Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nK3VLLbbjlDqO2liqS4nkwJuUqw.cer
File: nK3VLLbbjlDqO2liqS4nkwJuUqw.cer (raw, json)
Hash identifier: PqnyRZNeuEYLbssdbdQPQnw9ULh4AqOQ8UP5RWmg/88=
Subject key identifier: 9C:AD:D5:2C:B6:DB:8E:50:EA:3B:69:62:A9:2E:27:93:02:6E:52:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E650D5D8BB1ABDC0429ACA84B642BB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/nK3VLLbbjlDqO2liqS4nkwJuUqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.200.0/24
IP: 2a12:b000::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:0d:5d:8b:b1:ab:dc:04:29:ac:a8:4b:64:2b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cadd52cb6db8e50ea3b6962a92e2793026e52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:46:13:60:8f:bf:7e:12:ce:81:fc:31:b0:
19:b7:dd:fe:ca:91:d9:19:2b:6f:c4:6a:29:8e:60:
b6:96:83:bb:d4:e8:07:56:57:85:68:aa:ee:df:a3:
7f:91:7f:04:7d:c9:96:aa:dd:9b:73:1c:13:cb:27:
2e:b5:f4:5f:61:06:a6:6d:0c:86:eb:0a:99:65:5b:
39:24:ce:97:32:30:23:fa:6b:11:9d:9a:8b:59:89:
dc:78:95:2a:fb:5f:88:4c:fa:47:cb:d2:10:65:01:
6c:7b:17:ca:fc:20:5a:4f:f3:07:82:8c:3a:af:ab:
fd:bd:f9:e8:28:a0:53:4f:a2:ea:ea:cd:c3:41:1e:
b4:3f:7c:0c:1f:27:1a:c9:d2:89:16:36:23:3a:3e:
6f:56:a6:37:c1:32:1d:5e:08:a3:80:be:71:a4:88:
d4:4b:52:c7:14:9c:c5:6f:33:ad:a8:b5:b6:33:e5:
21:c7:db:7e:ef:c4:b4:d8:e7:13:14:8a:1a:50:d4:
e5:ac:7d:3f:77:2e:d5:b8:b9:be:de:91:78:da:84:
06:36:f2:13:3d:3b:ab:aa:ff:6d:04:4f:50:88:76:
14:f8:d2:be:c3:8e:0f:31:96:92:6a:0e:ce:56:9e:
b0:3d:fc:4b:40:b1:5e:43:e8:3a:33:fe:f5:62:4a:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:AD:D5:2C:B6:DB:8E:50:EA:3B:69:62:A9:2E:27:93:02:6E:52:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761528-efbd-4af1-a57c-c9bf71474321/1/nK3VLLbbjlDqO2liqS4nkwJuUqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.200.0/24
IPv6:
2a12:b000::/29
Signature Algorithm: sha256WithRSAEncryption
58:fb:51:90:8a:d5:62:fd:83:e4:63:3e:98:02:ea:04:a6:92:
b8:20:8f:0e:51:79:41:50:3c:f1:aa:b4:3d:b5:b0:66:47:62:
f5:b6:7b:17:38:0e:d8:e5:ed:f7:3f:44:08:58:94:e0:fc:ca:
64:d0:86:10:6e:71:d0:e9:02:70:d9:4c:8a:11:ca:4f:f3:f3:
00:ec:c1:fb:66:90:a9:cf:34:be:38:32:6d:37:80:8b:cc:a6:
56:16:cf:b1:96:cc:66:cd:a8:b5:56:74:25:6a:9f:95:44:35:
e7:c4:1a:6c:af:36:1d:c1:38:0b:21:87:f2:ad:02:e1:85:ad:
26:79:71:49:63:27:8f:e2:22:5e:7c:be:15:b8:fd:62:dc:b0:
4c:be:8a:e6:46:37:5e:63:e7:e2:29:78:1f:2e:ea:4a:1a:14:
64:27:2f:ec:56:b4:ef:8e:8b:c1:33:a9:8e:81:24:02:0b:0f:
cd:f7:90:ec:93:6a:6c:11:df:72:a3:17:b6:d0:45:d1:ef:c1:
d4:31:db:a1:c0:81:b0:46:dc:a6:45:e2:a1:eb:b6:e3:9a:b2:
bc:62:ce:4b:4b:33:41:ce:bf:b0:be:58:53:3c:cc:86:ac:b5:
4e:b4:17:03:4d:e7:09:2a:e8:de:16:57:ae:72:15:07:ec:95:
8d:85:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:14:25 2023 by rpki-client on console-ams.rpki-client.org