Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-43HrlXoFkpx6oxds8KP_JDt-ck.cer
File: 1-43HrlXoFkpx6oxds8KP_JDt-ck.cer (raw, json)
Hash identifier: WSJjVta0+6NhUZLUi3O5Vf5/aEX7SCqO5sljb8+PHFg=
Subject key identifier: FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FB0F37F5835CD5F7B218BEFF1C43AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/1-43HrlXoFkpx6oxds8KP_JDt-ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.38.154.0/24
IP: 2a11:8400::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:0f:37:f5:83:5c:d5:f7:b2:18:be:ff:1c:43:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb8dc7ae55e8164a71ea8c5db3c28ffc90edf9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:31:ef:95:8b:70:11:35:90:db:c8:ef:eb:
37:7d:e8:1b:22:d6:9f:01:b3:22:3e:73:46:f1:57:
3d:0e:7a:c4:e7:71:8c:cb:52:28:d6:97:07:44:d7:
97:ee:af:5e:b7:bd:36:b3:dc:64:a4:ac:a2:8b:cb:
74:15:73:6a:14:01:e6:f5:e1:82:80:8d:47:b6:3a:
92:ea:1a:ec:da:4c:51:a7:79:9b:c7:5c:46:fc:f0:
6d:7f:ed:65:b4:f2:fe:f9:66:87:77:c4:47:c8:f7:
e8:58:82:f1:ca:6e:d4:63:ea:e1:50:8e:4e:32:32:
87:6c:ec:5c:ff:1d:6e:51:ae:6f:ab:d3:13:17:e2:
ce:d4:df:5d:f1:98:8f:db:e4:93:22:09:56:bc:1b:
27:6b:09:de:6a:fe:16:3d:3d:6e:80:a0:ed:ee:ea:
cc:e0:69:ff:36:c9:4b:dd:36:0c:05:b8:c6:7b:2e:
f1:27:c6:37:3c:2d:c6:7f:72:a7:0c:6e:4c:a1:38:
93:a5:8a:2e:02:46:a9:19:10:50:7f:ae:a6:15:13:
e9:79:8b:3a:76:a6:11:16:41:53:97:40:2a:1d:81:
fe:b3:03:de:9c:6c:cb:a3:1d:14:d3:6a:97:5d:22:
3e:1d:d8:92:5f:45:94:5d:55:7e:98:ba:a5:a1:f1:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:C7:AE:55:E8:16:4A:71:EA:8C:5D:B3:C2:8F:FC:90:ED:F9:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f08177-a306-405a-869f-4f0abc16a964/1/1-43HrlXoFkpx6oxds8KP_JDt-ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.154.0/24
IPv6:
2a11:8400::/29
Signature Algorithm: sha256WithRSAEncryption
40:27:20:e4:db:2f:23:49:5c:3b:eb:e5:fa:24:58:af:e4:20:
a9:a6:48:24:33:7c:be:3a:29:84:af:35:c4:36:c7:a9:d8:f0:
73:c2:cb:b4:a3:19:26:f5:85:f2:9f:a0:3e:78:10:3f:b1:b2:
f8:20:7d:81:2d:d5:d9:71:74:90:db:ab:57:94:77:f1:fb:6b:
55:89:46:07:0a:57:46:64:ab:d8:d8:ce:66:de:37:1d:c8:08:
3f:64:58:2d:3d:28:a6:73:fc:da:ef:0b:42:63:bf:38:1c:d2:
49:c0:7b:6b:29:a1:b9:66:a2:88:3d:21:fe:18:91:79:59:9b:
4e:dc:1b:99:39:a8:16:a0:6a:f2:eb:35:c1:91:85:7b:5a:5f:
30:07:41:26:2e:e3:f3:94:49:4a:0d:33:d5:90:d2:d1:c2:cc:
3a:40:45:c9:09:32:e4:7b:0d:e2:9b:13:84:50:d2:7c:5e:2e:
f6:82:24:c5:7e:d1:7a:a0:2e:53:a7:fd:46:ff:7d:66:f0:36:
11:d2:57:6a:4c:7f:1b:6b:2d:6f:61:71:41:91:e7:d2:23:d9:
bc:ec:85:ac:f1:7f:34:31:9e:ab:67:a6:1d:d3:d9:66:44:86:
75:55:ba:34:67:df:9a:7d:3b:13:b3:81:24:3e:7e:1d:ea:db:
6f:c3:6a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org