Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer
File: X7MPVJCe_20tvhkLd8zXi-rR6d0.cer (raw, json)
Hash identifier: e4Hu4vVoGOYrwLr//7vBGNScjxRHNfu8FmtCHqvxq0U=
Subject key identifier: 5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168671BEB6D3AEDE6A264441AA2F43B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.119.142.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:67:1b:eb:6d:3a:ed:e6:a2:64:44:1a:a2:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:87:a2:de:82:09:e5:9e:51:e2:09:46:2f:
67:49:c7:4d:47:aa:43:5e:71:66:92:71:61:5c:13:
b2:d7:42:23:2a:c6:c4:60:a5:0d:5f:fe:eb:a6:f2:
b6:91:f1:7e:84:16:27:72:35:18:cb:cb:b9:12:39:
d0:7a:5f:bf:1b:90:df:05:07:2e:5a:13:db:c4:6a:
23:f9:9a:bc:c2:b3:96:fd:22:b4:d9:e3:33:09:2f:
76:e2:c7:1d:8f:34:3d:3b:a5:41:a5:d8:9c:2b:0e:
10:ab:00:3c:cb:e4:88:e0:0e:f0:f6:6b:00:33:12:
ec:5f:ab:e0:e3:29:5a:5d:6e:4c:47:81:e8:ae:c2:
1e:09:80:7a:6e:08:cd:55:fe:32:de:7e:01:9e:9e:
5e:80:9c:34:c0:91:1c:58:a9:89:a4:47:32:77:e6:
b6:fd:35:b9:30:c8:d0:27:c7:95:f3:00:9a:6d:e8:
60:95:0c:ee:6e:bb:9f:16:e6:30:4e:22:7d:db:26:
b7:01:d3:b5:6b:83:8b:09:4c:4e:5e:9a:82:d8:3b:
e9:ea:d5:59:f3:fd:b1:a4:14:94:e0:b6:bf:c6:c0:
f7:ff:ee:b2:a3:d7:6d:38:34:b4:89:8e:28:aa:db:
2d:72:b3:d2:10:05:cf:19:ab:28:c7:f2:e5:58:c3:
38:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
16:75:78:6a:6f:70:eb:e5:e3:ac:4b:bb:89:1d:9b:51:14:90:
c6:e4:a8:69:f3:6d:78:68:0f:d5:a2:70:bf:00:c6:13:46:41:
56:a2:b0:f3:a9:56:db:43:d9:02:80:c0:d5:44:80:fe:e6:15:
dd:dc:fd:17:ac:79:7b:09:e8:e2:c3:8d:12:36:2a:53:d3:50:
b2:48:a7:43:54:6e:5a:04:e3:19:68:1a:67:b1:77:c8:e7:df:
7c:96:2f:d6:19:3a:3d:e2:4c:40:4a:97:af:77:31:95:42:d3:
86:10:1f:f4:f0:ea:23:fe:dc:35:ef:10:c3:78:ab:cb:23:95:
f9:34:b9:69:87:48:84:56:58:05:9a:85:4f:90:b8:60:f8:2c:
7d:08:6a:02:ce:55:03:b8:ed:81:a8:9a:72:4f:e8:12:86:b2:
81:f0:35:0f:8d:73:b0:d3:c6:05:de:d3:51:da:57:f8:ab:9c:
ef:e6:7f:ec:06:cd:16:28:2f:29:8c:6f:99:eb:f0:6a:b7:eb:
53:5c:2d:3f:a0:3e:5a:73:d9:ab:de:49:2d:12:5d:b7:9f:50:
6f:f9:ec:e9:77:b2:f1:b6:d5:65:6a:88:27:27:f2:0e:78:2a:
c9:de:47:38:25:c9:7f:db:3c:a1:f6:e8:0b:9a:fe:d0:88:3e:
eb:80:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 13:47:51 2023 by rpki-client on console-fra.rpki-client.org