Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
File: U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer (raw, json)
Hash identifier: oPSyYmFBtQwwaSyOPM7RpELiw2GsDhPCP0LNegtR+J0=
Subject key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B1DF9E50935395ED55139CED7E8FDBD0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 11 Oct 2023 09:03:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 8282
AS: 9179
IP: 80.252.116.0/22
IP: 80.252.124.0/22
IP: 84.246.192.0/22
IP: 93.188.180.0/22
IP: 194.70.36.0/24
IP: 2a01:2c0::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:f9:e5:09:35:39:5e:d5:51:39:ce:d7:e8:fd:bd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 11 09:03:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:5e:db:6c:14:63:42:83:bd:29:0d:c4:b4:
fc:38:8d:ae:79:33:2a:f4:f8:7a:43:43:2d:f2:34:
de:1e:d6:14:53:c6:93:b9:60:2e:7c:32:96:25:e0:
f2:bb:37:0d:48:aa:bb:6c:74:d5:35:64:90:82:9a:
26:2e:b8:d8:f0:cd:b0:5a:30:1a:de:c5:a1:17:9e:
05:f7:be:57:65:62:c6:58:db:81:b7:88:62:93:9a:
07:4d:66:30:3b:e3:04:85:56:a6:73:1d:90:75:a1:
33:67:13:34:af:5b:58:50:db:57:8b:cd:98:24:f9:
3d:82:f2:c8:68:ae:dd:85:d5:59:c8:6c:e7:56:17:
51:d8:de:bd:2d:6d:0c:86:4b:4b:1d:94:76:64:92:
b6:2f:3e:02:d6:8c:5c:52:a2:e9:be:d8:0d:2a:ea:
71:be:42:e0:8e:fd:67:b1:1f:55:01:90:65:aa:62:
f5:82:f7:68:f7:88:d8:89:d1:5b:72:d8:1f:e6:7e:
e7:31:94:4e:db:81:eb:34:33:cc:97:f8:29:b0:63:
68:b3:06:96:f6:65:19:63:e2:3e:ab:09:ac:2d:6b:
c8:08:0f:11:0b:d2:7b:a1:25:53:49:48:f9:b7:c5:
fd:6e:d3:97:53:83:c6:de:8a:54:05:1a:c1:1f:39:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.116.0/22
80.252.124.0/22
84.246.192.0/22
93.188.180.0/22
194.70.36.0/24
IPv6:
2a01:2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8282
9179
Signature Algorithm: sha256WithRSAEncryption
77:d9:6e:a1:46:fe:d8:e5:e3:80:43:71:78:99:c9:8b:42:e5:
c4:90:ac:48:af:d7:37:d9:dc:d0:e7:0c:48:63:34:f4:d5:d7:
d0:5f:3e:c5:6d:7a:a1:c2:5b:78:26:71:ef:ad:31:c6:ad:98:
d6:a9:af:67:76:5d:49:d4:f8:b5:59:57:35:ae:22:98:b8:9f:
4f:61:bf:a4:71:bc:23:43:70:c1:6e:30:aa:48:b4:d0:87:ae:
8b:40:01:f1:bd:e7:47:78:a1:67:3a:7e:ac:8d:6f:4d:ff:53:
b9:d6:cb:d6:21:0d:be:11:60:3f:ad:72:b3:3b:d6:59:bd:db:
8e:c4:da:64:cc:68:e2:92:db:2f:fc:51:dc:cc:58:ed:03:3a:
f6:91:07:2f:42:6e:e2:bb:e7:af:24:fd:bd:c4:a6:cd:ec:69:
fd:2b:c5:82:ac:e5:49:35:05:00:90:18:40:23:a5:5f:ea:18:
63:68:81:23:3c:4f:2a:3a:3b:6f:a6:54:f7:1e:34:8e:ac:d2:
59:a2:3c:9e:b0:59:7d:e9:84:b5:bd:81:2f:67:85:ee:8a:b2:
fe:e5:8b:e9:b1:e8:c2:2f:99:6a:5c:7d:05:c3:4b:dc:9f:46:
87:10:69:7c:f5:f6:1d:96:17:cf:99:63:e2:e1:5c:df:fd:97:
5b:39:b2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:48 2023 by rpki-client on console.sobornost.net