Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer
File: ph95pHePT1U9Sm-LSn3aZ_Y4bAk.cer (raw, json)
Hash identifier: U5QBrIqjgjgeyhxSwxpMwuTeoJ7SHS7HTZ+zVX4Vwgc=
Subject key identifier: A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF75679E4241275439BA21A578875AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 60118
IP: 176.126.236.0/22
IP: 176.126.252.0/22
IP: 185.57.80.0/22
IP: 185.233.148.0/22
IP: 2a02:59e0::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:56:79:e4:24:12:75:43:9b:a2:1a:57:88:75:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a61f79a4778f4f553d4a6f8b4a7dda67f6386c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:03:57:54:dc:a3:4b:a7:a0:af:27:2a:85:
2e:a0:4a:3e:fe:b6:dc:f5:4e:59:f7:6b:7c:17:42:
6f:8c:e8:80:41:b4:9b:7d:a7:11:b8:96:03:7d:97:
b7:0b:69:4f:4a:7b:4d:be:79:f9:b2:25:31:31:9b:
91:9a:be:4f:86:c3:c4:f8:a8:73:ea:66:8b:53:92:
e9:3a:ea:11:3f:92:7a:6c:c3:35:47:81:c8:3f:ff:
d3:48:0f:c7:62:02:d1:48:1f:dc:4a:cd:da:85:22:
6b:b2:10:57:30:b1:bd:ba:d4:01:1b:e0:eb:a4:71:
51:ca:c6:6d:69:22:0d:21:76:a4:5a:54:55:40:89:
40:11:9d:33:58:6a:ed:92:3b:59:b7:e3:a6:bb:8d:
76:6e:7c:13:61:12:0d:a8:8a:eb:b4:b6:bd:d0:bc:
3d:01:b7:ca:7b:3a:76:c7:11:d1:5d:23:5e:cc:28:
7a:48:df:db:b1:81:16:ea:5c:b9:a4:4d:e6:c7:72:
4c:13:b9:53:01:e6:23:0a:11:4c:cf:6c:03:ab:14:
95:4f:b8:ae:0e:77:6c:14:b9:ba:70:c8:f1:0e:ca:
23:ee:a3:b0:7f:0e:79:b9:93:c3:cb:b9:17:76:bc:
76:4f:e0:31:1e:91:f7:da:0b:c5:fa:07:c6:50:7e:
77:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:79:A4:77:8F:4F:55:3D:4A:6F:8B:4A:7D:DA:67:F6:38:6C:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6546f8-95f1-431f-af15-009734820b2f/1/ph95pHePT1U9Sm-LSn3aZ_Y4bAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.236.0/22
176.126.252.0/22
185.57.80.0/22
185.233.148.0/22
IPv6:
2a02:59e0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60118
Signature Algorithm: sha256WithRSAEncryption
0c:a4:e5:32:50:27:e6:f6:24:a6:8a:7a:84:e7:5d:6e:f9:aa:
52:03:dc:dc:a8:01:d5:dc:5b:1c:0e:74:70:a1:82:ef:a8:49:
27:b7:74:20:79:65:83:04:73:ed:98:86:dd:3b:9a:d9:52:2e:
7e:42:41:55:c0:b0:41:d6:1d:bb:e0:32:3e:ed:3c:ab:ad:fa:
80:d7:63:91:e4:1a:e8:64:c5:ac:ed:98:ab:c6:fe:82:fc:0b:
75:05:da:19:59:b0:99:b3:6e:f1:67:46:f4:42:bb:d1:f4:87:
48:11:d2:c8:4f:80:e4:67:e2:36:42:cb:95:fe:82:4a:f3:60:
c6:8a:ea:c0:d9:a3:76:ef:ea:5b:e2:44:76:d5:4c:6c:24:44:
eb:3b:f3:82:f5:42:3e:6f:f4:6d:e9:13:ae:47:6f:ea:0d:3b:
bb:7d:32:fd:8c:a7:69:66:37:ed:4b:8e:26:0c:31:92:4c:0b:
f3:ed:a8:74:77:04:e7:fe:bd:f8:10:b4:fe:24:d7:da:ff:63:
67:b7:c9:c1:fe:56:e6:81:56:12:f9:b3:30:c4:66:26:f0:64:
f8:47:a6:ac:bc:61:8f:5b:91:ad:a6:d3:68:26:46:07:78:e7:
cf:b0:19:9e:03:57:e9:94:dd:44:f3:a6:23:83:98:92:75:0a:
dc:93:0c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:16 2023 by rpki-client on console.sobornost.net