Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RUvvc8WkdoeytcUnaw28Bwu5y1A.cer
File: RUvvc8WkdoeytcUnaw28Bwu5y1A.cer (raw, json)
Hash identifier: qxEeJsqKk1nid0d/Nlx4ZdUCm1FPhlm8QXMss5hs3rI=
Subject key identifier: 45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E2EA6D3C8E0474277FBFAD879BB3F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:13 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.253.3.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2e:a6:d3:c8:e0:47:42:77:fb:fa:d8:79:bb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=454bef73c5a47687b2b5c5276b0dbc070bb9cb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:79:f1:da:a1:83:ea:f4:4a:4b:ca:53:32:
29:30:12:84:10:09:bb:26:a3:52:6c:6d:61:a2:28:
a8:3f:d4:82:cc:8d:8d:ed:29:6f:c5:0b:c3:0f:41:
4e:e4:7e:82:d4:c6:d9:ee:18:76:dd:d7:fa:41:48:
ea:85:8f:56:ab:e7:25:69:fc:c2:0c:73:71:25:93:
67:02:1b:29:6c:46:1f:6c:0a:b1:fb:5c:60:86:93:
fb:67:7f:6e:0b:5a:a3:ff:12:ed:b6:37:14:8f:74:
ca:2d:a0:95:35:6f:b4:55:9a:79:d4:74:25:1a:09:
de:ce:f2:9f:05:a4:30:e3:6b:ec:84:98:2a:f0:73:
ad:17:21:31:2a:5b:db:af:f5:02:c8:9e:74:4f:7b:
14:cf:2a:6f:77:fb:3e:39:63:0c:d8:a9:98:a9:14:
3a:f1:be:ff:85:64:6a:cc:a2:53:c4:45:0d:50:f7:
39:56:38:ba:e9:af:dc:c2:d2:9c:24:94:b5:47:10:
c3:51:c6:22:40:62:fc:b9:94:b6:ac:be:ab:e6:88:
41:68:24:cb:eb:e4:dd:70:c2:f7:08:92:ba:c5:30:
a5:7f:b2:0d:7a:47:da:03:22:b3:2d:b5:32:e1:95:
1f:a9:a0:38:8b:ae:31:c5:04:a0:43:36:84:ce:4e:
da:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:EF:73:C5:A4:76:87:B2:B5:C5:27:6B:0D:BC:07:0B:B9:CB:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c425fd-980a-4646-a162-9c2914ef8753/1/RUvvc8WkdoeytcUnaw28Bwu5y1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f0:b6:2e:83:7f:56:19:22:61:24:82:15:e6:3f:6b:0b:2a:
2f:57:30:e8:d2:22:c6:f8:c9:55:49:95:29:d4:3c:39:24:24:
0b:e4:59:db:e4:16:aa:0c:9d:98:09:d9:98:5d:12:b3:53:00:
54:8e:1c:af:6a:54:14:77:18:6c:df:de:53:f2:d6:ce:b8:e5:
9d:fe:68:f2:b2:4f:a7:9c:cf:10:c6:76:4d:66:dd:dd:d7:90:
6c:5c:c7:87:1e:dd:17:24:92:ca:c4:37:64:00:24:66:cc:9b:
b5:99:bd:58:7f:6f:2e:b4:67:0a:25:f1:60:d5:bf:55:d4:7f:
74:52:46:6e:67:cf:df:ed:f5:d9:53:2c:12:c2:2e:ce:43:9d:
85:09:c1:d1:8b:89:cb:c5:1c:fb:27:3b:e7:c9:b5:ca:10:fa:
2e:ab:a2:35:c0:fd:f6:0a:ff:0a:81:39:b6:7c:c4:44:0a:77:
81:64:42:7b:42:de:a9:9b:be:fc:b4:b3:64:85:04:04:52:de:
8c:1c:8a:6c:b2:05:55:18:41:99:47:81:69:0f:25:45:6a:63:
81:f9:89:ba:43:fb:91:0f:e5:19:00:24:2a:d8:64:7a:42:e8:
ce:b8:1b:59:38:c2:fb:f1:7a:e2:a5:77:7f:f7:c2:ed:dd:5c:
95:36:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:12 2024 by rpki-client on console-ams.rpki-client.org