Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dof_cthbc8P1AB5Q1B7zNPG9qzg.cer
File: dof_cthbc8P1AB5Q1B7zNPG9qzg.cer (raw, json)
Hash identifier: rO5YgIVAwV+gidkoviYisIutD8X6n0BL8Qr0D4hAaCc=
Subject key identifier: 76:87:FF:72:D8:5B:73:C3:F5:00:1E:50:D4:1E:F3:34:F1:BD:AB:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01884E8FD00520CB07FBDAFC3C058FF26989
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 May 2023 16:20:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.225.8.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:8f:d0:05:20:cb:07:fb:da:fc:3c:05:8f:f2:69:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 24 16:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7687ff72d85b73c3f5001e50d41ef334f1bdab38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:05:78:69:f3:4f:95:46:04:39:29:01:76:65:
5b:00:51:77:2e:84:0a:cf:c0:45:3f:3e:3c:b5:bc:
26:94:cf:c9:b9:12:82:b5:ea:e0:04:0f:72:29:23:
4a:fc:82:69:df:fa:98:b0:69:09:b6:b5:f9:3c:d3:
94:75:21:90:2f:e0:15:71:1c:43:d4:78:ea:a8:87:
35:32:71:31:3e:6c:88:ab:28:5c:0f:ab:72:55:c8:
b4:2a:c1:77:1d:65:0b:d1:35:cb:c6:d6:4a:0b:40:
f7:b7:73:7c:74:55:0c:12:fd:93:0d:64:27:21:ec:
77:4b:e6:f7:89:a0:72:1c:d5:ed:e0:98:a1:39:7a:
36:32:3b:d3:96:d3:d4:ef:73:30:74:7e:1d:04:0d:
46:75:3a:e0:88:5f:1c:4a:c4:f0:f1:e6:dc:3c:5b:
8b:25:17:9f:5d:9e:8d:9f:a1:63:26:b9:6e:af:71:
12:9c:a4:3f:cf:23:56:be:c4:61:56:d2:0d:dc:cf:
b0:73:25:8f:a5:3c:0b:b2:2d:c3:40:ba:07:d4:ae:
6b:26:40:a8:7f:16:72:85:78:6b:d3:93:c6:e4:03:
7a:05:aa:a1:57:97:38:87:59:cb:cc:09:a4:87:a9:
60:d3:a2:ee:07:ab:16:e8:cb:b1:2d:12:5b:15:75:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:FF:72:D8:5B:73:C3:F5:00:1E:50:D4:1E:F3:34:F1:BD:AB:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/52b50c-8136-4df2-9301-97b831b43ff1/1/dof_cthbc8P1AB5Q1B7zNPG9qzg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.8.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:d7:90:17:07:6b:4e:2b:2f:6a:7e:5c:ac:83:6f:07:da:22:
d5:7b:61:62:ba:b2:be:96:0b:0b:04:a1:82:75:b8:fc:c7:97:
65:8f:af:87:05:b3:43:bc:2d:aa:ca:ac:98:21:08:7d:85:66:
2d:ab:22:08:02:2f:19:df:ae:0e:f6:d9:d8:97:13:b7:7c:51:
12:07:98:cc:0f:81:8c:8b:c8:c1:6d:d2:57:00:d7:34:25:99:
ef:cd:fa:5a:03:fa:5b:a1:1d:96:a7:a3:ac:ef:24:6e:86:56:
18:0d:f1:54:89:9b:37:05:f6:b4:19:47:89:43:45:10:d9:cc:
04:f4:9d:18:31:43:20:7e:5a:39:ee:d1:d8:6e:54:ce:79:cd:
0c:1a:28:8d:8d:47:59:03:98:2a:b9:e0:dc:34:e2:bb:58:d5:
30:47:84:7f:64:f8:1d:e5:13:0a:7a:d1:8a:96:70:76:21:ac:
9c:67:b5:c5:38:a3:fb:00:20:e3:c9:db:4c:a4:74:e4:6c:fb:
32:48:bf:70:77:f9:44:53:42:dd:0f:0a:57:1d:8b:96:a7:46:
03:2d:89:43:47:a0:68:5b:a5:e2:34:64:a8:79:8e:1c:1d:13:
20:c7:e6:61:5e:27:f3:d8:7b:7a:20:f3:07:0b:05:93:5f:ea:
8f:10:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net