Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer
File: HBTqMuvoRVb9Ro-BLqwQMVN4ntA.cer (raw, json)
Hash identifier: F2M8TpgWwektFVQox4/fviHcd6dRKgpQJ4kEn8tnD+w=
Subject key identifier: 1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F420BA34337AE4B453F771747210425
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.244.117.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:0b:a3:43:37:ae:4b:45:3f:77:17:47:21:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c14ea32ebe84556fd468f812eac103153789ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:f8:f2:1a:01:a2:6d:3d:22:2f:1a:8b:6e:
31:c8:9b:ee:71:b9:28:0b:8b:13:38:b8:4e:5f:fb:
16:98:65:3e:56:8b:bf:64:5b:06:b2:7f:3b:65:ff:
17:5c:12:1d:a5:91:66:8f:d1:3e:8f:ef:3a:2d:41:
6f:a2:a9:a7:dd:a1:f9:98:18:2a:5b:0a:76:b3:50:
d7:7b:5b:42:6c:a6:40:48:0d:6a:2a:02:e8:8c:39:
1b:af:3c:f0:00:c5:be:4a:0d:df:40:28:87:b8:9e:
ab:15:66:40:7a:4a:82:b7:58:3c:53:4f:f5:72:1f:
38:89:f4:e9:1a:32:de:3d:a7:fc:79:12:f1:8b:7d:
32:37:03:f2:e1:04:9d:e6:09:22:1a:3f:7f:01:ef:
ef:16:5e:7c:cc:79:69:dd:39:b1:44:4c:bf:5e:08:
87:f1:78:3f:3c:0d:a9:89:e4:07:fd:03:f9:a4:72:
ba:68:35:fe:64:26:29:64:21:d9:0b:f9:b1:a2:76:
fd:b1:13:6c:d2:34:90:d6:85:e5:3f:be:e1:6e:30:
eb:b5:c1:57:f2:5a:e8:ac:e3:99:04:5c:0d:b8:b5:
a6:6e:da:97:4f:38:07:16:93:2a:b6:39:35:b8:76:
15:d8:6c:5e:88:dc:98:f7:45:20:c3:5f:b3:47:82:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:14:EA:32:EB:E8:45:56:FD:46:8F:81:2E:AC:10:31:53:78:9E:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e79d60-7130-4031-96ba-f08d5dfdbf50/1/HBTqMuvoRVb9Ro-BLqwQMVN4ntA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.244.117.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2d:4e:8f:10:14:e7:94:d4:c9:15:53:78:65:70:65:cf:16:
03:ee:0b:a6:dd:7f:7c:8b:60:0a:fe:78:de:6f:e1:c2:cd:9d:
f9:db:b2:54:e7:c3:ca:79:fb:f4:4e:b9:c8:b8:91:2a:25:4c:
66:aa:a9:2c:a0:09:e8:8a:40:e2:48:69:7f:d3:46:4c:b9:1d:
28:11:13:eb:ae:ce:6e:cb:88:62:da:d9:e3:eb:b4:99:ea:68:
b6:79:c8:62:1e:73:9b:58:57:98:1c:63:52:de:a0:39:e4:64:
c7:ed:b2:7f:b5:0f:bf:e3:7d:4e:ab:93:d2:8e:17:b5:8e:7a:
fd:61:31:5f:70:ca:e5:df:d0:0a:5e:67:fb:a8:e0:e0:78:18:
24:b0:fb:78:15:48:e7:cd:d6:3d:d6:25:d4:97:59:87:25:0c:
81:13:20:9a:51:76:bb:f5:a8:04:5a:af:ee:a0:62:a4:df:89:
dc:be:4d:d9:37:a0:94:3a:f6:ba:91:d5:ea:a0:12:2b:48:80:
e1:9d:bc:d3:67:4b:99:9b:08:ef:b0:f9:90:c4:59:fc:51:e9:
00:70:7b:0d:2d:e3:9b:2c:eb:7d:70:a5:2f:0b:57:20:54:58:
62:f6:2e:15:1e:b1:8e:9f:f8:cd:0e:7a:ec:ad:b4:3c:2e:f6:
20:8d:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 13:15:49 2023 by rpki-client on console-ams.rpki-client.org