Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer
File: 1EvPqrT1ZGEzeyKwOOdf9knvOVk.cer (raw, json)
Hash identifier: Nqh1sqps2H+Ksixb7cEuPZwEtW0qtDr1JLfgGh3enBc=
Subject key identifier: D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D899522EA1247C31D836B688279FC60
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.216.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:95:22:ea:12:47:c3:1d:83:6b:68:82:79:fc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44bcfaab4f56461337b22b038e75ff649ef3959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:ec:51:39:0e:90:16:66:ce:25:32:cc:9d:
03:46:b9:0d:cc:e1:55:3b:6a:4d:77:e1:be:f8:62:
d1:65:31:3c:f1:1a:1a:4a:ba:45:88:b4:0d:87:40:
1b:07:9e:d0:27:17:c4:bb:1f:91:85:04:28:61:e2:
40:19:cf:d4:90:b6:b5:e5:fd:a5:1d:50:83:37:b4:
c1:91:4c:b0:41:17:f3:07:b7:f4:08:ed:f5:59:e2:
d5:6d:13:3b:99:81:21:56:9c:4b:5e:05:15:37:f8:
d0:60:20:94:4c:d8:ab:e5:5e:83:dc:b5:31:cb:64:
ae:98:2e:fa:2c:3b:e9:a0:64:c7:01:79:04:68:d4:
2b:58:03:80:ab:8c:6d:9b:59:5a:02:ce:c8:f1:56:
6a:2e:83:89:f0:d4:0b:3b:e8:3d:7e:0d:f0:d0:d1:
33:75:94:db:12:94:72:f7:8a:cb:7c:88:03:02:64:
ab:70:68:38:f2:0d:69:5e:84:9c:06:a8:3d:2e:85:
cd:33:50:38:8e:54:41:90:8d:78:e2:b5:f7:c8:01:
ca:03:e3:97:a1:c2:8b:b4:a2:b8:f3:19:6e:1c:e8:
2c:86:bc:d2:03:c5:8f:3d:16:2e:fa:4a:62:94:0f:
14:13:21:46:db:94:82:02:e0:53:e7:08:b1:65:cf:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:CF:AA:B4:F5:64:61:33:7B:22:B0:38:E7:5F:F6:49:EF:39:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2ab2ad-3bda-4b86-bab4-d634d7e5525b/1/1EvPqrT1ZGEzeyKwOOdf9knvOVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.216.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4c:40:3a:8e:53:85:e1:d6:72:2a:75:ba:0f:f5:27:2b:fe:
25:28:de:6d:37:fa:db:db:f3:05:b3:28:56:b8:e0:3e:8d:b6:
9c:13:ff:c3:46:68:ea:85:3c:93:d5:5a:04:80:4d:4f:ac:12:
8b:b2:6d:85:4e:dc:82:e8:53:0e:38:53:47:f3:5c:b9:bd:84:
16:5f:9c:85:8f:6c:12:39:dc:5a:dc:40:66:6e:55:f3:c4:96:
49:37:64:0b:66:ca:9a:c4:7d:c9:21:b9:fb:02:f2:eb:46:dc:
af:85:e2:a0:b1:8e:2b:c4:02:9a:cc:dc:e0:af:f8:51:30:13:
12:34:11:e5:7c:0d:12:58:71:ee:87:3b:ce:63:05:cd:ee:f4:
a9:de:58:9a:7b:50:62:32:8b:f7:78:eb:07:e3:d2:19:25:a0:
80:59:aa:4c:6d:c2:b6:a8:3c:b9:6c:54:6d:54:f7:59:6b:e3:
bf:fd:9d:72:18:5b:da:05:b8:7a:68:6d:e6:dc:44:d1:d8:f0:
c1:8e:ed:34:44:b7:c2:d6:05:49:26:77:a1:7c:29:dd:be:48:
2e:43:87:9a:8c:3d:15:de:b2:7f:c3:1c:32:3a:d7:d8:7d:b0:
75:6a:12:89:9e:a7:b5:e6:63:18:f5:8c:41:a7:a6:77:37:49:
d4:0c:9b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 10:11:38 2023 by rpki-client on console-fra.rpki-client.org