Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
File: 3GebKCY67XLzPHZYcv4ptrlAdbc.cer (raw, json)
Hash identifier: ueghruDVNPZLGG8jvYOGdSAOBFarC/9fOYso36S+Swg=
Subject key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BF17A8E3DC5555F655FB7D628C2986C07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Nov 2023 10:43:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.219.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:7a:8e:3d:c5:55:5f:65:5f:b7:d6:28:c2:98:6c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 21 10:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc679b28263aed72f33c765872fe29b6b94075b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ce:46:62:26:08:0a:59:4d:df:31:05:0b:24:
b8:92:6c:95:7d:cf:12:85:82:8d:d0:0d:4d:79:f3:
fd:ea:3d:07:23:2c:19:7d:24:85:49:ce:3c:f1:26:
c4:8f:78:1d:57:29:13:fc:08:bf:be:f1:83:ba:de:
97:68:8b:6d:c1:88:47:f8:7d:4b:94:71:ad:79:8b:
74:9b:0e:dc:15:92:cb:11:a4:51:98:aa:db:5e:00:
31:2a:b1:1e:08:32:c4:f0:82:20:10:61:82:9e:f7:
82:6e:9e:58:0b:41:88:88:d9:5d:7f:05:34:86:33:
a8:c4:88:9e:67:8f:7a:db:6a:84:93:a3:88:3e:1b:
88:93:b8:56:50:f0:c4:80:4b:8b:12:12:a4:9c:79:
52:af:e6:2c:c8:3f:e2:1f:fc:8e:a9:9f:ae:d8:08:
fa:dc:6c:1a:54:e5:fb:a0:c1:3f:06:93:ea:3c:a1:
88:18:05:6a:b8:fe:8b:a6:d5:da:60:6c:18:30:ed:
a4:d5:57:97:9c:4b:96:df:9a:75:21:24:57:76:d3:
ba:a5:31:2c:b8:b0:b3:a4:f0:98:ef:11:e2:bb:26:
98:6b:34:26:ee:c3:1d:36:f6:79:2e:e7:8c:3d:31:
f9:cd:74:7f:45:a1:f3:0f:c8:83:16:6b:16:67:41:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.219.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f7:c9:cf:3e:f8:c6:d7:5c:f6:76:62:43:e2:4d:f4:c6:41:
2c:b6:29:bd:4b:9d:8c:d9:6d:b5:27:34:ba:79:f0:57:bf:e4:
fd:39:e4:93:57:97:de:0d:f7:49:26:1f:76:f6:0a:be:33:45:
95:47:56:90:bb:fb:9d:eb:7f:ac:c9:ea:d4:ab:59:72:12:af:
20:5f:60:68:15:f2:21:5d:74:c4:b7:01:35:cd:50:3d:3b:fe:
c8:64:ee:0f:e1:82:86:62:9c:d5:fc:41:61:5d:e2:22:17:c7:
53:36:20:cc:c3:89:11:01:6a:1c:08:9d:02:5c:cd:73:c0:af:
1c:6e:a0:a5:75:c7:d7:dc:a1:29:98:7a:90:c6:c8:a7:1b:f6:
f8:4d:bc:6f:63:84:f9:aa:f7:44:0f:c5:1d:38:89:7e:84:59:
fa:e0:b4:f1:17:bf:24:5c:2d:b6:df:8f:14:0a:86:06:fd:cc:
5f:4c:a0:11:87:1e:c9:9b:ff:8c:b8:48:99:68:b2:63:65:66:
d0:a8:9c:05:ca:18:7f:47:03:68:76:24:35:6a:03:49:36:68:
72:94:d2:ad:bb:22:3c:20:ea:f9:26:e3:5f:fb:6e:ee:60:74:
ce:f6:7d:f8:c5:2d:63:c7:4a:06:da:e7:fb:0c:4b:ef:e6:ba:
ce:9a:8b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 11:45:29 2023 by rpki-client on console-ams.rpki-client.org