Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
File: PNzIvNtsdErN9D3XLWjSBFGhefY.cer (raw, json)
Hash identifier: LdJ/zNPoMQLMQcRStQqtrQRxPhMy4HjECyJxJttFPPs=
Subject key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185C49B4A085FC2828C6D81DC230385235E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 18 Jan 2023 11:19:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.193.232.0/22
IP: 91.220.249.0/24
IP: 152.89.192.0/22
IP: 195.8.200.0/23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:9b:4a:08:5f:c2:82:8c:6d:81:dc:23:03:85:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 18 11:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:f4:dd:6a:3e:6d:f7:fa:63:dd:7f:bb:6e:
65:50:c4:a6:ed:81:7f:1b:cd:fe:7c:42:d6:58:6b:
fb:3d:bf:1b:b2:5d:51:7a:2f:7c:65:fe:bb:aa:ae:
06:9a:61:d0:e2:9f:c6:58:8b:6d:95:d5:b7:f5:77:
e4:24:40:e2:ad:78:ee:ab:24:24:09:cb:d1:93:60:
f1:b1:9d:e2:51:d1:c5:1f:83:97:78:68:cd:34:5b:
a1:ed:b9:a9:20:78:5e:92:ca:b2:0a:d2:a7:3a:45:
01:af:1e:fb:fd:4f:de:6c:e0:3b:e4:91:4c:09:11:
34:67:13:34:f9:3d:0f:84:27:61:ec:7f:a9:f9:a0:
c7:af:30:e3:e5:81:ae:83:55:92:e8:a1:a0:70:d0:
20:a6:60:c2:3c:c5:51:c1:bf:e8:cf:60:75:02:34:
1d:a9:65:c5:54:2e:07:9b:5e:da:35:54:92:d1:c2:
bb:77:3e:19:d8:84:f4:d0:a3:44:e7:e7:31:b0:ef:
14:f4:63:de:59:86:74:71:b9:31:84:cf:53:47:d1:
c4:dc:f6:d7:1a:1d:7c:e3:60:3f:3b:f9:57:d9:0d:
83:98:49:f4:e3:8c:fc:85:fb:af:03:9f:54:79:52:
9b:d5:78:c2:7e:ce:b2:c9:09:b1:c4:d2:b2:16:9b:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/22
91.220.249.0/24
152.89.192.0/22
195.8.200.0/23
Signature Algorithm: sha256WithRSAEncryption
56:77:e5:a2:60:ad:7e:b4:47:8a:b5:a3:ca:4e:11:e4:1e:5f:
02:32:32:d0:ed:d8:23:4d:2d:99:c5:4e:36:92:d6:3f:80:96:
9d:c0:e3:a5:b8:ea:3a:52:4c:0a:65:07:7d:2c:d7:56:f7:6d:
09:27:41:06:a3:e2:14:79:d7:2c:ee:f8:4d:4d:6c:69:6c:21:
99:1b:6b:eb:8a:72:28:4b:43:5e:2b:9f:0a:ae:9a:b7:7a:03:
c1:5e:09:b1:76:6f:2e:86:c4:4d:98:3b:43:0e:12:3f:fc:20:
ef:54:c4:0f:6a:9b:9d:f4:f4:c4:2a:59:a2:85:b8:c7:10:01:
b9:a5:fc:3c:ef:58:a9:f1:39:3e:7d:40:4b:be:a8:bb:eb:ce:
d6:92:6d:59:a6:54:c3:96:c3:c0:c4:d5:a2:34:7c:1f:a4:c1:
eb:70:c4:2c:29:7f:d9:00:45:2e:81:e1:75:3b:de:cb:a9:2a:
a8:9c:ea:90:a9:3c:5b:13:aa:8e:2c:c4:38:f5:e8:d1:bc:a9:
88:c7:c1:13:c3:9e:c2:b9:26:a6:82:33:c0:d3:73:a5:d3:84:
95:f1:7f:ce:9d:93:68:de:b8:53:0e:9a:a8:13:af:ff:bd:c6:
9e:59:66:e5:85:b2:93:ce:5a:a6:6a:f0:d0:79:3e:cf:db:cc:
07:c8:b8:05
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 20 13:19:32 2023 by rpki-client on console-fra.rpki-client.org