Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
File: a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer (raw, json)
Hash identifier: bEAkJejoUuGXBfWa418exVynQOHfvnXdJyaZP1+Emrs=
Subject key identifier: 6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01869307828A6CD2145F95AACD50217812C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Feb 2023 13:19:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.99.23.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:07:82:8a:6c:d2:14:5f:95:aa:cd:50:21:78:12:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:19:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:15:80:02:6b:16:21:c0:af:05:17:dd:c5:
96:bf:36:2d:10:2d:66:b1:ad:58:8a:37:df:ac:d6:
7b:b2:f3:ca:e2:17:61:e6:59:27:21:f9:fc:e5:ee:
a2:d7:e7:8e:41:6f:c7:35:ef:4a:5a:c1:45:6f:63:
21:cc:c6:cc:46:36:db:e2:13:9d:44:a2:27:cb:57:
a5:d7:80:7d:0f:1d:d7:67:00:75:d0:73:15:da:91:
68:a0:86:d4:7b:f9:36:b6:b7:86:ff:97:c9:11:c5:
c9:2c:86:8a:fe:52:5c:06:36:95:12:93:21:81:25:
66:39:27:56:2e:4f:66:37:a2:45:a3:24:17:b3:67:
74:b7:51:b3:b6:ea:b5:d3:01:46:ee:96:d3:e3:f2:
9b:de:73:a4:01:5b:6f:ed:67:6b:a5:91:4c:6d:79:
43:c8:70:11:d2:51:fa:92:79:18:5e:07:f8:3e:6f:
c4:3b:7a:66:dc:b2:3b:0a:36:2d:4e:f5:aa:61:dd:
e0:fd:1e:e2:7d:47:ea:74:9e:a1:25:dd:db:bd:0b:
27:cb:33:32:62:8f:f4:af:4a:a8:58:d0:93:98:af:
57:24:75:a2:5c:c0:52:17:65:c1:75:61:5f:8f:69:
70:f5:48:13:de:d8:2b:97:fb:6a:f6:4a:51:fb:f3:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:46:fa:1b:a7:61:22:9e:e8:66:31:bc:0a:aa:92:aa:94:82:
82:bc:5c:9c:5e:8d:bc:11:d6:8a:cf:03:4d:88:d1:ba:55:00:
c6:45:31:0b:bd:8f:3d:e6:17:6f:60:95:67:3f:9b:73:dc:62:
1b:9e:3f:ca:bc:10:61:fc:fd:6f:f1:f3:b2:1c:f8:2d:93:7f:
28:15:89:a5:ee:86:76:6c:cc:81:62:de:31:56:af:9a:4f:61:
f5:6d:af:96:87:64:8d:59:1c:93:68:c6:8c:aa:2d:dc:49:5f:
78:8d:a8:77:94:4f:e6:ed:d3:a3:c0:e9:90:f8:99:0b:ef:a8:
fa:ec:d4:e4:7b:4b:28:84:65:60:ef:b3:b4:ec:53:4f:e5:db:
a2:56:45:55:d0:8d:23:44:43:24:a7:03:33:c3:55:d4:b4:69:
2a:98:72:67:f6:b6:14:f6:4b:d2:89:7e:30:58:f9:e9:9d:f6:
2c:45:da:d3:ca:56:8a:5e:e3:d7:06:86:3a:bb:cd:10:a8:0c:
47:0c:15:fd:0c:41:50:f5:d3:f2:24:76:c1:db:c2:6a:78:f4:
e8:18:12:4b:82:9f:4d:18:dd:f5:d8:43:f4:8e:48:8d:2f:9e:
be:f9:67:f5:39:4f:57:32:05:9d:f0:26:eb:2a:9b:82:12:1b:
36:5e:ae:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:46 2023 by rpki-client on console-fra.rpki-client.org