Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bqyLQDmxxFbZqlz9XL_U29Z_iMc.cer
File: bqyLQDmxxFbZqlz9XL_U29Z_iMc.cer (raw, json)
Hash identifier: eWUbFfrWNpiLAbUFnKxomwNxZJGSePM3RSQ6tTCM3dI=
Subject key identifier: 6E:AC:8B:40:39:B1:C4:56:D9:AA:5C:FD:5C:BF:D4:DB:D6:7F:88:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6340171116B893582696AD8A30D27A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/b20d39-cd09-4920-9009-9cf30b2312d5/1/bqyLQDmxxFbZqlz9XL_U29Z_iMc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/b20d39-cd09-4920-9009-9cf30b2312d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 39754
IP: 194.50.95.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:40:17:11:16:b8:93:58:26:96:ad:8a:30:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eac8b4039b1c456d9aa5cfd5cbfd4dbd67f88c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:7c:1a:47:2d:ce:41:e4:19:4c:58:f4:27:
d9:8b:b2:3d:6b:d5:cc:33:41:f1:8a:83:97:21:63:
a5:be:f3:f4:af:ec:96:29:d0:10:6c:01:90:b9:46:
5e:37:84:98:fe:64:f9:e6:76:d9:dd:31:ee:b9:8b:
7b:48:a3:d6:10:69:e3:c0:46:64:62:19:b5:f5:ab:
c7:a0:fe:ee:f3:3d:48:e0:65:f2:11:bf:a8:ba:e3:
13:f6:04:30:9a:33:f8:70:af:4e:28:fc:4c:c3:03:
3e:50:9d:e9:37:36:7d:7a:95:29:22:1f:dc:7a:f4:
2b:9c:f1:80:24:18:e2:2c:e8:a3:8e:70:03:ed:5d:
9d:7e:e1:2d:01:61:6d:8f:08:0c:ce:52:0e:b5:30:
de:bc:04:73:11:18:ec:74:17:fc:11:4d:2c:51:a7:
b5:f3:89:fa:8d:b7:fb:6d:84:ee:f1:af:e9:07:bc:
74:f9:bd:d8:f1:cf:f4:a3:18:ce:59:af:4f:71:63:
07:57:11:4b:78:92:85:a2:be:44:f5:54:a2:a4:79:
c6:1d:39:5d:55:5c:6f:9f:53:29:c7:1d:f4:bf:2c:
de:b0:8d:06:21:2a:12:16:87:ab:02:48:29:3e:bb:
f7:92:3e:45:da:e1:e3:f5:4a:8f:b3:98:f9:b7:41:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AC:8B:40:39:B1:C4:56:D9:AA:5C:FD:5C:BF:D4:DB:D6:7F:88:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b20d39-cd09-4920-9009-9cf30b2312d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b20d39-cd09-4920-9009-9cf30b2312d5/1/bqyLQDmxxFbZqlz9XL_U29Z_iMc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.95.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39754
Signature Algorithm: sha256WithRSAEncryption
7f:c9:c3:e1:0a:9c:1b:bc:8a:b6:f1:ed:91:fb:b6:17:45:f2:
78:b8:31:2c:b2:0f:13:be:21:3a:c1:12:6b:1c:f8:53:e4:20:
01:d2:c6:b8:da:74:fc:a4:d4:10:a6:86:b5:4c:a1:2a:fc:b2:
69:3a:b2:13:b1:5a:c9:b2:41:67:08:9c:28:83:ab:68:a7:fc:
33:03:c5:71:e5:41:36:c3:03:c6:df:fa:96:18:cd:9b:c9:a1:
ca:2c:ab:52:f2:5f:a7:1c:ac:db:15:05:3f:8c:48:9b:5c:fe:
82:3e:a1:ef:35:c7:b4:b1:75:dd:c4:fb:08:9c:73:9d:24:3c:
9b:9d:a4:02:79:ab:c7:cc:87:a9:db:2a:49:81:4d:56:55:9d:
40:dc:a7:73:27:ed:05:b0:5f:d8:bd:07:66:98:df:ae:e6:6d:
3e:3a:7c:cd:f2:de:5b:97:ad:0c:19:22:59:cd:14:87:ea:e4:
bf:78:1c:f9:33:1a:d7:dd:3d:81:f2:d2:ed:0e:07:41:4c:5b:
b9:56:9e:5c:56:1b:fd:99:e9:2f:c2:4e:88:f7:37:07:88:a8:
24:c3:a8:ec:b5:0f:99:e8:1a:d2:20:be:93:e6:df:a6:f2:22:
5f:2d:90:6b:28:5a:d2:5b:e8:00:4e:1e:44:7c:09:db:f2:6c:
dd:ea:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net