Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DR7WWygxaa4_3P4Pdvf26rrTuPQ.cer
File: DR7WWygxaa4_3P4Pdvf26rrTuPQ.cer (raw, json)
Hash identifier: hGUpCv1D5OcxBq3F5CRruo2K/3ijc7Awjwu+bV1t4c4=
Subject key identifier: 0D:1E:D6:5B:28:31:69:AE:3F:DC:FE:0F:76:F7:F6:EA:BA:D3:B8:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0B62038664C8FBA4D3DEA88A44F5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/6d6f8f-d89c-4c75-bc40-523ccc814f17/1/DR7WWygxaa4_3P4Pdvf26rrTuPQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/6d6f8f-d89c-4c75-bc40-523ccc814f17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 149.3.160.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:b6:20:38:66:4c:8f:ba:4d:3d:ea:88:a4:4f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d1ed65b283169ae3fdcfe0f76f7f6eabad3b8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:64:2f:62:2f:03:d6:fb:3e:44:c0:23:fd:
21:85:7b:f9:20:5a:cd:4c:a5:e9:98:e8:d8:52:2d:
07:1a:73:30:cd:69:5c:f4:ab:80:12:54:b1:22:1f:
dd:d8:d3:17:ab:7a:3a:ae:9c:19:38:bd:d2:7c:92:
95:46:82:42:ca:f6:f0:aa:61:d0:31:37:f9:2e:23:
fd:fe:97:7e:f9:ea:27:9c:e1:90:8d:f1:44:d6:7f:
0c:77:d3:25:ab:9c:9c:9a:6c:2c:34:f7:9d:3b:3b:
68:22:7d:7b:8c:b3:99:27:db:78:4a:79:88:66:e5:
df:3f:8d:86:79:79:fd:80:96:89:bd:a5:e2:f1:74:
83:69:3b:7c:d5:91:26:49:2f:94:cb:64:fc:84:f8:
fc:ca:d5:20:af:b2:fa:b0:fb:02:9e:41:22:59:65:
19:4d:26:f3:1e:be:28:59:3f:6c:37:92:29:0e:76:
c1:ae:a6:5d:80:6e:f0:a2:43:ad:11:ac:78:03:8e:
39:b4:19:d2:e6:72:f1:ec:c9:3d:13:a1:cd:f3:b0:
20:cc:ed:f6:a8:93:8d:bc:03:c7:87:e2:c9:fe:64:
23:4e:08:d4:80:18:df:46:93:8e:2b:33:7c:a7:60:
bb:59:78:62:b2:fa:6a:de:89:af:27:8c:f0:f1:7a:
dc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1E:D6:5B:28:31:69:AE:3F:DC:FE:0F:76:F7:F6:EA:BA:D3:B8:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6d6f8f-d89c-4c75-bc40-523ccc814f17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6d6f8f-d89c-4c75-bc40-523ccc814f17/1/DR7WWygxaa4_3P4Pdvf26rrTuPQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:98:02:db:56:1d:31:be:52:f9:ad:93:75:0b:d1:76:c1:f7:
84:23:bd:9e:d2:99:d4:6c:91:33:5a:3b:fb:51:9c:67:f6:a6:
74:43:5d:1f:9f:93:97:75:63:9c:de:ad:01:5c:cc:b1:3c:61:
47:73:9b:35:bf:83:4d:d4:9c:6a:7c:e8:79:39:69:e6:c5:74:
3a:fc:50:64:c8:86:69:86:45:b6:ef:82:9b:c7:68:85:b1:21:
e0:7c:3c:cf:c0:b6:10:74:f1:df:84:1a:f1:0a:69:78:77:10:
d3:c6:6e:9a:3b:3b:f1:ea:c9:9e:4a:79:36:79:a0:61:01:30:
d9:9f:c4:99:c9:37:b8:1c:1f:25:f7:ec:e8:58:f3:20:81:bb:
8f:07:45:b4:08:aa:45:bd:4b:16:09:bd:48:41:5f:26:b9:15:
98:20:17:34:d1:82:3e:00:58:39:49:14:e2:b4:ee:36:b2:b5:
63:0c:ea:fd:9d:14:6c:79:3d:31:d6:ae:ab:93:37:39:f2:76:
04:71:f3:c7:82:71:66:6d:ae:c3:3d:00:df:e0:e7:cc:42:2f:
47:6e:a2:e0:1d:36:17:a5:8f:3d:30:33:ce:1b:09:3f:37:be:
e3:c8:56:c2:e5:a1:7d:eb:c1:c2:34:91:0e:8c:64:ac:dc:32:
f6:5e:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 11:07:05 2023 by rpki-client on console-fra.rpki-client.org