Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.cer
File: eCVFHDVrpJGQ9x6rFYpz04ysVZ8.cer (raw, json)
Hash identifier: sTOjdunqG19bngefObsitXadoQAvM8K4j9aNJr7pdoQ=
Subject key identifier: 78:25:45:1C:35:6B:A4:91:90:F7:1E:AB:15:8A:73:D3:8C:AC:55:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3DE6D7185877F98FEE4E1F042F7A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.120.0/24
IP: 2a12:bb00::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:de:6d:71:85:87:7f:98:fe:e4:e1:f0:42:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7825451c356ba49190f71eab158a73d38cac559f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:31:79:77:12:d2:f1:ee:96:4f:4f:f3:c7:
98:be:18:50:1b:22:36:58:5e:a9:f1:9a:1e:e5:0f:
db:4c:e0:14:65:40:cc:e1:36:c0:bc:89:7a:8c:1e:
80:21:26:54:c2:d8:12:de:84:96:e3:62:a4:b0:64:
67:30:b2:53:06:1b:d4:18:1c:0c:c4:71:b9:40:6c:
4e:01:54:80:f7:26:22:0f:bb:2d:a6:2c:a7:dc:5f:
63:f2:94:ae:97:3d:ce:b1:9f:ee:cf:a0:b2:12:2b:
fb:d2:bc:24:f0:56:51:03:1e:a8:e4:90:92:d6:ec:
4a:6c:17:60:94:f6:02:9f:3b:57:54:08:c7:38:bf:
b5:17:5e:08:f1:c8:18:3f:fd:f8:96:07:f6:94:b2:
71:80:10:4c:d9:57:4f:4d:7a:51:2a:4e:ed:94:5d:
22:6d:f6:07:ec:cf:13:bb:f9:16:c4:99:5c:42:9b:
9f:05:e1:d0:0b:5e:ff:ff:bc:21:0f:ce:cd:fb:95:
0f:44:16:f8:7c:e7:8a:32:92:42:77:78:ed:d9:b5:
fd:28:ac:8c:31:d9:4a:3b:47:1d:37:67:a9:fe:fc:
51:fb:7d:25:a0:e6:54:b6:ab:39:ac:fb:67:64:53:
44:38:90:c5:94:f9:a3:9e:6f:47:dc:9c:24:bf:c4:
15:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:45:1C:35:6B:A4:91:90:F7:1E:AB:15:8A:73:D3:8C:AC:55:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.120.0/24
IPv6:
2a12:bb00::/29
Signature Algorithm: sha256WithRSAEncryption
91:95:4e:af:e6:60:4e:c3:d2:d1:34:6f:f0:27:af:a9:c6:e4:
5f:31:ac:c8:fc:ca:6c:35:53:cd:99:a5:69:e3:72:b4:54:3f:
6e:26:6f:a2:2a:cc:f1:d4:92:df:19:b6:17:0f:14:d3:d0:98:
9f:ee:e6:b6:41:e1:4d:a4:50:8b:b5:e8:65:37:aa:c7:c1:0a:
54:86:15:17:18:3e:4b:78:35:ed:15:ab:35:e8:51:21:d7:9d:
20:81:df:b7:9f:7c:1d:ac:8d:ea:f2:16:7e:74:e7:eb:2c:d8:
4d:2f:e3:41:29:0c:48:9d:fe:e7:6f:8c:7f:a0:54:91:69:7c:
2b:97:56:cb:cc:c9:a9:ce:06:01:10:26:29:ce:14:71:3d:6e:
c6:f2:12:4c:b3:fd:df:73:0e:26:56:e4:40:7c:3a:38:26:fe:
38:76:fa:8a:2f:bf:63:cd:b8:07:ae:7a:bd:6c:26:bf:27:8b:
89:08:ad:61:6e:c0:59:b7:e8:46:b7:97:4a:ee:96:b6:56:be:
2f:2c:fa:87:1e:1d:5e:9e:d3:ad:3d:82:b0:74:3b:bb:d8:f8:
7e:4a:66:e4:62:10:1e:1b:8d:94:b0:66:64:92:08:db:d7:ab:
1f:0a:29:0d:cc:fc:2b:af:fa:98:5c:68:66:b2:9b:bb:5c:9b:
a6:73:ec:66
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu095tcYWHf5j+5OHwQvejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODI1NDUxYzM1NmJhNDkxOTBmNzFlYWIxNThhNzNkMzhjYWM1NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2MxeXcS0vHulk9P88eYvhhQGyI2
WF6p8Zoe5Q/bTOAUZUDM4TbAvIl6jB6AISZUwtgS3oSW42KksGRnMLJTBhvUGBwM
xHG5QGxOAVSA9yYiD7stpiyn3F9j8pSulz3OsZ/uz6CyEiv70rwk8FZRAx6o5JCS
1uxKbBdglPYCnztXVAjHOL+1F14I8cgYP/34lgf2lLJxgBBM2VdPTXpRKk7tlF0i
bfYH7M8Tu/kWxJlcQpufBeHQC17//7whD87N+5UPRBb4fOeKMpJCd3jt2bX9KKyM
MdlKO0cdN2ep/vxR+30loOZUtqs5rPtnZFNEOJDFlPmjnm9H3Jwkv8QVtwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHglRRw1a6SRkPceqxWKc9OMrFWfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzliNjY3
Ny1iYjlhLTQ5NmYtYTEyOC1hYzJlZTVjNjY4MDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvOWI2Njc3
LWJiOWEtNDk2Zi1hMTI4LWFjMmVlNWM2NjgwNi8xL2VDVkZIRFZycEpHUTl4NnJG
WXB6MDR5c1ZaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhN4MA0EAgACMAcDBQMqErsAMA0GCSqGSIb3
DQEBCwUAA4IBAQCRlU6v5mBOw9LRNG/wJ6+pxuRfMazI/MpsNVPNmaVp43K0VD9u
Jm+iKszx1JLfGbYXDxTT0Jif7ua2QeFNpFCLtehlN6rHwQpUhhUXGD5LeDXtFas1
6FEh150ggd+3n3wdrI3q8hZ+dOfrLNhNL+NBKQxInf7nb4x/oFSRaXwrl1bLzMmp
zgYBECYpzhRxPW7G8hJMs/3fcw4mVuRAfDo4Jv44dvqKL79jzbgHrnq9bCa/J4uJ
CK1hbsBZt+hGt5dK7pa2Vr4vLPqHHh1entOtPYKwdDu72Ph+SmbkYhAeG42UsGZk
kgjb16sfCikNzPwrr/qYXGhmspu7XJumc+xm
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:39 2023 by rpki-client on console.sobornost.net