Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gSps3Fy5zpz9lQs0QNMIO3iLleY.cer
File: gSps3Fy5zpz9lQs0QNMIO3iLleY.cer (raw, json)
Hash identifier: pSmvnO2tS6aNNqRvZlyI+ow6/4BREHQ+Qcz/EcmxTWY=
Subject key identifier: 81:2A:6C:DC:5C:B9:CE:9C:FD:95:0B:34:40:D3:08:3B:78:8B:95:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708BCDC829FC055BF71DAC0EE965D4B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.245.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:cd:c8:29:fc:05:5b:f7:1d:ac:0e:e9:65:d4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=812a6cdc5cb9ce9cfd950b3440d3083b788b95e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:32:51:aa:82:fe:ea:95:2a:33:5e:69:76:
1a:ef:b8:72:89:56:1e:ae:74:f6:70:9a:18:4b:f1:
87:f1:09:40:6a:cb:81:a8:5d:8c:ad:98:26:ac:e8:
28:5e:08:64:f1:02:ee:df:11:80:7e:3c:0c:5a:24:
7f:1e:b1:36:1e:b3:7d:93:8d:01:71:2b:e4:f2:44:
ee:78:a3:c3:cf:87:bb:58:6f:4f:4e:ac:c7:f2:a5:
07:c8:4f:52:93:8a:ab:99:8e:66:16:c8:2f:f8:b3:
ce:91:8d:5b:86:38:2d:15:75:bd:d3:37:52:f2:05:
39:10:db:9b:5f:7c:3e:82:6c:ed:51:d1:01:90:a5:
84:eb:a2:3d:50:05:fb:ea:b9:89:2e:e6:c1:97:28:
91:6e:21:af:b6:12:a0:c0:49:dd:01:f6:c1:d2:b7:
bf:57:21:90:07:94:cb:5f:44:a3:6e:2d:f6:c7:eb:
d8:7d:37:12:05:2f:b9:fd:fd:7f:1f:30:5d:51:d8:
8c:27:bf:8f:9d:c8:5a:cf:85:22:e8:2f:66:4f:32:
39:7b:7b:07:f2:f4:8b:24:e7:5c:ee:4b:7d:4d:9e:
28:67:82:ca:eb:6a:34:b6:e5:b2:73:c3:b5:d9:65:
09:f3:77:64:f4:d7:1a:68:1a:d2:2c:07:2c:87:5b:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2A:6C:DC:5C:B9:CE:9C:FD:95:0B:34:40:D3:08:3B:78:8B:95:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.245.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8d:ea:02:09:59:e6:ea:43:b0:07:40:8c:4b:b9:09:4c:e1:
7f:44:88:fe:06:b0:a2:16:c0:3e:e1:8b:d0:4c:04:ae:7d:31:
ab:43:0a:44:87:ce:1d:f2:51:d0:bc:16:4e:ab:d9:40:4f:eb:
5e:71:c4:4d:73:b1:88:49:0d:e0:3b:8a:4c:d9:18:c8:14:25:
e7:c6:16:69:f9:a3:15:7c:05:13:21:d7:ae:5b:ca:d6:48:f9:
6d:f5:12:4e:42:98:f5:46:e6:73:24:73:c8:54:a3:b9:38:17:
50:ab:53:31:53:b6:0e:9b:2b:cb:59:8c:5d:ec:c7:68:87:71:
14:bd:c2:df:bc:34:10:5e:cf:66:ac:28:25:6a:a3:9e:88:07:
eb:24:ac:1a:97:5c:2f:c4:50:e9:56:e9:57:9e:63:e3:46:91:
22:36:ab:1a:53:ca:77:89:78:46:64:c1:14:02:11:44:e0:d4:
62:02:f4:40:b0:55:5a:39:12:8c:23:e2:dd:b2:2f:cd:f3:c5:
25:ad:c4:eb:cf:f4:90:8e:ae:35:53:d4:68:a0:b3:03:be:f5:
7c:00:34:1f:b0:c3:09:60:89:fb:0d:68:09:65:94:2f:b9:ac:
e7:7b:86:00:e1:8a:0b:07:f1:2a:3c:3a:cf:c9:ba:72:f8:79:
31:b9:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 13:47:52 2023 by rpki-client on console-fra.rpki-client.org