Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer
File: c9BuvTmqjedLVlMsnatAaU-hyOg.cer (raw, json)
Hash identifier: MQfiU2H49XGIW1alKUGJlR6M9ST/Ijns0iHyY6KzlG8=
Subject key identifier: 73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB04B63A78772C196BF8C0E5F124EB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209326
IP: 45.150.228.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:4b:63:a7:87:72:c1:96:bf:8c:0e:5f:12:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:8f:f4:bc:e7:89:b8:72:79:86:69:01:36:
1f:df:f0:ad:7c:e6:da:ea:3b:e1:70:b4:10:c8:4b:
4a:6c:48:7f:dc:2f:32:fe:9f:e9:82:39:cf:2f:f7:
4c:61:e9:f9:73:83:c1:59:3a:20:36:ff:47:e8:4e:
d0:46:56:db:3a:73:6d:e6:ef:ec:d5:39:1f:bb:2f:
96:7a:6f:5e:be:51:d6:99:e6:97:d3:00:88:e6:bf:
30:c8:aa:65:e6:3e:aa:e9:c9:4d:fe:e3:6a:b1:a1:
f5:78:88:01:b7:72:cb:5d:47:2d:0a:f0:49:74:83:
78:46:5f:80:77:8d:78:0a:f6:0c:98:4a:97:27:21:
52:54:61:74:2e:e8:cf:46:10:ba:ed:96:5c:03:4d:
08:6a:26:37:c2:5c:2e:97:8f:97:cc:e8:28:8f:12:
48:de:9d:1a:0c:7f:96:53:c2:2a:70:36:23:88:f5:
fb:12:12:77:82:35:3c:2b:14:ca:0a:66:d0:da:09:
e1:3f:e3:a9:04:05:72:d3:dd:5f:c4:a6:7a:0e:8f:
25:de:90:e2:26:e3:a6:e4:aa:63:c2:6b:f0:22:42:
88:a6:a5:f3:6d:7c:bc:10:40:69:aa:f5:74:0f:45:
9c:3f:53:da:c2:2b:96:e6:58:27:c6:2a:3f:70:3f:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.228.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209326
Signature Algorithm: sha256WithRSAEncryption
38:9c:5a:b4:46:7b:1b:da:ca:23:38:fc:27:73:f1:1f:d6:0d:
35:3d:60:75:4a:a6:fb:16:3f:7c:64:52:d5:79:06:0a:0f:69:
b3:f6:56:8f:d2:6e:01:c0:7f:49:2b:0c:0e:4c:73:32:ca:d3:
b2:95:b2:81:cd:63:ac:65:c3:77:56:e2:c6:4f:2f:6f:9b:bb:
94:6c:cc:55:7d:69:57:d9:d8:e4:d1:f0:94:12:17:2e:ac:2b:
80:c0:ae:8e:20:b9:58:bd:58:e3:5c:30:e3:f6:68:45:d0:19:
89:f1:5c:5a:3b:13:48:c7:46:7a:9f:c7:1d:1d:05:63:e3:99:
dc:16:16:43:ba:5f:a2:cc:bf:5b:1e:99:49:1f:b8:f6:c1:e0:
f1:ad:8e:b0:20:c5:35:b1:83:60:a1:8a:07:b8:fb:c6:af:1a:
78:70:3b:32:2a:32:38:ef:cc:6f:61:9d:ba:29:d1:54:70:07:
0f:48:63:c3:c5:de:f5:65:19:09:ec:8b:62:66:e6:fa:9c:0c:
44:69:7f:7c:07:3a:75:2c:89:56:47:c8:e4:2b:7d:2f:77:34:
d8:fc:6a:83:36:c9:39:05:bc:b0:25:a7:61:d7:90:b6:84:51:
d6:da:34:5b:76:a7:1d:dc:09:b4:a7:11:dc:c7:86:dc:21:e4:
0c:b2:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:23 2023 by rpki-client on console.sobornost.net