Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43noFonuVR4-rb3tTSl6qOblwUY.cer
File: 43noFonuVR4-rb3tTSl6qOblwUY.cer (raw, json)
Hash identifier: BLBRMvEiYkrsUykfBVMtJJ8eXAepwNSq1NLf25fGEVs=
Subject key identifier: E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B854F72421F396AD409BAB4814240E1C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Oct 2023 10:37:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.69.163.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:4f:72:42:1f:39:6a:d4:09:ba:b4:81:42:40:e1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 10:37:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e379e81689ee551e3eadbded4d297aa8e6e5c146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:ec:34:df:43:f7:36:e1:93:b2:99:56:a4:
ae:b8:d0:6c:e5:c1:40:c6:cd:c5:60:e2:49:79:67:
f9:41:74:91:c8:e5:7e:c7:09:df:28:c5:e9:ec:4c:
98:9e:9c:0d:ca:81:a9:7d:b6:6e:d6:c6:ea:b9:af:
5f:7f:12:93:9a:ca:84:94:f1:c2:57:24:10:df:93:
6a:be:e9:7d:fb:21:65:2d:4d:b1:25:75:7f:ba:7b:
6c:6c:ab:6d:6d:57:fb:2d:83:e4:f1:36:f3:80:0e:
60:28:59:1f:39:ba:d6:21:06:ef:d5:8b:3b:e6:8d:
04:4d:b3:18:08:3a:d3:91:ca:d9:6c:f0:3a:0f:31:
d7:90:1b:1d:44:d1:2e:8b:04:78:5a:0e:20:84:f8:
c7:8e:ac:f0:1d:f1:6e:aa:01:7d:8a:34:f5:ce:81:
8b:d2:cf:0d:66:58:50:5f:85:80:40:86:07:bb:d7:
ff:f3:1d:09:84:44:42:8a:67:d9:75:7c:16:af:2c:
8c:63:08:d1:10:18:83:70:57:92:66:43:e1:52:bd:
47:ff:cd:ad:94:0f:25:56:39:89:94:b9:41:aa:c4:
7e:a1:55:cb:99:79:ee:52:5c:df:77:5a:0e:02:ca:
78:83:7e:76:49:22:90:cd:e1:f6:42:b2:e8:ff:27:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:E8:16:89:EE:55:1E:3E:AD:BD:ED:4D:29:7A:A8:E6:E5:C1:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/78afee-0222-4957-9b7a-6bd62a13c05f/1/43noFonuVR4-rb3tTSl6qOblwUY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c9:0e:5a:64:86:68:08:89:30:b7:a0:7a:7c:27:8b:03:f8:
77:6c:a6:83:4a:15:ed:52:99:8b:2c:40:4c:69:54:86:42:c5:
c6:58:07:6e:6c:2f:8e:6b:f7:81:a5:a9:47:f1:3e:c2:a7:0a:
30:1e:cf:7b:34:3f:eb:16:07:e6:32:36:41:42:47:15:94:ba:
a7:6e:92:b4:b3:42:bd:76:61:72:67:22:32:bc:72:32:0c:64:
94:a2:33:04:d4:53:ff:47:4a:7c:bc:a2:11:c8:dd:6c:21:f8:
ff:8b:ff:4c:39:40:14:80:52:db:30:18:fc:e3:7c:2e:a3:07:
5f:29:06:5d:e9:5b:05:9e:bc:0a:ce:3a:13:76:f1:e3:dd:b1:
6f:44:e5:31:58:e0:41:bd:ec:d8:80:f7:71:0e:73:3a:d7:7a:
8d:91:91:01:e4:38:c6:44:6a:70:0c:4c:c0:69:cc:7f:00:70:
bb:cd:f2:f2:84:4d:65:4f:cb:ef:a9:82:db:df:6a:0e:ec:cb:
59:03:d2:98:ea:31:55:cf:64:80:d8:31:62:5c:ea:29:4a:85:
11:a1:c0:0c:77:b2:a9:03:c1:87:d3:ed:3b:ed:02:bb:f0:4e:
23:8c:a2:f9:89:74:bd:1e:c3:56:5a:d2:91:5c:5c:7a:1c:cf:
e4:75:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:03:20 2023 by rpki-client on console-fra.rpki-client.org