Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PqEew7CxlUbRVsI2s_J5jRjLXyA.cer
File: PqEew7CxlUbRVsI2s_J5jRjLXyA.cer (raw, json)
Hash identifier: RkKdygxP3+F73R4O+pT/x0pX76b70H7zomDGYhoD93c=
Subject key identifier: 3E:A1:1E:C3:B0:B1:95:46:D1:56:C2:36:B3:F2:79:8D:18:CB:5F:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF5090D09754787AF2FFBB327B1BE88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/PqEew7CxlUbRVsI2s_J5jRjLXyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202543
AS: 204697
IP: 45.154.176.0/22
IP: 185.246.168.0/22
IP: 2a0f:3980::/29
IP: 2a0f:c300::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:09:0d:09:75:47:87:af:2f:fb:b3:27:b1:be:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ea11ec3b0b19546d156c236b3f2798d18cb5f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:de:29:b0:9f:8e:d7:29:e1:55:87:83:21:
3a:15:46:ea:29:28:aa:f9:ab:d2:04:2f:99:74:af:
1e:68:ad:7b:e3:97:0c:b8:26:b6:b5:c6:86:67:b5:
16:fc:82:b0:ef:be:11:a0:5b:55:d0:ff:00:45:b7:
4a:b7:ba:13:5f:31:da:3b:0b:43:4f:4e:c4:7c:31:
83:23:59:42:0f:cc:9f:39:19:f8:49:34:77:1f:fa:
a7:b4:15:fb:4c:4f:a5:54:a3:87:00:af:c3:df:d4:
ee:13:6c:3e:0a:f8:25:92:44:bc:d0:d6:c0:33:39:
04:60:98:fe:6c:4f:74:11:a7:9d:6f:61:23:40:b4:
a0:3d:91:63:91:85:63:79:69:61:f4:02:e4:39:ce:
f2:77:97:32:42:b8:84:16:13:4e:42:a4:44:79:0c:
1f:0d:ae:38:5d:28:6b:7f:dc:2b:4e:13:2c:c9:97:
b6:2d:eb:3e:fb:3b:79:79:c5:48:6e:4b:0f:cf:90:
ea:4f:81:36:18:9f:b3:e6:7b:fc:cf:8d:7b:d7:cb:
0f:fd:d5:2f:b5:60:46:92:ff:0b:fc:3a:06:ab:02:
26:40:71:93:07:e6:33:fe:bb:48:fa:d0:42:61:c1:
70:b0:6d:80:30:82:4f:aa:86:e7:5c:9f:94:30:33:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:1E:C3:B0:B1:95:46:D1:56:C2:36:B3:F2:79:8D:18:CB:5F:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/09ad6f-8cb0-4ac7-a5ec-ded2110c4c93/1/PqEew7CxlUbRVsI2s_J5jRjLXyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.176.0/22
185.246.168.0/22
IPv6:
2a0f:3980::/29
2a0f:c300::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202543
204697
Signature Algorithm: sha256WithRSAEncryption
41:bd:e2:19:f1:12:1e:08:81:41:4e:00:56:09:c3:57:a3:21:
0f:9c:09:ce:30:74:95:e6:d7:fd:e4:46:37:74:6c:4f:da:2a:
7e:e8:e2:bb:d6:6e:11:02:fe:90:85:83:d7:f9:db:9d:6f:2d:
d1:d2:7d:cf:42:3d:9f:61:5d:3c:04:33:f6:00:40:20:07:b1:
53:1a:0f:20:6a:8f:a9:0a:54:34:85:1d:94:48:c5:f6:1b:39:
d7:08:34:15:50:af:4e:22:fd:da:a2:4a:d1:ed:c4:64:15:96:
a5:e7:fd:c2:16:a1:7e:a2:82:02:2a:90:80:99:a6:6a:ba:3e:
bc:cd:01:56:f3:ff:8e:41:1b:b5:06:ae:4b:51:35:fc:ba:d6:
11:ea:1a:12:59:0f:61:46:35:a2:b9:f4:f0:8a:15:52:dc:40:
8b:4c:2a:c2:48:0a:4f:9f:7d:8e:c5:af:e6:c0:4e:b8:f3:10:
9e:ee:e9:8d:f7:45:cc:7d:7d:61:18:06:63:0f:7f:18:d6:88:
5a:f1:11:06:c7:e9:ae:ce:a2:26:89:73:bc:e1:4f:28:8e:51:
88:09:1f:6d:10:79:9b:ac:5c:7a:9f:3d:7d:46:cb:22:fe:83:
0b:d2:ae:6a:56:7a:4a:ff:2a:1c:c4:be:c9:a3:10:2d:9a:51:
4b:99:d9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:20 2023 by rpki-client on console.sobornost.net