Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ra_ShN_sz3RcsubROR4mCxOjT-A.cer
File: ra_ShN_sz3RcsubROR4mCxOjT-A.cer (raw, json)
Hash identifier: eFROHLgozZ8SbkMewajC6DyuTJTZlqPAHCkeTPVP7U0=
Subject key identifier: AD:AF:D2:84:DF:EC:CF:74:5C:B2:E6:D1:39:1E:26:0B:13:A3:4F:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01865E60394F8B376C4CEEED77C5034CB478
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Feb 2023 07:56:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.104.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:60:39:4f:8b:37:6c:4c:ee:ed:77:c5:03:4c:b4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 07:56:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adafd284dfeccf745cb2e6d1391e260b13a34fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:57:75:9e:a0:b0:fd:02:cc:3f:fc:d3:a8:76:
a0:2b:a2:cf:66:9f:b4:b1:7c:79:53:a0:a9:39:09:
9e:fc:7f:cd:ba:e1:88:9a:0e:51:ad:d8:7a:4f:e8:
4e:51:a1:4f:fa:86:db:24:a8:b6:d7:14:19:27:8b:
32:a2:d2:af:c2:ff:8f:5c:4b:21:b2:5d:b3:5b:bf:
83:8c:a6:5c:86:78:d0:23:49:b4:12:70:4b:7c:c6:
9f:e2:5d:41:5c:9c:d3:14:2c:46:d0:d5:c2:15:dd:
6c:4d:ab:02:72:69:7c:8e:88:63:da:47:97:d3:12:
b1:97:3c:f8:03:8e:0e:cc:e2:c0:4e:d8:36:c3:b1:
e6:3d:95:d6:ad:67:08:62:af:34:d5:95:8a:8a:fb:
f5:45:90:01:af:c5:25:48:4b:a7:6c:71:73:da:a6:
78:ca:50:ae:fa:e0:2d:c2:06:58:a2:4b:84:94:50:
f6:76:af:d4:5a:2a:0a:eb:6e:82:68:ba:88:75:c8:
bd:8c:66:bd:ce:da:98:e7:37:0a:57:a6:03:9e:ac:
dd:7d:64:6c:b1:81:c5:ca:20:39:6d:48:10:1c:81:
d5:9e:43:ff:fb:9f:0d:7d:c4:fa:8e:c5:9d:68:0d:
94:7f:fe:fc:ca:23:e5:29:78:41:38:cf:2a:44:c2:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AF:D2:84:DF:EC:CF:74:5C:B2:E6:D1:39:1E:26:0B:13:A3:4F:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/4eef24-29c1-4d16-b264-55fc997b9f7c/1/ra_ShN_sz3RcsubROR4mCxOjT-A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2f:5f:22:64:b3:9a:9d:97:e0:6f:04:bd:3b:fa:fa:be:ad:
86:7e:4e:48:f8:8f:42:88:7b:35:c4:f1:de:ef:04:42:0b:e8:
37:82:78:43:8c:37:e4:ec:59:e2:be:91:31:45:49:1c:db:12:
6f:e6:59:96:ee:66:77:bf:22:48:c6:32:84:74:2c:ea:ff:4c:
e1:25:da:96:e9:1e:7d:84:19:b7:03:2d:95:8a:a2:ff:7d:6c:
23:8d:ff:1d:9c:dd:e6:2f:46:27:99:c5:c5:9d:3e:a3:a0:78:
db:80:82:50:4f:17:54:31:51:0a:f1:91:23:85:e5:ff:3e:ca:
30:88:cf:44:d4:1f:2d:83:b8:1d:d5:ee:d9:68:49:46:ee:dc:
52:53:27:6a:74:33:09:34:71:31:bc:e7:7d:45:21:84:46:9f:
b8:0c:81:e7:c2:bc:4d:47:66:01:65:97:4e:27:8c:b4:75:13:
b7:df:8d:0f:b4:9d:8e:0d:3b:51:22:31:e1:b3:d0:43:9f:23:
fa:53:68:c8:9b:bb:f7:e2:6a:68:94:e6:6f:57:24:4b:f6:e1:
39:21:36:f3:37:d8:86:fe:c0:ec:aa:60:0e:1e:b6:e6:98:9e:
9b:84:bf:6e:55:f0:c5:76:f8:cc:85:4f:77:89:fc:44:74:26:
91:60:12:51
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYZeYDlPizdsTO7td8UDTLR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjE3MDc1NjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGFmZDI4NGRmZWNjZjc0NWNiMmU2ZDEzOTFlMjYwYjEzYTM0ZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Fd1nqCw/QLMP/zTqHagK6LPZp+0
sXx5U6CpOQme/H/NuuGImg5Rrdh6T+hOUaFP+obbJKi21xQZJ4syotKvwv+PXEsh
sl2zW7+DjKZchnjQI0m0EnBLfMaf4l1BXJzTFCxG0NXCFd1sTasCcml8johj2keX
0xKxlzz4A44OzOLATtg2w7HmPZXWrWcIYq801ZWKivv1RZABr8UlSEunbHFz2qZ4
ylCu+uAtwgZYokuElFD2dq/UWioK626CaLqIdci9jGa9ztqY5zcKV6YDnqzdfWRs
sYHFyiA5bUgQHIHVnkP/+58NfcT6jsWdaA2Uf/78yiPlKXhBOM8qRMID1QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFK2v0oTf7M90XLLm0TkeJgsTo0/gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzRlZWYy
NC0yOWMxLTRkMTYtYjI2NC01NWZjOTk3YjlmN2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNGVlZjI0
LTI5YzEtNGQxNi1iMjY0LTU1ZmM5OTdiOWY3Yy8xL3JhX1NoTl9zejNSY3N1YlJP
UjRtQ3hPalQtQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1BJoMA0GCSqGSIb3DQEBCwUAA4IBAQBtL18i
ZLOanZfgbwS9O/r6vq2Gfk5I+I9CiHs1xPHe7wRCC+g3gnhDjDfk7FnivpExRUkc
2xJv5lmW7mZ3vyJIxjKEdCzq/0zhJdqW6R59hBm3Ay2ViqL/fWwjjf8dnN3mL0Yn
mcXFnT6joHjbgIJQTxdUMVEK8ZEjheX/PsowiM9E1B8tg7gd1e7ZaElG7txSUydq
dDMJNHExvOd9RSGERp+4DIHnwrxNR2YBZZdOJ4y0dRO3340PtJ2ODTtRIjHhs9BD
nyP6U2jIm7v34mpolOZvVyRL9uE5ITbzN9iG/sDsqmAOHrbmmJ6bhL9uVfDFdvjM
hU93ifxEdCaRYBJR
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:22 2023 by rpki-client on console.sobornost.net