Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer
File: ImvMD4ezL3S4ONwfJNKOWCP2D_c.cer (raw, json)
Hash identifier: VfVSyilI5SHUCEmlI1iQ9Rwmaer+hSfDdbu2duZ9p00=
Subject key identifier: 22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018692F8F64DE3DB085FE48013E2EACFFD8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/ImvMD4ezL3S4ONwfJNKOWCP2D_c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Feb 2023 13:03:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.246.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:f8:f6:4d:e3:db:08:5f:e4:80:13:e2:ea:cf:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:03:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=226bcc0f87b32f74b838dc1f24d28e5823f60ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:ac:73:77:c5:9d:23:ea:7b:e4:f5:35:b0:
c2:88:61:e9:e0:1a:92:6c:77:a2:b6:a0:f9:a7:7e:
0b:3c:16:87:97:8c:b6:e8:83:d1:cf:98:12:4e:b2:
72:06:d7:27:c5:e5:d5:a9:83:22:2d:96:44:36:e6:
7f:62:a0:a2:8c:23:c5:10:08:3b:c0:16:3a:53:18:
b2:75:16:0c:ad:e5:0a:51:ea:27:af:19:20:b5:56:
0a:d0:4f:3a:66:c7:39:67:de:dd:d2:41:e1:e7:c9:
fb:ec:10:8d:f7:34:f4:d5:cc:83:f5:0d:86:36:b6:
15:96:4f:b0:c0:52:69:a9:e0:1c:9d:05:58:03:27:
9e:92:96:d4:64:93:76:55:e7:15:82:f9:35:14:80:
ea:dc:00:d1:84:16:d2:3e:c2:ca:91:eb:0a:be:d7:
d0:bf:08:72:4b:c0:e7:71:97:25:2b:79:91:6a:75:
45:a7:1c:23:26:df:61:41:e9:b4:a1:6e:ed:f2:40:
f3:67:81:62:3a:8e:d8:1e:19:13:0b:88:12:f7:89:
de:7a:97:82:5f:19:87:3d:20:bd:fb:1f:83:38:5e:
08:70:dc:20:0b:53:5a:a0:4b:90:eb:18:c4:d7:86:
31:ff:38:88:55:8a:46:3b:2c:1f:ff:e7:3f:d5:25:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:CC:0F:87:B3:2F:74:B8:38:DC:1F:24:D2:8E:58:23:F6:0F:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/fe8984-2218-41bb-b5fa-43e42aed09e9/1/ImvMD4ezL3S4ONwfJNKOWCP2D_c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.246.0/24
Signature Algorithm: sha256WithRSAEncryption
50:0e:58:f7:d8:10:33:7b:a6:27:c0:99:a9:2f:77:29:da:96:
a7:26:21:72:36:6d:ef:90:a6:c4:fd:6b:0f:97:f5:d5:9b:48:
1f:47:87:b8:e1:11:e0:10:38:73:67:ba:a0:0b:1e:7d:7d:7f:
39:2c:6e:c3:0f:7b:2c:17:08:3e:a3:bd:88:1e:31:a9:b6:8b:
47:d4:66:a9:e8:7f:03:c8:0c:3a:c7:d5:a3:b7:ce:5f:2a:a8:
58:dc:bf:39:56:71:b1:e5:b5:86:ae:74:48:3a:1d:5e:86:0c:
28:32:c8:8b:6e:d9:4b:27:fa:7e:d8:8b:8e:7f:f6:90:9d:7d:
b1:14:f0:3c:0f:f7:c3:94:7f:ad:e8:10:32:fd:1a:bc:87:8b:
f9:fe:74:88:a6:f8:cd:8f:c6:99:e3:7a:38:78:20:60:5d:5e:
c3:24:81:a6:45:f9:62:70:3e:79:8c:7d:b3:45:0c:2e:89:aa:
46:b7:8b:1f:4f:d0:f7:81:f7:cb:d8:70:17:ee:a1:59:18:23:
5f:b8:ef:54:a3:71:00:31:b1:da:42:25:17:f8:2e:fb:2b:71:
ce:5a:99:3f:d9:7d:22:97:79:9e:14:a7:2e:00:5e:2e:61:b6:
ae:c9:32:13:83:0c:ff:5c:31:32:cb:ac:a7:94:a1:fa:59:e8:
42:84:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 13:01:03 2023 by rpki-client on console-fra.rpki-client.org