Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/akygCb6j0dib6l7Z0zNZUyPui64.cer
File: akygCb6j0dib6l7Z0zNZUyPui64.cer (raw, json)
Hash identifier: ECec4XGN6mz2jyJ8mypM6ogf2dj2LrtCaE8Jx6NyRII=
Subject key identifier: 6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571689A0E95F7F8B56FA73EDE14B29108
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/akygCb6j0dib6l7Z0zNZUyPui64.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.55.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:9a:0e:95:f7:f8:b5:6f:a7:3e:de:14:b2:91:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a4ca009bea3d1d89bea5ed9d333595323ee8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1d:c7:69:3b:82:24:1d:23:0c:5e:55:6b:e0:
ca:b0:b5:0a:2b:b7:aa:dc:73:29:72:44:fa:ba:88:
8a:91:a3:ad:9d:9b:0d:42:b5:5d:99:f6:2b:a6:77:
b9:7d:cd:de:a4:3e:9e:1c:f0:24:36:a5:b1:69:e4:
b7:54:6f:ff:99:66:b1:f3:c5:37:83:97:eb:44:9b:
0d:af:3e:15:1c:7f:ee:63:1e:8a:3d:37:cd:37:45:
81:50:0f:4c:c8:a1:b9:18:59:21:e7:e5:d5:88:db:
95:39:03:64:85:7b:fe:5b:cc:f7:08:8f:3d:33:0f:
07:33:8a:41:f4:bd:64:bd:dd:96:1a:ec:9e:fd:a1:
f2:39:3b:bb:5a:36:14:6e:fc:b2:44:ef:f0:31:c2:
6b:c6:1e:19:22:63:d2:ad:59:ea:ee:b2:2f:cd:05:
cd:40:77:88:88:ae:f1:73:e2:f7:54:2a:46:f9:71:
33:e8:41:17:b5:39:d4:2c:bc:2a:5b:f8:02:ef:1c:
d6:1b:06:eb:6b:ee:77:20:c5:8e:07:30:ea:1a:5d:
c0:92:c4:87:68:7a:ed:a2:b0:e4:1f:90:68:6a:9f:
c2:2d:88:e2:07:b5:bd:7f:7a:55:f4:57:2b:be:32:
a1:0c:fd:f8:d0:67:c9:78:d7:2f:d9:85:3d:76:2f:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4C:A0:09:BE:A3:D1:D8:9B:EA:5E:D9:D3:33:59:53:23:EE:8B:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a93c2d-6d12-4cb2-9fc5-22deb3bf5991/1/akygCb6j0dib6l7Z0zNZUyPui64.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.55.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a6:b4:80:2c:06:75:37:57:30:4c:4f:69:41:a2:eb:8e:ec:
70:32:39:ae:a0:74:26:a8:b0:34:7c:bc:37:c4:13:9d:68:59:
12:75:a3:fd:3e:69:7e:40:21:75:c8:72:ae:1d:63:f4:e8:e8:
ab:b0:2b:82:22:ff:24:62:ef:9b:39:48:c5:cf:f3:eb:cd:dd:
6b:44:82:3c:59:1a:82:57:02:cf:27:1f:36:a7:f4:c4:2c:32:
54:65:c9:a7:19:10:de:e6:90:98:40:b6:53:dc:67:6f:0f:90:
18:87:27:f5:ff:a9:76:6c:73:a3:99:db:56:e0:92:e9:ac:68:
45:14:06:5a:02:2f:11:90:3b:8f:5b:a0:b4:1f:31:d9:f4:e2:
30:20:c3:54:f6:84:58:b3:21:0a:e9:6b:e6:d3:6c:47:60:d0:
4b:e1:15:d5:17:32:1a:1e:1a:cf:fa:db:3d:5a:e8:73:69:9e:
ee:28:3f:90:a1:14:44:c5:9e:cc:26:b9:cb:b1:9f:d5:42:95:
b7:a0:64:fb:5f:e0:db:67:e2:9d:f8:ac:62:f3:6b:b8:54:f6:
00:11:b6:23:5e:09:9c:67:cc:fd:63:31:06:04:7f:75:11:ba:
0e:c7:76:aa:1f:ea:08:ee:0b:4d:53:30:4d:30:41:90:35:b6:
07:eb:4e:c5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVxaJoOlff4tW+nPt4UspEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTRjYTAwOWJlYTNkMWQ4OWJlYTVlZDlkMzMzNTk1MzIzZWU4YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh3HaTuCJB0jDF5Va+DKsLUKK7eq
3HMpckT6uoiKkaOtnZsNQrVdmfYrpne5fc3epD6eHPAkNqWxaeS3VG//mWax88U3
g5frRJsNrz4VHH/uYx6KPTfNN0WBUA9MyKG5GFkh5+XViNuVOQNkhXv+W8z3CI89
Mw8HM4pB9L1kvd2WGuye/aHyOTu7WjYUbvyyRO/wMcJrxh4ZImPSrVnq7rIvzQXN
QHeIiK7xc+L3VCpG+XEz6EEXtTnULLwqW/gC7xzWGwbra+53IMWOBzDqGl3AksSH
aHrtorDkH5Boap/CLYjiB7W9f3pV9FcrvjKhDP340GfJeNcv2YU9di+SbQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFGpMoAm+o9HYm+pe2dMzWVMj7ouuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3L2E5M2My
ZC02ZDEyLTRjYjItOWZjNS0yMmRlYjNiZjU5OTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvYTkzYzJk
LTZkMTItNGNiMi05ZmM1LTIyZGViM2JmNTk5MS8xL2FreWdDYjZqMGRpYjZsN1ow
ek5aVXlQdWk2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwQM3MA0GCSqGSIb3DQEBCwUAA4IBAQCJprSA
LAZ1N1cwTE9pQaLrjuxwMjmuoHQmqLA0fLw3xBOdaFkSdaP9Pml+QCF1yHKuHWP0
6OirsCuCIv8kYu+bOUjFz/Przd1rRII8WRqCVwLPJx82p/TELDJUZcmnGRDe5pCY
QLZT3GdvD5AYhyf1/6l2bHOjmdtW4JLprGhFFAZaAi8RkDuPW6C0HzHZ9OIwIMNU
9oRYsyEK6Wvm02xHYNBL4RXVFzIaHhrP+ts9WuhzaZ7uKD+QoRRExZ7MJrnLsZ/V
QpW3oGT7X+DbZ+Kd+Kxi82u4VPYAEbYjXgmcZ8z9YzEGBH91EboOx3aqH+oI7gtN
UzBNMEGQNbYH607F
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:58 2023 by rpki-client on console.sobornost.net