Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Sip6ao1ZHafyiVR49AtIx3HPO8.cer
File: 5Sip6ao1ZHafyiVR49AtIx3HPO8.cer (raw, json)
Hash identifier: uNYnQ9keUwW8xzkI2y60kNF4dUy48jn5AgDrLBBxZNE=
Subject key identifier: E5:28:A9:E9:AA:35:64:76:9F:CA:25:51:E3:D0:2D:23:1D:C7:3C:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED323F83AE5FBF637218C4EFF536F4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:33:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.253.0.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:23:f8:3a:e5:fb:f6:37:21:8c:4e:ff:53:6f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:33:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e528a9e9aa3564769fca2551e3d02d231dc73cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:b7:6d:bc:7c:f1:3f:59:71:ba:f9:b8:c2:
4e:41:6e:a6:2c:9d:e3:94:78:bc:cc:07:74:a8:ea:
dc:d0:a4:d0:09:6d:eb:32:7a:61:87:a5:8f:eb:c1:
9c:90:42:b3:5a:73:9e:b9:46:bc:37:51:cf:d7:84:
05:66:7d:e7:af:14:d6:d3:b5:d6:58:c0:ac:5e:fe:
d1:82:7f:05:c5:7d:db:8c:c3:d6:a7:52:14:3d:5f:
67:a2:3e:a2:7e:84:fa:db:62:45:0a:57:48:83:50:
9f:7c:82:a0:f3:53:d6:b6:28:50:3f:de:2a:90:e9:
57:00:e2:ea:22:33:60:c1:5a:a3:ff:22:32:cd:8d:
43:a6:e5:41:92:73:42:23:f8:66:5c:70:3c:f0:67:
71:93:74:64:eb:c6:6e:37:2b:82:a5:a8:1e:b1:89:
ec:24:d0:4a:ec:ab:7e:4a:75:70:dc:ab:92:8c:7c:
db:4c:80:31:4d:1d:6e:2e:47:ea:ee:0f:b1:f2:da:
0e:f8:94:37:d8:7b:24:93:05:16:33:51:6b:0c:a7:
ba:9f:7c:78:e1:5f:d6:5f:f1:69:d7:57:d2:c3:95:
16:10:15:a1:a5:5f:57:d9:94:d7:bc:6e:f3:5f:80:
d5:67:e3:95:0e:80:d3:9c:73:13:58:86:fa:c4:ba:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:A9:E9:AA:35:64:76:9F:CA:25:51:E3:D0:2D:23:1D:C7:3C:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.0.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a9:01:3f:51:40:8c:65:a5:69:e2:73:59:be:72:e0:60:a9:
16:68:93:96:c0:51:a8:ee:06:62:db:ce:6e:74:f0:79:69:71:
10:40:f2:fe:06:ab:48:0f:ff:0e:a4:48:ff:33:72:ab:5d:4e:
eb:8f:da:aa:89:6b:98:e1:2c:34:4e:c1:87:f5:db:49:92:a9:
1c:e4:c1:eb:47:7c:52:b4:0f:17:8f:8d:cf:38:05:52:de:86:
a3:40:5d:25:cc:7b:82:fc:03:e2:4b:54:f6:8e:f2:ad:27:e2:
3d:9d:0a:49:b8:28:6e:4a:b7:80:33:7b:37:56:1b:26:4a:7a:
f5:13:8e:97:cb:3e:41:91:50:0a:15:65:dc:be:d7:7a:52:b4:
35:c5:9e:a2:ce:14:a3:77:13:22:4c:24:ff:e4:4e:d7:db:48:
79:00:2e:e3:a2:9c:12:49:e7:11:b1:72:77:78:0f:16:e4:8b:
c8:f4:da:33:90:43:8e:9e:76:5c:cf:5e:15:5f:86:55:15:34:
58:c7:ae:6f:da:a7:fb:a5:b0:fe:58:22:99:a9:48:97:8f:d5:
60:2a:96:72:16:90:0c:41:2e:af:ec:c2:d3:33:ff:47:07:65:
92:ac:b2:f7:f5:6b:05:07:4e:d1:5a:c0:b8:ca:fd:3f:ff:13:
0b:5c:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 14:50:32 2023 by rpki-client on console-fra.rpki-client.org