Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SUaZfCpl7Y9B5HtcBKVlk5y9PnU.cer
File: SUaZfCpl7Y9B5HtcBKVlk5y9PnU.cer (raw, json)
Hash identifier: qzyMdFRAEgDJsegb1sHMRY9iVCP6bDW9pXd79K/L+S0=
Subject key identifier: 49:46:99:7C:2A:65:ED:8F:41:E4:7B:5C:04:A5:65:93:9C:BD:3E:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E616E67FD2643DBBC4285A962F913
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/ef4e0b-8062-4324-8c8e-0216472c837d/1/SUaZfCpl7Y9B5HtcBKVlk5y9PnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/ef4e0b-8062-4324-8c8e-0216472c837d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.229.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:61:6e:67:fd:26:43:db:bc:42:85:a9:62:f9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4946997c2a65ed8f41e47b5c04a565939cbd3e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:b2:77:6c:cb:fb:20:ba:d4:fc:d0:06:c0:
cb:1d:b6:b3:9d:8d:24:dd:28:4e:c4:bf:65:d9:4f:
40:03:0d:d5:b6:98:8e:04:fb:b7:d1:d6:84:84:f3:
85:77:23:b7:44:f8:1d:4a:c2:aa:0c:14:a1:4b:e5:
e7:72:92:14:82:13:bb:fb:9a:8d:cf:e3:82:bd:44:
cb:42:cf:0d:b3:e4:8f:41:57:0f:74:57:9a:d0:24:
d9:5b:68:4d:dc:93:38:88:0e:e9:4e:e2:22:c1:e7:
7c:f4:7d:59:1c:3c:ec:67:cb:9b:39:68:0e:85:b8:
37:29:1f:23:40:38:5a:72:2d:09:03:68:12:cf:26:
f6:2d:07:ad:09:c7:b2:dd:5d:38:aa:54:fc:1f:06:
b1:f7:75:49:be:3e:61:18:fa:0c:24:ae:c3:1e:34:
64:05:ee:7d:97:88:bd:f5:70:08:93:96:1d:28:70:
b7:95:dd:1a:26:cc:ba:3e:e2:04:2d:5e:39:96:ad:
d2:69:83:a4:d0:16:8b:dd:44:c5:a0:47:42:9b:09:
62:3f:92:e8:e4:7c:74:3f:9e:f4:49:0e:5b:1a:85:
12:5d:dd:a1:30:c3:52:ac:ba:14:5c:ee:bc:39:51:
ce:ad:17:85:74:dd:88:3b:f6:58:b7:bc:c4:f8:ab:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:46:99:7C:2A:65:ED:8F:41:E4:7B:5C:04:A5:65:93:9C:BD:3E:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ef4e0b-8062-4324-8c8e-0216472c837d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ef4e0b-8062-4324-8c8e-0216472c837d/1/SUaZfCpl7Y9B5HtcBKVlk5y9PnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.229.0/24
Signature Algorithm: sha256WithRSAEncryption
79:bb:5b:48:b2:3e:96:b7:da:63:21:e4:ca:75:8c:38:5c:e5:
f2:f3:3a:07:38:4b:f5:29:fa:c8:fb:5d:34:c6:65:57:ca:46:
8f:81:24:31:89:b3:1d:c4:fd:f2:28:d0:67:96:1e:76:04:1a:
72:b9:23:19:71:10:34:59:17:ea:76:e6:f2:f8:58:9f:fd:d2:
6b:ad:75:2b:f8:db:cc:07:61:a5:60:92:46:94:ce:ed:ce:13:
43:ff:60:4f:19:56:2e:71:4e:3f:16:a6:d0:5a:5c:d9:13:d3:
8d:c6:a5:a0:40:cf:60:60:59:56:97:c1:91:68:a5:27:17:6f:
2e:4b:7e:51:e2:1c:e3:51:0a:9e:dd:fd:a0:bc:3d:be:a5:44:
02:bb:ec:36:79:a3:5d:e0:35:de:66:69:7c:57:d2:87:d8:9f:
e9:af:8f:7f:66:21:21:d4:91:ec:0e:bb:01:fa:e6:ed:21:89:
0d:5b:c2:02:c0:dd:9f:c3:ea:01:b7:20:14:dc:77:7d:bd:5f:
7b:c6:a1:7e:a8:10:05:1c:27:53:aa:c3:8c:c9:cb:0d:77:51:
09:45:8e:cb:a7:41:e0:9f:12:36:e0:5a:ba:6c:f0:fe:15:ff:
b9:a2:2d:0f:2f:c8:12:83:1c:68:92:39:e5:9a:86:24:59:d2:
cf:59:1a:01
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwHmFuZ/0mQ9u8QoWpYvkTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTQ2OTk3YzJhNjVlZDhmNDFlNDdiNWMwNGE1NjU5MzljYmQzZTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rSyd2zL+yC61PzQBsDLHbaznY0k
3ShOxL9l2U9AAw3VtpiOBPu30daEhPOFdyO3RPgdSsKqDBShS+XncpIUghO7+5qN
z+OCvUTLQs8Ns+SPQVcPdFea0CTZW2hN3JM4iA7pTuIiwed89H1ZHDzsZ8ubOWgO
hbg3KR8jQDhaci0JA2gSzyb2LQetCcey3V04qlT8Hwax93VJvj5hGPoMJK7DHjRk
Be59l4i99XAIk5YdKHC3ld0aJsy6PuIELV45lq3SaYOk0BaL3UTFoEdCmwliP5Lo
5Hx0P570SQ5bGoUSXd2hMMNSrLoUXO68OVHOrReFdN2IO/ZYt7zE+KvScwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFElGmXwqZe2PQeR7XASlZZOcvT51MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2VmNGUw
Yi04MDYyLTQzMjQtOGM4ZS0wMjE2NDcyYzgzN2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZWY0ZTBi
LTgwNjItNDMyNC04YzhlLTAyMTY0NzJjODM3ZC8xL1NVYVpmQ3BsN1k5QjVIdGNC
S1ZsazV5OVBuVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAH97lMA0GCSqGSIb3DQEBCwUAA4IBAQB5u1tI
sj6Wt9pjIeTKdYw4XOXy8zoHOEv1KfrI+100xmVXykaPgSQxibMdxP3yKNBnlh52
BBpyuSMZcRA0WRfqduby+Fif/dJrrXUr+NvMB2GlYJJGlM7tzhND/2BPGVYucU4/
FqbQWlzZE9ONxqWgQM9gYFlWl8GRaKUnF28uS35R4hzjUQqe3f2gvD2+pUQCu+w2
eaNd4DXeZml8V9KH2J/pr49/ZiEh1JHsDrsB+ubtIYkNW8ICwN2fw+oBtyAU3Hd9
vV97xqF+qBAFHCdTqsOMycsNd1EJRY7Lp0HgnxI24Fq6bPD+Ff+5oi0PL8gSgxxo
kjnlmoYkWdLPWRoB
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:38 2023 by rpki-client on console.sobornost.net