:74:e2:71:
10:a4:7e:7d:17:49:83:38:18:11:7d:56:97:77:62:
c3:64:af:b4:57:b3:93:71:80:e8:d6:7a:83:b6:1e:
b9:0c:b4:8f:c0:95:b1:2b:3b:58:ca:70:d7:6c:d3:
77:e6:fc:66:e3:91:dd:84:7a:58:b9:5b:1a:c9:e6:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:71:0C:06:D0:DF:0B:EF:46:D9:B1:CB:58:AF:F5:20:F8:C5:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d807d5-ce18-4be5-bd2a-844913f8bba3/1/HfJxDAbQ3wvvRtmxy1iv9SD4xYQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.150.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211265
Signature Algorithm: sha256WithRSAEncryption
0b:7e:14:0e:32:99:e0:a1:94:60:d8:19:67:eb:5f:a4:02:3f:
09:fc:56:fb:5b:20:43:d4:26:de:08:3c:c8:6e:14:9a:a8:05:
a0:9c:ed:7b:36:2c:cc:5d:d5:32:32:38:9f:9f:e7:47:de:ed:
1f:97:53:d7:f1:47:3b:6d:bd:75:fd:00:e8:7d:a1:64:03:75:
ef:99:7d:41:4b:fa:16:40:5b:a1:1d:a4:29:e3:1a:d9:0a:c2:
50:16:85:7e:25:0b:fb:4f:28:ca:a9:66:23:65:48:b2:ce:3c:
b4:19:bb:2f:b7:e0:0b:65:71:48:6c:b8:b3:09:84:0e:94:5b:
a6:93:a6:f8:04:ea:54:90:54:dc:50:20:31:07:42:55:49:08:
5f:34:4c:27:bb:fb:9e:08:1a:e0:6e:96:66:b2:22:7f:45:61:
bb:cd:3d:06:b6:36:c0:14:91:16:1e:6f:a7:28:62:6d:e3:1d:
ad:d4:d1:ce:3e:b9:db:a4:e5:ba:64:ab:51:4b:3f:6e:72:66:
25:02:91:e8:0c:23:19:63:40:15:62:4d:69:99:eb:56:38:79:
48:a7:a2:ae:d0:88:dd:5d:a4:af:53:84:48:02:13:ee:43:85:
97:d3:da:13:b1:de:8e:56:26:4b:09:70:af:d1:2c:d2:47:78:
4b:31:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:27 2023 by rpki-client on console.sobornost.net