Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
File: nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer (raw, json)
Hash identifier: 69O5UF9rz0+1YsZuTqjyib+pwMOyv+iOQttIdOymnBE=
Subject key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAC792E0B443D530EF6FFF7FB22C02D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.13.228.0/22
IP: 45.80.200.0/22
IP: 45.83.224.0/22
IP: 45.91.88.0/22
IP: 45.94.232.0/22
IP: 45.131.92.0/22
IP: 45.134.104.0/22
IP: 45.138.92.0/22
IP: 45.143.172.0/22
IP: 45.149.20.0/22
IP: 45.158.212.0/22
IP: 82.115.215.0/24
IP: 176.111.172.0/24
IP: 185.211.42.0/24
IP: 194.124.252.0/24
IP: 194.124.255.0/24
IP: 194.126.131.0/24
IP: 194.126.194.0/24
IP: 194.150.167.0/24
IP: 195.158.249.0/24
IP: 2a05:bc00::/29
IP: 2a06:80c0::/29
IP: 2a06:8e40::/29
IP: 2a06:8e80::/29
IP: 2a06:a240::/29
IP: 2a06:a2c0::/29
IP: 2a12:ad40::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:79:2e:0b:44:3d:53:0e:f6:ff:f7:fb:22:c0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:28:70:63:5b:67:33:f3:a3:d9:61:ec:72:
42:b7:7e:cc:64:9b:0e:15:19:77:2b:fd:42:f5:ca:
bc:0e:64:94:1f:8b:bd:42:e9:4c:4f:69:db:98:af:
9a:27:f0:33:89:34:68:bc:ea:8b:0d:b9:e7:65:2d:
6a:dc:ac:48:c8:ea:80:a8:d0:05:28:c1:3e:3a:fa:
fa:05:af:8a:c6:a8:e3:a1:8b:0c:12:66:da:bc:e2:
f4:e8:5c:da:52:f2:63:77:4a:37:ed:6f:0b:76:d5:
72:df:f0:a1:c2:62:51:13:55:6f:c1:49:5e:72:82:
32:f0:c2:d3:05:c2:14:1e:8d:30:7c:d2:ac:52:68:
0f:5b:02:8c:13:95:ef:d9:00:40:e9:15:52:a5:06:
f4:84:5d:fc:5d:8d:19:a2:6d:16:54:e4:6e:19:2b:
d0:00:18:21:fe:1a:16:d3:5e:b7:a9:f5:96:b1:e5:
fc:bd:55:d9:09:fd:93:52:f4:eb:35:1d:1e:9b:9a:
a2:71:b3:b4:d3:92:6f:66:2a:92:a4:a5:0a:2c:e4:
bb:f5:1d:4b:f7:0d:97:98:1e:56:58:8b:e4:8b:a2:
42:42:36:02:79:4c:a4:73:e1:9e:25:26:58:f1:35:
dd:3d:0a:50:32:ec:86:78:e0:be:e0:3e:d5:e4:81:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.228.0/22
45.80.200.0/22
45.83.224.0/22
45.91.88.0/22
45.94.232.0/22
45.131.92.0/22
45.134.104.0/22
45.138.92.0/22
45.143.172.0/22
45.149.20.0/22
45.158.212.0/22
82.115.215.0/24
176.111.172.0/24
185.211.42.0/24
194.124.252.0/24
194.124.255.0/24
194.126.131.0/24
194.126.194.0/24
194.150.167.0/24
195.158.249.0/24
IPv6:
2a05:bc00::/29
2a06:80c0::/29
2a06:8e40::/29
2a06:8e80::/29
2a06:a240::/29
2a06:a2c0::/29
2a12:ad40::/29
Signature Algorithm: sha256WithRSAEncryption
91:1b:a5:48:9e:46:5e:f2:f6:3d:17:7d:9e:fb:0a:f7:c7:a7:
d8:d2:a3:34:55:b3:be:6a:8d:04:e9:bc:a8:b3:6d:c6:59:2c:
a8:da:9e:a0:5c:95:0a:d0:c1:ca:db:e3:a5:3a:1e:00:6d:9c:
21:63:04:af:b2:fc:86:5a:80:52:65:88:bf:d7:6e:06:cf:9b:
9c:3e:cf:38:2f:51:a6:aa:e3:3b:80:42:dc:01:e4:1f:1a:ea:
a4:5d:37:7e:7f:13:74:6f:d0:c3:55:27:30:2b:e6:8b:04:28:
ab:8c:e3:a6:75:02:f4:e2:c6:06:23:43:e3:20:c2:66:e4:47:
be:c4:ab:8b:3a:65:4d:75:1c:6b:1a:c7:ff:68:bf:93:ed:bd:
bf:c6:84:4d:e8:f0:44:67:cd:3f:e8:d1:d1:5e:67:9f:5e:07:
a8:a6:49:b9:f0:9d:d4:11:2c:62:39:4a:90:e5:92:11:01:6e:
1b:e9:60:fa:92:5c:41:1c:a6:f5:c5:0d:e8:01:e2:26:71:f7:
9a:9a:76:48:43:14:5b:dc:d7:4d:f9:f8:55:22:91:a4:cb:0b:
49:68:54:45:55:33:9b:3c:87:f7:a0:50:43:82:db:93:b6:b3:
ae:e5:d9:93:02:60:ae:cb:51:07:2c:2f:ac:f8:24:53:98:5c:
e6:9c:14:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net