Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hcP2qehVDAkLw7JX9yuPZbaan2E.cer
File: hcP2qehVDAkLw7JX9yuPZbaan2E.cer (raw, json)
Hash identifier: Tq3ervatIwPqnIwWugNfPXe7814sZo0Qun5lElg1m2E=
Subject key identifier: 85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF7C25FB4FCCE9962861707D4347274
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.212.119.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:c2:5f:b4:fc:ce:99:62:86:17:07:d4:34:72:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85c3f6a9e8550c090bc3b257f72b8f65b69a9f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:0c:09:55:e2:3b:4f:5e:cd:1f:2b:4d:78:
b2:81:84:13:7a:87:c6:f1:2d:46:68:0d:47:f0:92:
3d:12:ae:76:b7:ae:7f:f9:cf:a7:c9:50:8e:45:6b:
49:27:94:af:85:49:48:7e:3f:b8:ca:b5:35:08:ee:
d5:78:a4:78:35:c4:52:f3:e7:df:89:68:25:cb:ec:
6b:1e:da:b4:c9:45:de:e5:35:08:b6:b0:6c:e6:da:
24:38:00:fd:40:75:f4:42:45:6a:44:20:cd:e8:03:
21:6b:0f:29:57:65:f4:82:fd:a7:ed:1c:66:60:53:
48:52:94:e2:5b:8b:80:72:1c:22:fa:3c:42:bc:1a:
28:40:11:7e:4b:79:d6:6f:92:8a:13:b0:fc:bf:c4:
1f:b8:98:38:5d:22:d2:48:49:bd:c5:7f:6d:2b:31:
92:19:dc:a5:36:91:24:c2:dd:47:60:2d:06:e5:3f:
e5:33:ea:cc:1f:9e:1f:3d:7f:cf:60:fd:dc:c1:a5:
35:82:67:7c:b3:1f:e1:7f:c8:4a:a9:27:0d:6c:69:
c3:d5:b5:dc:8a:59:2b:34:4e:00:52:fb:1f:bb:4d:
82:e4:da:99:f4:21:0a:a8:02:94:0a:2a:9d:69:86:
d2:9a:47:52:9a:3f:2f:4a:67:a3:25:3c:e0:55:92:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C3:F6:A9:E8:55:0C:09:0B:C3:B2:57:F7:2B:8F:65:B6:9A:9F:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/524ba5-096d-47ff-a8f4-dc8a2d9ec6f3/1/hcP2qehVDAkLw7JX9yuPZbaan2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ba:10:89:38:ff:b5:29:7d:87:6b:7d:c6:62:01:1c:fd:79:
a0:f7:46:2d:4b:d6:f0:70:a6:a7:69:f4:2f:ae:fa:72:e2:3f:
98:f7:74:68:72:21:5b:46:7c:41:25:24:15:82:9a:34:34:68:
0d:41:07:e6:ab:85:88:d0:2a:30:be:6c:30:49:73:05:35:ac:
5b:46:d5:52:d2:36:90:17:4f:24:5a:7c:a5:8b:51:a1:d6:c6:
ec:dc:04:37:12:a2:83:98:fd:6f:4e:55:99:6f:d7:22:37:62:
2c:ec:3c:0b:ea:b1:88:0d:c8:b8:31:5d:52:a1:62:35:6e:67:
9e:90:26:ac:3d:50:8e:fc:b0:e8:ef:c5:b1:51:04:72:99:00:
fd:b5:78:fb:35:15:99:6d:05:61:c7:d4:8e:47:31:1a:51:5e:
5a:72:2d:1f:68:86:d7:4d:b5:fa:86:c3:88:d6:88:e6:f3:3e:
ad:c3:73:bb:f6:fe:bf:a7:ac:da:f7:59:fc:5f:07:cd:33:29:
37:67:f7:f8:6b:bf:d6:9e:7b:5e:8a:22:c3:6d:ac:24:de:0e:
cc:7e:61:06:21:1f:d1:a0:40:dc:4f:69:7c:c2:30:74:06:d3:
0d:7b:20:83:e1:da:6e:fe:f9:f3:0b:87:26:f6:37:1e:ed:52:
c1:72:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:31:25 2023 by rpki-client on console-ams.rpki-client.org