Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4hbBDOJwjskfEAMBw3c46lm6DaA.cer
File: 4hbBDOJwjskfEAMBw3c46lm6DaA.cer (raw, json)
Hash identifier: BKcYoKaj1UAc2KAFOdr7jeLHLiA1jx6lPiP6UoQuYJk=
Subject key identifier: E2:16:C1:0C:E2:70:8E:C9:1F:10:03:01:C3:77:38:EA:59:BA:0D:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF776D532F5D8A22CF0689CD1321834
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/366651-24ff-48a5-b8f7-a6cdfc956937/1/4hbBDOJwjskfEAMBw3c46lm6DaA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/366651-24ff-48a5-b8f7-a6cdfc956937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.208.61.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:76:d5:32:f5:d8:a2:2c:f0:68:9c:d1:32:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e216c10ce2708ec91f100301c37738ea59ba0da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:63:56:31:20:db:6d:3d:b7:99:b2:5b:6e:
31:0b:3f:93:7b:dc:db:57:ba:53:14:5a:8f:40:5c:
39:1d:62:4c:86:04:76:67:2c:a4:0d:36:ba:aa:de:
69:e0:40:5f:f0:8b:67:98:00:99:5f:9b:4b:43:30:
e0:43:b3:de:3b:da:4f:a4:eb:53:1c:d7:57:48:6d:
94:7b:35:de:ab:41:3f:43:1a:e8:ed:c5:dc:58:47:
ca:6d:7a:e4:a7:94:0a:56:53:70:b4:f8:bd:ad:ab:
c4:28:50:6e:1e:28:36:3d:c3:60:91:97:76:19:bd:
40:c0:26:76:0a:72:95:51:c4:a6:f9:8d:69:6c:d8:
22:5f:65:5e:09:82:9f:94:d1:1c:4e:9e:c4:0d:2e:
dc:5a:2d:b6:ea:c2:d5:70:f6:c9:4d:c1:7a:2e:a9:
6d:63:f9:40:1c:54:da:7e:b8:02:79:98:73:e4:27:
74:3f:50:0b:f9:9c:2f:08:b1:37:b5:f0:a6:56:c6:
f6:c5:6b:38:74:67:c8:22:40:e3:9f:a9:5d:70:e0:
d1:b9:8a:0c:a5:ab:19:1a:6b:f5:50:c2:2d:17:98:
dc:c1:ec:ad:d3:48:dc:4e:58:f2:33:e7:51:53:d3:
d7:08:75:ab:72:9e:c1:7a:86:ee:80:4f:b2:7a:8b:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:16:C1:0C:E2:70:8E:C9:1F:10:03:01:C3:77:38:EA:59:BA:0D:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/366651-24ff-48a5-b8f7-a6cdfc956937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/366651-24ff-48a5-b8f7-a6cdfc956937/1/4hbBDOJwjskfEAMBw3c46lm6DaA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.61.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ea:73:66:b8:b5:0c:f1:ed:76:4e:c4:31:02:fa:67:c9:18:
2c:77:f1:3c:50:35:e1:14:94:1c:e6:08:f4:55:d1:65:b0:d9:
a5:cc:22:ea:1a:d4:4c:ba:8b:71:b7:1f:9e:31:06:82:21:44:
56:3e:06:ae:11:48:24:c9:ff:58:16:93:b3:79:0b:3a:11:e2:
85:d5:01:4e:07:54:b2:76:0c:ff:63:39:a8:a4:be:b1:f0:9c:
69:dd:bb:cd:b0:40:69:28:7d:7f:90:1b:47:8b:02:23:7b:04:
d5:79:c9:f6:cb:37:21:19:dd:50:07:a7:ba:a2:a5:78:6d:11:
a5:b1:9e:c9:f6:00:7c:a2:df:ff:5f:ba:2c:0f:92:14:dc:32:
98:2f:f4:ed:97:c6:01:b4:c6:c2:71:a1:a3:b7:d5:ba:8c:c6:
94:bb:34:fd:8e:a1:79:15:b7:33:99:ac:58:29:43:87:ca:af:
c5:8c:1f:8c:93:45:87:bd:87:e1:0c:2d:89:34:a0:5d:f6:8b:
f3:6e:c5:ce:ac:f0:e8:bb:8b:3a:e7:f1:d1:45:98:08:db:d4:
34:c1:21:91:f6:c9:01:47:5e:df:94:dd:86:ad:35:2d:b7:16:
45:48:d8:c5:47:88:64:4e:42:98:3f:b0:ff:2e:29:3d:49:3b:
4b:d0:f3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:24 2023 by rpki-client on console-ams.rpki-client.org