Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAngT4kJWtCvWLSyoT3UqfRL7R4.cer
File: AAngT4kJWtCvWLSyoT3UqfRL7R4.cer (raw, json)
Hash identifier: bwr2NE87+JKActgkXAqNOwsEOTZt/40SnhZBA4p4c4c=
Subject key identifier: 00:09:E0:4F:89:09:5A:D0:AF:58:B4:B2:A1:3D:D4:A9:F4:4B:ED:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708C27CEA991BE40EA519F0238A1BCAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/AAngT4kJWtCvWLSyoT3UqfRL7R4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:35:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.36.228.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:27:ce:a9:91:be:40:ea:51:9f:02:38:a1:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0009e04f89095ad0af58b4b2a13dd4a9f44bed1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:ea:4e:74:47:6b:b6:00:a7:c1:fd:ee:ec:
54:44:cd:c8:b3:03:10:95:7b:85:e4:76:b0:09:d9:
fd:2d:58:55:83:f2:8a:46:d6:c6:cd:a0:29:85:cd:
bc:bc:fd:46:c7:0b:10:8f:63:4d:07:71:b6:af:fb:
36:a7:f5:8f:d1:29:a0:e2:d7:52:13:5f:8a:ac:e3:
0d:20:0a:ee:be:44:6a:96:91:77:a4:2b:5a:7c:e4:
32:4a:e4:42:2a:c8:b9:3e:dd:16:d3:cb:1a:cd:26:
f9:7c:a0:86:b0:58:14:3d:94:8b:3b:55:d3:a7:6b:
f2:16:c2:fe:72:f9:b5:01:d8:35:4b:02:36:dc:7f:
cf:07:d8:68:f7:f9:fc:2b:48:b1:b4:90:1e:c5:57:
3b:96:8d:e9:13:b3:8b:36:6d:49:2f:05:62:5f:1c:
8d:80:bc:cd:55:ac:b4:a0:93:bb:1d:ad:6a:c8:3c:
be:94:65:90:3a:32:29:b4:e4:53:dc:ad:d3:1c:de:
1d:84:7a:82:71:e6:74:88:d2:ce:fa:40:51:92:fa:
43:d0:52:ea:6d:e1:2f:a0:97:7c:8e:a7:39:f8:94:
b3:3b:e2:f1:1e:f3:17:db:6b:9c:27:bb:9c:b2:f4:
97:aa:08:09:cb:38:e1:3a:52:a0:51:21:3f:9b:e4:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:E0:4F:89:09:5A:D0:AF:58:B4:B2:A1:3D:D4:A9:F4:4B:ED:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/AAngT4kJWtCvWLSyoT3UqfRL7R4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.228.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1f:c8:9c:3b:8d:28:b2:76:75:35:53:c9:a9:62:4f:b9:80:
a8:e4:a3:3c:79:7b:f6:03:6d:61:e2:01:b6:94:33:b3:14:06:
a9:f5:54:01:53:09:f1:cf:c6:84:fd:b8:03:0a:11:a7:94:32:
74:08:db:87:da:ae:7e:bf:fa:fb:9f:68:da:fe:8b:3c:4d:a6:
86:fe:0d:ce:a4:b3:f6:d6:24:aa:ce:17:db:3a:80:a7:f1:a5:
72:05:bc:93:40:25:22:bc:1e:65:85:7a:73:57:18:04:35:3e:
79:19:d6:a1:f8:98:45:47:f1:99:e8:b2:bf:a7:fc:0f:92:f6:
56:d2:1c:60:17:d6:32:bb:f3:d1:69:b9:d0:82:3c:43:34:32:
2f:17:5a:e2:0e:10:90:7b:22:00:3f:7a:be:93:a7:b6:3d:1d:
1a:6d:2e:ce:89:75:53:8c:76:20:72:37:6d:5e:32:a1:d6:c6:
b5:37:33:14:9b:8d:d4:1f:9b:01:b2:83:cb:17:d7:7d:30:bd:
ab:45:06:1a:f9:63:ac:6d:3e:44:c5:53:5b:5c:29:49:bc:a1:
1b:fa:49:d9:81:c8:76:91:a0:20:42:ce:07:4b:8a:6e:36:71:
d0:b6:55:19:95:62:03:d6:52:03:c4:14:07:ca:e3:c4:83:1f:
05:b4:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:58 2023 by rpki-client on console-ams.rpki-client.org