Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CIHCbv12cfJy3E_n1D7MmYpcDPI.cer
File: CIHCbv12cfJy3E_n1D7MmYpcDPI.cer (raw, json)
Hash identifier: lDJVpGy/yO6yHlUyCoioxdeOxfKQ29EQJ/MNYnapBQ4=
Subject key identifier: 08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185C8F3A32D6C69A9BB8A2D5A56A13B5BA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Jan 2023 07:34:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 77.246.240.0/24
IP: 2a13:c800::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:f3:a3:2d:6c:69:a9:bb:8a:2d:5a:56:a1:3b:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 19 07:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0881c26efd7671f272dc4fe7d43ecc998a5c0cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:42:82:89:df:d5:c1:f7:14:d0:00:5f:51:
ff:88:8c:90:b4:07:11:44:ed:aa:ad:42:5a:44:af:
05:64:9a:c7:60:3b:3c:69:e4:c0:31:de:a4:17:39:
f1:6f:c7:0e:4a:87:4d:f2:b6:4e:79:70:11:92:9f:
c2:88:2f:13:b3:40:52:c2:28:4d:6e:ed:87:b5:91:
a5:98:cf:c5:c6:51:9a:dd:a3:18:b8:e2:97:0b:15:
6c:62:7e:2e:8c:65:4b:90:16:cd:f3:84:39:75:fa:
18:d0:b7:29:e6:6b:a4:7b:f2:68:b8:43:eb:5b:02:
fb:85:10:a5:ab:95:42:d8:d8:c4:f9:e5:db:38:ad:
51:ff:53:d4:0e:6a:8d:fd:a5:f8:ed:15:72:c4:67:
f0:f4:b1:42:f8:1a:34:29:2c:21:29:c2:b4:f1:c0:
8d:44:6d:2f:fc:87:35:18:53:c6:21:24:26:8b:f4:
3a:11:14:65:6c:b3:03:e8:f9:af:41:e2:64:cf:70:
c5:4f:b9:f6:35:98:80:a0:ee:ab:d1:4a:54:18:d5:
03:7d:11:ff:9f:5a:cb:be:a3:a8:7a:6a:09:e5:27:
c1:c7:e6:e0:ab:44:17:f9:45:11:8e:ae:c4:52:75:
14:9e:28:9d:e5:bf:cc:ee:cb:13:03:7d:c3:5e:7e:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:81:C2:6E:FD:76:71:F2:72:DC:4F:E7:D4:3E:CC:99:8A:5C:0C:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/645fb6-8edf-4a75-bbc1-ae13eef4f12e/1/CIHCbv12cfJy3E_n1D7MmYpcDPI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
IPv6:
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
1c:7c:82:70:e9:11:62:56:bb:4b:26:a6:66:72:02:b5:f0:24:
7f:ac:bc:5d:9e:2e:ae:a6:47:cd:b6:fd:09:9c:82:00:16:ee:
80:3c:01:47:e4:d7:19:05:53:11:cc:d2:6c:3b:66:57:22:e2:
47:32:02:fc:28:a7:ac:a6:7c:b6:0d:c2:a1:11:42:03:98:5a:
d4:79:db:bb:b2:26:af:01:82:ae:aa:81:db:c0:b8:5f:e0:f7:
73:76:bb:1e:d5:d5:85:28:de:5f:4f:20:ae:80:8a:96:e8:2c:
67:7c:9b:fc:2b:39:c0:b9:1e:4c:ce:b4:a9:8d:5f:0f:83:ce:
76:6d:f0:fa:34:42:46:00:aa:9b:eb:88:95:86:2a:7f:1b:0f:
8a:0a:0c:ba:7c:cc:91:39:d6:42:59:2e:5c:bf:b1:28:94:56:
24:3b:92:97:db:a6:7f:70:01:81:ef:ec:33:f0:b6:9e:04:a5:
7b:30:65:3b:d0:bb:f0:85:b9:d5:8f:cd:03:ee:20:77:43:55:
de:a0:88:7e:ae:86:4f:8c:5e:c7:d2:1f:da:74:fa:5c:e3:b5:
22:73:af:ac:83:fd:44:1b:b8:b4:97:7c:ff:5d:7e:61:2d:f6:
54:8a:ca:b5:3e:98:06:42:c2:72:1a:52:0b:c4:76:f6:5f:c5:
10:bc:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 07:39:11 2023 by rpki-client on console-ams.rpki-client.org