Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.cer
File: 3U6j_ItIVQH3Ig5hOCq9cyEe4qg.cer (raw, json)
Hash identifier: y+Yh5nbn69m1SR1Cge1J+wO+xDytVIC0bKOTT0GnBbQ=
Subject key identifier: DD:4E:A3:FC:8B:48:55:01:F7:22:0E:61:38:2A:BD:73:21:1E:E2:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBA3B1D710ED85FF0550EA958807BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.25.107.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:a3:b1:d7:10:ed:85:ff:05:50:ea:95:88:07:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd4ea3fc8b485501f7220e61382abd73211ee2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:8f:ae:bd:dc:57:99:9e:db:8f:21:8f:99:
f0:a5:62:99:a9:e5:03:e9:34:57:a2:cf:77:38:22:
d2:f6:9c:c9:1c:44:f7:13:a5:db:91:6d:4f:cb:99:
8c:7b:3f:f8:31:8a:9d:1d:8f:61:6a:dd:49:2f:c3:
1f:89:6a:7c:e8:0c:a0:26:4d:b0:b4:8d:ff:12:52:
e6:4e:8a:4f:00:dc:9c:70:55:f4:19:80:f3:06:d1:
2e:3a:30:b8:d6:a0:14:c9:0b:0d:af:35:6a:1b:04:
56:8b:b7:b3:79:53:bf:22:85:fc:67:40:ba:0b:79:
66:90:72:57:04:54:aa:f7:7f:ed:91:3f:d3:ed:69:
a7:32:78:a8:44:6c:f7:30:09:fc:32:19:25:88:d7:
eb:cd:b7:24:da:f0:0e:ac:3d:29:ce:8a:ce:cd:78:
ae:ba:50:22:51:01:82:c4:e4:a9:eb:b3:e0:d9:7a:
c1:0e:69:2c:b0:ca:df:5b:df:4c:77:bb:f3:b9:13:
d0:f0:29:fb:71:0e:0f:78:54:3d:d8:19:18:22:1c:
cd:4d:19:ec:97:e0:26:43:29:b8:5e:45:45:10:18:
19:a8:ae:47:74:65:1a:d0:99:ae:33:f8:a6:b6:cf:
d3:57:3c:0f:74:fc:e3:58:48:9b:09:c5:00:40:32:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4E:A3:FC:8B:48:55:01:F7:22:0E:61:38:2A:BD:73:21:1E:E2:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cf1fa5-a0ae-40e6-b54e-2b6f9dbb7144/1/3U6j_ItIVQH3Ig5hOCq9cyEe4qg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e7:48:91:dd:7e:3d:68:7d:ab:36:7f:9f:04:4e:40:e1:61:
72:30:83:e7:4e:b9:fa:a7:71:fb:9d:5a:aa:12:8b:74:39:74:
31:43:93:18:ca:5d:53:c3:db:c4:2b:cc:f5:d6:4a:63:de:91:
22:69:90:00:10:3f:30:8a:b4:9a:36:45:c0:3b:e4:e6:21:e6:
58:fd:22:0d:f3:35:8e:03:38:45:15:d5:67:95:c7:b0:06:e4:
91:5b:7e:33:07:46:b2:99:8d:d0:5e:37:7c:4a:1a:19:89:a6:
55:7a:15:80:14:72:0c:11:51:5a:58:f0:93:06:76:3b:cf:fe:
60:1c:a6:c8:42:85:eb:10:3a:54:83:11:d7:92:73:84:f2:07:
37:71:6e:a0:86:19:5a:20:a0:8f:39:9e:89:5f:6f:f1:92:53:
18:dd:7f:49:2c:31:f6:3a:7a:1c:0e:41:29:08:f8:ed:6b:00:
00:1c:07:94:3c:6b:1f:ee:bb:cb:8a:3b:04:19:59:c8:e5:d2:
fb:c9:02:1b:87:d0:d5:13:a4:47:a1:f0:9d:23:31:c3:84:b7:
41:34:69:12:76:eb:36:f0:24:82:af:dd:4b:fb:8b:0c:64:bb:
8e:27:86:0c:4a:fb:d3:12:33:33:80:04:b2:8a:b0:dd:4e:f5:
ac:11:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 09:02:50 2023 by rpki-client on console-ams.rpki-client.org