Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
File: ABOK9m601Vf6Szk5xsvZYakSNWA.cer (raw, json)
Hash identifier: /Z136KTCmEEdbz2dOsmoaE8VbsIjruCr0gCSweT218A=
Subject key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E653A14BDD44C2A9504F579AD0C32C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.155.156.0/22
IP: 194.50.223.0 -- 194.50.224.255
IP: 194.50.233.0/24
IP: 194.50.243.0/24
IP: 2a0f:c80::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:3a:14:bd:d4:4c:2a:95:04:f5:79:ad:0c:32:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:36:f8:49:1f:2b:ed:55:75:b1:84:34:ad:
80:13:3d:8c:c1:98:aa:f5:e4:f4:12:89:fe:bc:e5:
d8:94:5f:30:87:12:e0:f9:27:19:6d:58:0a:0d:0f:
75:59:f7:3e:80:5f:54:23:f2:6e:57:bb:64:38:de:
34:07:44:c3:5f:42:7b:e4:25:4f:4c:37:c6:9e:7d:
65:42:cf:90:e8:23:19:52:7d:75:3e:aa:6f:19:73:
30:fb:70:cc:9c:52:82:a5:62:7a:78:2a:53:58:02:
ea:74:ff:be:40:9f:52:a0:36:06:53:80:d0:80:78:
38:0e:bd:31:c6:f2:c6:86:9b:65:2e:c8:82:1f:9b:
ed:5f:0b:13:f0:15:18:07:79:3b:eb:76:68:3d:8d:
71:50:8f:f8:a0:10:fd:6e:b5:1e:e7:7f:05:6a:80:
36:9a:c1:9f:8a:0d:25:36:e2:ae:6c:69:a7:14:7c:
a6:02:c7:c5:3f:96:6f:f1:24:78:6c:d7:3e:4c:51:
28:ec:e4:b8:f4:7d:e0:d3:ce:85:8e:80:13:09:10:
eb:ed:a4:1e:f3:e6:8e:10:c5:72:c6:f8:50:d1:5f:
37:8c:af:e7:be:6a:26:c6:90:92:59:6b:1e:fe:3d:
7b:b8:34:02:49:54:ad:ba:4c:19:14:81:45:85:74:
cf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.156.0/22
194.50.223.0-194.50.224.255
194.50.233.0/24
194.50.243.0/24
IPv6:
2a0f:c80::/29
Signature Algorithm: sha256WithRSAEncryption
21:bd:9d:4b:1f:28:c2:f5:10:b2:f6:07:b7:cd:9e:8c:0e:0e:
3d:fa:57:b0:55:55:a0:cc:11:b0:b4:87:71:cc:c8:90:8c:b5:
44:b4:50:cb:38:76:1a:ed:86:6e:5a:e0:ab:72:9a:51:0a:72:
38:40:e9:1a:f1:40:ab:7a:4a:40:a3:7a:7e:ef:0d:6c:11:20:
48:82:7f:4d:ca:26:36:14:08:3f:bb:c7:eb:d7:9d:23:c8:c1:
bc:a5:af:58:11:de:cf:86:66:8f:74:67:b5:b8:82:d2:31:42:
96:66:96:67:37:8d:c5:5d:58:11:58:b8:24:0f:fc:43:6a:a0:
a0:f5:90:7a:3a:cf:ee:1f:d0:a8:40:3a:7c:c9:61:23:f2:b3:
60:7b:42:e7:ea:08:37:f6:ee:7a:bd:12:25:f5:cf:a4:16:95:
67:05:34:00:59:3f:f1:85:c3:58:1d:ee:2b:e7:8d:2f:59:30:
f3:db:c5:e7:6d:46:28:61:76:48:cd:ff:c5:b5:d9:e6:ff:8c:
ec:87:21:77:35:3b:de:f8:37:90:92:39:0c:61:07:d6:51:f0:
6e:0b:8b:86:9a:e3:d3:b6:46:72:33:5d:2e:cc:b9:a4:87:80:
fa:3f:67:0d:c4:b3:fc:be:06:98:db:af:14:34:a2:59:dd:df:
12:ab:f9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:11 2023 by rpki-client on console-fra.rpki-client.org