Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kxSg3dJbcnOeACSxBL8UmfuOMZA.cer
File: kxSg3dJbcnOeACSxBL8UmfuOMZA.cer (raw, json)
Hash identifier: LQHEGBhGGpXM6QlHpid8P61m02T8PyD+VOl8Rx3nQ7s=
Subject key identifier: 93:14:A0:DD:D2:5B:72:73:9E:00:24:B1:04:BF:14:99:FB:8E:31:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B634D8D5CDF7CF2E08E826DDE45E12E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/kxSg3dJbcnOeACSxBL8UmfuOMZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.210.126.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:4d:8d:5c:df:7c:f2:e0:8e:82:6d:de:45:e1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9314a0ddd25b72739e0024b104bf1499fb8e3190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:61:97:11:29:72:86:5f:1c:d0:cb:7f:3c:
7a:52:5c:b1:bb:6b:7f:89:7d:28:46:3b:7e:ae:0d:
6a:79:5e:dc:f0:7c:f4:d7:90:83:dd:31:28:61:04:
87:5a:2c:e6:ed:bf:40:ac:34:3f:ab:f5:e5:af:76:
5a:5c:5e:44:58:cb:b9:d7:1f:06:eb:5b:13:66:78:
87:e0:f2:18:a1:61:c0:f8:15:23:47:0e:e8:c1:ce:
dc:65:7f:db:96:15:ad:4d:de:a6:be:3c:cc:f2:52:
7f:ee:53:bd:a6:5f:3c:93:98:48:c9:a9:31:c6:f6:
b3:ed:f3:e5:aa:79:d6:7e:45:d5:aa:16:aa:9c:b3:
8b:0f:59:be:c1:35:43:20:45:ca:e6:49:22:b6:e9:
4d:71:02:d3:f1:8d:21:c0:4b:6f:f9:18:a3:1f:e6:
3d:fa:17:c7:3e:88:71:d0:7f:27:6d:a4:fc:45:97:
15:9e:5f:33:b4:4c:e0:13:2b:31:71:11:7b:5b:7a:
78:66:30:61:43:da:6b:7e:58:67:87:43:cd:e6:7e:
7f:a4:8a:8e:b0:97:69:ce:40:6e:59:c7:be:e4:7d:
6f:a7:55:6b:8f:25:fb:72:d1:8b:de:81:e3:cf:54:
c2:5e:92:a4:f7:5d:1d:73:33:05:4f:f7:05:ef:12:
3d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:14:A0:DD:D2:5B:72:73:9E:00:24:B1:04:BF:14:99:FB:8E:31:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bab103-d026-4151-8117-1d49a7f4aa3e/1/kxSg3dJbcnOeACSxBL8UmfuOMZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e1:0e:9e:1e:35:06:95:a1:86:e1:50:39:f1:27:64:4a:cc:
df:df:8e:91:e1:87:f1:37:82:e6:a0:b8:b8:5f:39:06:e3:d3:
66:9c:35:0b:90:f7:4f:9e:fc:3d:b6:74:36:5f:00:ea:8f:21:
87:c5:42:fd:a2:dc:3f:e2:fd:1a:37:87:f2:26:87:87:eb:18:
0c:f2:3d:b8:56:b3:eb:5e:ca:35:db:3b:d0:3f:cc:3a:b5:f6:
6c:72:1c:43:7c:23:b0:1e:a9:38:5e:f8:5c:47:8c:ca:fb:f7:
3e:38:46:8e:c6:ef:b6:e8:c5:36:e1:f3:65:50:20:54:33:f7:
6e:81:40:a5:f9:5d:ed:63:91:c9:d2:6d:bc:f1:54:f2:cd:2a:
46:18:97:21:8a:57:93:67:24:c9:5c:2b:39:11:97:16:da:f9:
13:2e:8c:84:94:8b:83:b4:54:d2:f0:5a:f1:76:2c:99:2d:b3:
5a:f1:67:28:32:2d:e4:69:4e:7c:a7:33:77:05:e2:9c:1d:11:
f4:ae:90:57:75:a9:67:55:0d:1a:f9:7b:dd:84:aa:3e:51:ee:
26:59:a4:73:dc:f4:f1:f7:46:89:7a:61:b5:6c:aa:d9:a8:61:
e8:9e:f3:f9:8c:a7:c0:59:d7:a3:e0:00:e8:e3:05:f9:3d:48:
9c:7f:b6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 13:54:26 2023 by rpki-client on console-fra.rpki-client.org