Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer
File: ndZeie84ER7MC_vWCs9icdO8U-U.cer (raw, json)
Hash identifier: UVdmBx854xAT4VWNEMDSqRjzoZPg9Nt+pTiBS2DgTCg=
Subject key identifier: 9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3FBD6C096A88930209ABF86AAF694
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.86.84.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:fb:d6:c0:96:a8:89:30:20:9a:bf:86:aa:f6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:57:41:e5:c7:80:f5:d3:ed:31:74:7a:c2:
1b:b8:a0:a0:99:86:6c:38:0e:43:7f:6c:9b:93:60:
b5:20:f5:c8:8c:4f:07:6e:b2:58:fb:65:2a:44:1a:
20:75:db:5f:a6:81:75:a3:e8:29:1d:db:8f:fe:2a:
b3:b1:f7:27:e6:46:0d:28:ea:77:ac:28:59:02:ee:
f3:fb:11:84:9d:e4:2c:18:91:ef:bf:b9:d1:bb:f3:
88:bb:b9:3a:c8:8b:4b:d3:ac:57:8f:e5:be:22:d7:
d6:ea:1d:ba:ee:63:f5:8e:40:c1:6d:66:d4:4a:0f:
f2:d3:b1:6f:bc:5b:b8:a8:25:1e:15:e0:db:72:c5:
74:b3:25:1a:77:1d:d6:b1:8d:1a:ec:d2:8d:c2:fa:
c0:65:4a:05:25:ff:5b:12:36:15:18:af:24:eb:d0:
ad:c7:82:97:41:9e:c9:af:fc:eb:c4:1a:2b:70:05:
3e:8a:02:e7:ca:66:13:63:fe:d3:3e:24:fc:37:1e:
cc:b8:7c:2d:90:ec:69:a8:29:ad:5c:8f:d6:2a:19:
16:6d:9c:a6:01:93:76:08:b4:6a:b4:37:24:ba:a3:
0a:2b:f9:d8:a4:be:35:58:29:9f:2e:7e:a9:05:b5:
cf:21:fe:f8:a3:fc:37:3a:6f:d1:c1:d8:8e:01:ed:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.84.0/24
Signature Algorithm: sha256WithRSAEncryption
62:cb:9f:99:b2:ed:2f:ea:ec:be:b8:1a:35:9d:88:fc:ad:ec:
66:88:f2:aa:c5:9b:ce:d0:f3:d9:e6:a0:b0:c2:f7:13:46:05:
fd:b9:db:ed:84:00:6b:28:bd:dc:c8:28:a6:de:cd:b7:07:6c:
d7:16:fa:88:e2:5e:74:bf:db:f2:77:77:d2:c3:54:65:de:4e:
0f:df:68:e0:1a:4d:1d:26:ed:30:be:7b:ee:7f:b2:48:49:4b:
ce:a3:09:52:b0:19:f5:55:ae:e6:0d:dc:f6:30:ec:3c:d7:4f:
be:2e:14:cc:c6:67:30:a9:62:f4:52:bb:ae:94:f1:ec:54:ab:
6c:aa:9a:c9:e5:af:b7:07:a8:d0:42:8b:55:78:ae:b5:b7:a0:
08:3b:7f:59:92:c4:39:d5:91:6b:39:1d:e2:e1:98:fd:08:6e:
f0:78:99:e1:18:5b:cf:ab:b4:53:9f:de:37:12:4a:49:fc:b8:
f6:f9:b6:03:6f:35:50:37:ad:6e:40:57:7b:d4:09:a3:84:47:
08:0a:b7:ae:ec:69:56:70:52:d3:83:3c:f8:bc:33:38:10:b8:
ed:54:7c:7d:3f:db:7f:ec:93:c9:7b:5e:3c:90:f9:a9:67:3b:
15:26:a3:d8:2b:73:60:58:a1:37:07:8f:a5:f0:64:17:d2:8a:
ec:2c:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 12:16:38 2023 by rpki-client on console-fra.rpki-client.org