Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer
File: X_Rhb1zKNGNLQjEaDqPRGGTa2iI.cer (raw, json)
Hash identifier: H6sDRHolmI0ic00cta8diJJcuWLdm/RLzfh4ly7wSpk=
Subject key identifier: 5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD1290B1B2D1B89FEE387C7B4F3CD76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.56.148.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:29:0b:1b:2d:1b:89:fe:e3:87:c7:b4:f3:cd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ff4616f5cca34634b42311a0ea3d11864dada22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:2b:6a:0e:cc:6e:2f:14:91:42:de:69:45:
2a:d3:23:95:70:0f:20:15:f1:46:3b:d1:a9:02:2f:
eb:15:96:87:35:4a:14:da:dc:45:ee:7b:28:1a:83:
78:e2:28:03:79:dc:55:e8:f1:6b:85:3e:64:b8:dc:
27:a0:d5:bd:f3:48:f2:25:51:31:33:dc:ae:25:7f:
9a:d7:83:46:47:2e:86:e1:75:13:1a:a5:3f:f8:67:
b1:18:35:80:b1:b3:11:23:7c:00:d3:c1:1b:41:c4:
8c:b0:0d:9b:e3:8e:bb:8b:77:9f:f4:ce:18:92:5d:
0a:cb:f5:57:c0:77:ce:01:48:da:89:e5:94:1a:cc:
68:84:aa:79:2f:ed:60:04:4a:32:23:4f:7e:ad:08:
1d:32:dd:91:aa:62:24:63:16:56:20:a2:9d:90:6d:
c4:68:d0:a6:55:07:76:e0:f6:bb:a5:63:d7:a3:17:
51:2b:d9:67:26:6d:b6:8b:ab:86:35:8d:59:02:bc:
5c:9b:f0:87:bc:9b:f2:5c:6b:72:7d:18:be:c4:2e:
08:a3:0a:8d:15:6c:6b:16:ec:04:1a:26:fb:61:cb:
79:a5:ad:00:ce:ac:62:c7:e3:a0:9b:f1:28:75:86:
12:4e:4a:3b:cd:f0:a6:8c:04:85:11:c7:6c:71:38:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:61:6F:5C:CA:34:63:4B:42:31:1A:0E:A3:D1:18:64:DA:DA:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6ee225-1d3e-4448-9e08-c9d03fad025a/1/X_Rhb1zKNGNLQjEaDqPRGGTa2iI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.148.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4a:f7:76:e6:fc:6d:53:13:cb:e1:42:cf:30:0d:93:fe:9e:
e7:49:80:7b:8e:74:c1:12:d1:3c:b4:ee:95:1b:ce:f0:2e:52:
09:79:a2:dd:df:22:c9:f2:ba:ae:3f:72:09:20:ab:6a:a7:94:
e2:5e:56:5d:1c:58:3e:b8:a8:9a:15:64:df:d7:3f:51:5a:dd:
38:0b:06:f1:a6:af:38:25:5f:7e:04:8e:ff:d1:19:cf:5d:5a:
e3:ad:ae:b7:81:86:76:5e:fe:5b:9d:30:11:41:f9:dd:fb:06:
b3:5d:77:7f:7c:f0:ae:bf:31:ca:fe:27:f0:2c:1d:09:50:bc:
62:76:8e:db:a6:3e:77:3a:99:6e:7e:7e:38:8c:a1:53:17:73:
96:f2:78:af:9f:5c:a3:99:0f:64:4e:90:39:4a:23:10:2e:e3:
21:00:ca:19:e1:da:73:76:1a:d0:bd:b1:67:8a:7f:20:a6:c4:
3d:9b:f5:f8:b8:57:fc:12:15:3f:f7:31:b5:fe:60:fc:de:b1:
2a:11:4b:93:b7:67:24:45:fc:d9:98:55:1a:92:77:a0:6f:6a:
d1:fe:3a:ff:93:01:a5:f2:93:1a:2c:04:84:06:e8:62:f0:40:
63:53:7c:6a:4b:ee:8d:e8:bc:f3:ea:f5:8d:94:68:37:af:3a:
14:64:37:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:11 2023 by rpki-client on console.sobornost.net