Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.cer
File: wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.cer (raw, json)
Hash identifier: vLMvRQgKrzt+vFlQrMfNaL/ycUp/ka/pcrUFmlL5ky0=
Subject key identifier: C2:7F:FE:63:D6:67:C4:79:CF:34:DC:C0:83:BB:7D:21:FB:AC:A9:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD06F2E38E2D4CCC4429C64F1E9758
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.235.100.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:06:f2:e3:8e:2d:4c:cc:44:29:c6:4f:1e:97:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c27ffe63d667c479cf34dcc083bb7d21fbaca9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:72:f3:29:da:74:66:1b:42:45:7f:85:df:
dd:93:e0:7c:ae:00:c7:b8:90:25:9c:72:32:1f:5c:
3f:91:5a:32:46:29:ca:c8:83:47:bb:22:cf:0f:5a:
bf:13:7b:d9:0c:0b:fa:15:e0:3d:a7:64:93:83:b8:
16:ce:c5:a3:76:2e:e1:2b:7f:f8:ee:94:e7:01:3d:
98:70:2c:1f:be:2c:10:33:ee:ee:6f:cb:3f:8a:00:
75:3c:24:87:e2:dd:08:06:9f:50:d0:4d:ca:18:22:
08:39:7b:56:3d:d5:9b:77:7e:d8:b9:c0:22:e2:54:
e7:36:45:be:7c:5d:92:50:42:c4:7a:e9:aa:b1:ab:
cb:c4:eb:18:01:35:cb:0f:e1:7b:89:46:9f:10:ff:
2e:08:c2:44:93:e6:59:07:c5:fd:33:fd:37:80:d5:
0e:be:8b:78:5e:b9:9d:f3:a0:e2:43:84:52:8d:5d:
71:9d:b7:c2:52:ca:7b:3c:47:64:6f:0d:f5:a2:20:
da:c8:90:c7:41:4b:5b:0a:e2:56:15:a7:e7:c9:d0:
ea:4f:16:74:f0:b8:4e:6e:17:30:2a:c1:86:a3:ce:
84:06:05:5a:81:5c:da:4d:f2:ed:8d:4a:e8:96:1b:
09:b0:a8:c5:25:0f:9a:cf:ea:97:f3:8d:76:13:8e:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7F:FE:63:D6:67:C4:79:CF:34:DC:C0:83:BB:7D:21:FB:AC:A9:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.235.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:56:7f:04:73:ed:5c:60:81:59:0b:3c:5c:fc:b7:be:57:23:
b5:34:54:87:f2:d2:c1:73:99:36:21:d2:03:96:3a:7b:5b:dc:
17:d5:14:49:0f:9e:61:a4:a2:b8:15:e4:19:c1:db:ae:2a:79:
6b:3b:d2:5e:e5:9b:cd:77:c1:f9:ed:8a:f0:2c:7a:0a:8d:37:
43:35:03:c7:ac:45:69:ec:60:e0:e0:c7:24:27:cd:8d:ac:4b:
d9:38:f5:67:b9:d1:e9:50:e6:a5:8e:f2:98:e1:f0:4f:64:c6:
aa:e2:b6:a0:5b:5c:26:97:e5:59:c5:71:92:53:19:77:21:52:
9c:b0:6a:f3:1c:fd:3e:f7:5a:2e:f6:ff:8c:fe:0a:be:27:cf:
e2:c4:87:f4:67:3a:c7:35:91:3f:ba:3d:d0:b8:03:cc:be:4f:
43:bb:93:6a:00:4d:0f:7c:f3:84:6b:44:dc:89:a3:04:dc:90:
8c:12:2e:a8:dd:c1:24:e0:2d:50:de:19:77:c8:d9:92:5a:e3:
6a:d4:4f:1c:7d:e6:69:92:c3:2a:08:65:58:ed:44:96:60:1b:
3d:a4:a8:f8:b5:7c:aa:be:63:e4:26:1a:53:03:a1:95:85:1b:
fe:85:30:1e:22:31:f8:85:7a:81:fb:a9:a5:e4:1b:53:f9:2e:
76:ac:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:42 2023 by rpki-client on console.sobornost.net