Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
File: h1pNhS1vLlnpN62_ESj8JLDUCQA.cer (raw, json)
Hash identifier: SmChqlDZby4fx33iqaQ5UjC8sfo9DCTE5wTm3a406yA=
Subject key identifier: 87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B61CDFE4E8A168C9FCC37113A6FCAF241
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Oct 2023 13:09:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 77.72.81.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:cd:fe:4e:8a:16:8c:9f:cc:37:11:3a:6f:ca:f2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 13:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:a2:0e:f5:d0:72:62:8a:b8:07:10:13:39:
7a:81:21:90:6d:70:e4:12:ef:e7:18:bf:cd:64:2a:
9c:a3:4a:2b:d4:0b:43:95:41:97:ab:21:38:37:33:
15:1d:e7:fb:a8:17:86:be:d5:3b:fc:9c:97:57:19:
11:9c:34:63:a1:e0:d0:4a:1b:bd:d8:aa:29:52:b0:
ca:d8:36:42:8f:e7:6f:7e:bf:b2:ff:f0:1b:0a:9d:
c4:09:f4:b3:41:17:e6:59:f2:29:a7:40:91:86:49:
86:9f:3a:ba:2d:95:4c:c9:29:5b:c8:b2:58:e1:e9:
80:55:a4:54:1b:ec:47:3a:45:00:0b:f6:eb:96:c9:
ce:58:18:ed:d7:eb:d6:88:d0:c3:b7:cb:7b:d7:af:
89:a7:3c:24:c3:0c:bb:0e:2e:6a:30:03:21:d0:e7:
60:6f:49:98:65:3e:4a:b9:e7:c7:b5:58:e5:de:f5:
6b:5a:e1:4e:b2:ae:3f:80:30:70:43:a4:ae:2a:57:
c1:3e:f0:3f:47:19:1b:8e:5d:b7:de:eb:95:fd:6f:
10:4b:a9:da:42:40:14:7c:65:64:20:d3:6a:8c:6e:
ce:7d:b7:28:f2:02:d4:ad:de:ef:13:17:4d:b4:90:
8a:7a:26:01:2a:b9:33:2d:d6:0a:73:d0:6f:53:50:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ff:f3:d2:b1:e2:30:45:68:21:aa:0b:c6:a0:47:9e:5c:af:
55:e8:fc:5e:8c:9f:19:3a:60:73:dc:eb:e5:6c:75:0f:b1:d2:
1d:ca:01:1c:c6:97:4f:d3:8a:91:ff:0d:13:12:8a:b5:fa:ce:
4c:b6:59:d8:d5:18:f6:cc:fb:d5:7a:27:06:ca:f7:20:9d:00:
9b:83:c2:05:0e:33:fc:1c:61:2d:1d:fa:c8:e8:2f:c0:4e:a3:
9f:ec:a3:e7:d0:12:b3:4b:07:db:5e:91:07:9e:e0:e3:21:64:
7b:dc:b9:e2:a2:1b:05:28:04:c5:33:bc:34:26:d7:2d:73:96:
dc:8a:7f:2a:9c:04:65:79:be:af:61:2f:59:d7:88:0f:62:82:
33:ea:dc:2b:22:9f:0e:6e:6a:4d:47:e9:6c:2d:67:89:ed:4e:
f9:a3:bc:f5:a8:5d:ff:fd:61:6f:80:d5:8a:38:45:73:53:1b:
9c:84:25:eb:84:1b:ea:f5:b9:67:63:c8:55:fe:dd:01:e8:5b:
ab:46:63:69:a6:1a:a3:97:e3:3e:35:51:57:9e:b2:58:57:eb:
dc:79:79:30:f9:28:db:c5:2f:24:86:5f:b2:9c:4f:ad:67:da:
e8:2e:7d:7d:76:90:db:77:f1:c5:13:63:10:20:04:37:02:3a:
8f:e6:ba:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:13 2023 by rpki-client on console.sobornost.net