Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
File: 9NuV-dG1w-yTT_hNb_fwEkLahCo.cer (raw, json)
Hash identifier: Du31FrMcZ8VT6fMrrZNBlOGL3wRDchwfjt7kDmVK2zU=
Subject key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188911436515B0A544C74206DDFFA11EE97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 Jun 2023 14:20:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.84.176.0/22
IP: 45.129.1.0 -- 45.129.3.255
IP: 45.132.48.0/22
IP: 45.135.12.0/22
IP: 45.140.72.0/22
IP: 45.142.216.0/22
IP: 45.148.152.0/22
IP: 85.208.208.0/22
IP: 88.218.72.0/22
IP: 94.158.188.0/22
IP: 193.53.168.0/23
IP: 194.32.240.0/22
IP: 194.56.255.0/24
IP: 195.69.148.0/24
IP: 213.166.64.0/22
IP: 2a0e:f00::/29
IP: 2a0e:13c0::/29
IP: 2a0e:4340::/29
IP: 2a0e:67c0::/29
IP: 2a0e:8540::/29
IP: 2a0e:a080::/29
IP: 2a0e:a300::/29
IP: 2a0e:cdc0::/29
IP: 2a0e:e040::/29
IP: 2a0e:f000::/29
IP: 2a0f:2e00::/29
IP: 2a0f:b5c0::/29
IP: 2a0f:bf80::/29
IP: 2a11:1500::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:14:36:51:5b:0a:54:4c:74:20:6d:df:fa:11:ee:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 6 14:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:6c:cb:25:61:81:30:51:1c:de:f3:d9:4b:
1d:d3:ed:52:c1:3f:2f:8c:78:5d:66:51:59:e4:1a:
da:b2:8f:00:db:87:3a:15:c1:34:db:19:2b:5e:7f:
70:ca:c7:c8:8f:f0:39:d1:68:03:7c:42:0c:38:1e:
4f:22:62:af:e6:0c:98:bd:20:bb:54:69:7e:83:19:
d4:f2:48:5c:b9:34:d0:db:6f:64:2f:17:5d:6a:01:
16:27:a5:3f:84:69:33:55:c3:78:4c:94:dc:5f:bd:
2c:80:59:d2:2c:4b:f6:57:7c:1d:6c:89:e6:11:b5:
7d:eb:84:3e:f1:56:dd:2f:0f:4f:0b:e9:0a:43:24:
60:3e:b4:c3:4e:2e:26:2b:41:5c:93:55:34:cb:04:
bb:15:20:6b:00:79:bb:3a:da:5c:50:ca:ba:a8:d8:
c6:d9:9a:96:3a:ae:f3:1f:35:4e:d0:07:00:f6:a7:
85:fd:ba:2d:4b:5f:81:98:7c:cd:56:72:6f:12:82:
36:fb:a1:67:a0:67:9c:55:1a:41:7a:d5:e0:04:de:
91:ee:20:a2:50:e4:cb:cf:97:36:5f:52:9d:b8:46:
98:2c:e3:58:4d:8e:23:a5:ae:59:bd:de:ae:67:c3:
da:d9:26:b7:f3:d2:9d:19:ec:36:d9:0c:63:6b:27:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.176.0/22
45.129.1.0-45.129.3.255
45.132.48.0/22
45.135.12.0/22
45.140.72.0/22
45.142.216.0/22
45.148.152.0/22
85.208.208.0/22
88.218.72.0/22
94.158.188.0/22
193.53.168.0/23
194.32.240.0/22
194.56.255.0/24
195.69.148.0/24
213.166.64.0/22
IPv6:
2a0e:f00::/29
2a0e:13c0::/29
2a0e:4340::/29
2a0e:67c0::/29
2a0e:8540::/29
2a0e:a080::/29
2a0e:a300::/29
2a0e:cdc0::/29
2a0e:e040::/29
2a0e:f000::/29
2a0f:2e00::/29
2a0f:b5c0::/29
2a0f:bf80::/29
2a11:1500::/29
Signature Algorithm: sha256WithRSAEncryption
50:af:67:2b:b1:bd:bc:e4:e9:44:85:8d:0e:ee:8e:7e:81:1e:
19:c8:06:58:56:06:bc:b4:d4:3a:90:eb:7a:20:29:d8:5f:c3:
eb:d7:08:c1:a1:8d:f8:1f:e3:71:ca:7e:df:f3:52:dd:ea:29:
b7:a0:3b:b4:00:99:0a:5f:85:d4:16:fd:ce:96:84:02:6e:f2:
15:49:35:72:d6:22:3d:76:79:61:f5:3e:11:6a:0d:ba:b6:25:
54:46:56:fa:cd:73:9e:6c:64:62:e6:d2:bc:e5:04:67:b3:dc:
6a:c8:5f:54:7f:7f:17:50:73:c1:d3:e0:b9:1d:f8:15:a5:9e:
ce:fa:d8:dc:47:e6:7d:40:4a:a8:34:c1:9e:bb:c7:85:9d:98:
28:20:69:e4:ff:43:b3:46:8c:62:0b:18:85:e0:8c:0e:45:a2:
a6:66:94:ae:7b:76:67:c1:42:a8:ab:ec:be:1e:35:e4:96:dc:
29:fd:49:95:6b:4c:54:74:ab:8d:c4:b6:ed:f1:3e:d5:09:9f:
db:3c:d5:b2:a3:99:b8:e3:ba:2c:62:79:f5:74:25:31:2c:ef:
c9:e8:b1:d7:43:b0:4d:0d:10:8a:03:63:61:2e:4d:e4:8d:06:
1f:50:d2:14:22:f0:3d:8e:a6:69:1a:e4:67:6e:48:e2:67:5b:
06:29:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:30:33 2023 by rpki-client on console-fra.rpki-client.org