Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EDzszLHCcGof81B2J6kIDySi_us.cer
File: EDzszLHCcGof81B2J6kIDySi_us.cer (raw, json)
Hash identifier: HBUSYif9HSIfXLi2w33HOhIGRwOTdVkfgmUrXF+5aaU=
Subject key identifier: 10:3C:EC:CC:B1:C2:70:6A:1F:F3:50:76:27:A9:08:0F:24:A2:FE:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD07FF7F318AF2C90A79F3A472D2356
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/d3d7d4-2aa9-4e91-827f-77657756595c/1/EDzszLHCcGof81B2J6kIDySi_us.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/d3d7d4-2aa9-4e91-827f-77657756595c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:31:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.44.248.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:7f:f7:f3:18:af:2c:90:a7:9f:3a:47:2d:23:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=103cecccb1c2706a1ff3507627a9080f24a2feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:5c:f0:ca:5a:32:21:93:4a:d9:c4:4d:ce:
eb:66:4e:bd:a0:e9:7e:c0:cb:5c:fd:c9:0c:b2:aa:
48:16:7c:92:bb:f1:b2:c7:4b:b7:0c:90:4f:05:da:
9c:63:4b:d0:f0:df:21:0f:44:91:a4:45:ed:6c:59:
c2:b1:a3:1c:26:c0:3e:9f:24:95:19:63:16:3c:ce:
0a:ed:9d:d5:bf:74:45:85:71:a6:fc:70:4b:74:56:
62:27:06:83:26:47:95:1c:05:90:82:61:5a:a9:43:
47:31:a0:4f:6f:6b:75:19:cb:00:27:48:29:65:84:
cd:e4:6f:1f:0a:99:82:d4:de:be:89:63:4d:ca:c8:
a2:46:d4:3b:ba:fb:01:1c:79:73:4e:a6:45:5e:8f:
0e:7e:28:51:3a:1b:6d:23:f1:85:73:be:1f:c5:b3:
74:4e:62:af:d2:e4:ee:ab:c2:1c:da:0a:99:62:05:
5d:df:fc:9f:ee:22:de:b2:ec:a7:b1:60:6c:ef:19:
61:ba:52:20:1e:ed:d4:d4:a3:9a:0b:99:e4:ae:1c:
55:db:4c:c6:33:e2:be:02:50:21:0f:9a:fd:b6:06:
34:f7:a4:99:2e:5c:71:ee:4f:22:b4:03:43:cc:73:
08:43:ed:db:a2:3d:3c:8f:e0:84:d1:e7:c7:e0:57:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:EC:CC:B1:C2:70:6A:1F:F3:50:76:27:A9:08:0F:24:A2:FE:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d3d7d4-2aa9-4e91-827f-77657756595c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d3d7d4-2aa9-4e91-827f-77657756595c/1/EDzszLHCcGof81B2J6kIDySi_us.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.248.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:56:59:8b:0f:00:e9:78:76:47:97:c9:ee:1d:c5:37:25:97:
7d:20:82:80:3b:18:91:74:b1:8f:3c:e5:d9:e4:30:41:f3:df:
76:d0:11:a9:41:45:06:e5:27:85:a2:28:83:af:ee:8c:cf:5b:
73:9f:f8:46:25:48:d1:bf:a6:71:e7:82:2d:c3:92:92:54:a7:
75:24:0c:2f:19:94:3f:c0:06:3e:8b:3b:32:4b:90:87:2f:90:
be:86:50:b7:4e:0a:48:76:f5:ea:06:03:1c:b7:15:e5:22:bc:
b4:88:0c:a8:cd:32:ac:da:96:d2:dd:4d:07:fd:e1:95:29:25:
ee:21:c6:2a:32:3a:74:07:06:07:af:75:35:0f:86:5a:87:0e:
ef:5d:f7:58:67:f7:dc:32:10:36:fe:cb:09:a0:ea:02:2a:ee:
8c:1d:66:51:f1:82:42:6e:b3:c5:3d:88:f9:9f:37:38:db:85:
0c:28:bd:09:c4:c3:72:f1:e7:c1:f3:a5:44:f2:ec:0c:94:86:
f7:f8:84:f9:e3:72:fa:e5:6e:8a:c5:5c:76:8e:15:3b:66:74:
6e:5d:90:e9:b4:0d:6d:ad:c9:94:60:3d:6f:f2:1a:af:df:f4:
e4:3d:dc:90:37:4b:e8:f2:fd:e9:f0:d5:4d:96:67:33:16:ae:
6f:22:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 15:22:51 2023 by rpki-client on console-fra.rpki-client.org