Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer
File: neaMAoVPncZ4WRIklSKrdQmTfkg.cer (raw, json)
Hash identifier: XDDasso+a6W+S3J226JNL1xy6qwye+BZIyDcwBCBqjw=
Subject key identifier: 9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01876FD4BAE591F3CF0242250F04A94F626D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Apr 2023 10:20:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.23.203.0/24
IP: 2a13:f680::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:d4:ba:e5:91:f3:cf:02:42:25:0f:04:a9:4f:62:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 10:20:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de68c02854f9dc6785912249522ab7509937e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:56:28:a6:64:35:74:87:3f:59:22:c2:8f:
30:aa:97:69:e8:89:2d:5a:ac:e5:c1:a1:5c:4c:b2:
64:ea:dd:36:27:4a:14:5a:81:23:33:01:f6:c9:f5:
86:66:d8:2a:ad:71:1e:09:1f:16:b4:4e:b7:80:77:
24:8c:ad:c1:94:48:05:a7:0d:76:b3:a0:01:f8:f7:
6b:07:df:41:06:a4:d3:58:bb:68:53:4a:16:1f:85:
d3:37:5c:d5:6e:c3:94:40:2b:59:b2:70:bd:0e:e1:
0d:c5:57:ec:59:06:82:c3:83:4b:f4:02:13:e3:9b:
42:c1:48:97:26:2a:61:fa:1d:b8:92:7f:56:b4:b6:
49:e1:86:48:2a:59:40:c8:81:ff:99:a6:0c:34:a5:
83:3d:28:41:d7:2b:91:4e:7b:70:58:d2:7c:c2:a4:
27:df:6e:ae:4a:74:58:01:cd:65:d4:21:65:ef:d6:
02:bc:12:0b:d6:59:a1:96:36:85:46:b4:56:17:d1:
e0:fd:ce:2c:08:0e:2e:72:a9:bd:43:85:02:32:78:
42:52:b9:04:bb:5b:d9:5b:a5:4e:3e:3b:39:93:1a:
cc:ef:34:ee:78:70:d9:ea:36:da:e6:41:9b:31:1d:
57:ab:91:46:e8:09:f1:58:67:bc:86:7e:01:dc:4a:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.203.0/24
IPv6:
2a13:f680::/29
Signature Algorithm: sha256WithRSAEncryption
4a:88:3a:61:b5:57:ec:a2:7b:53:f9:56:df:46:07:2d:b3:66:
04:79:ce:7d:60:0d:69:26:41:07:96:94:eb:67:26:6d:24:80:
a5:8c:f6:6e:b2:bd:5e:7b:b7:4b:5c:2e:59:cc:28:52:83:1c:
db:6e:a1:3d:14:29:20:ad:d8:86:e1:c8:98:fc:3e:68:a5:80:
f0:99:bd:90:e9:e5:22:d1:45:4b:72:9d:38:d8:c0:bb:58:2f:
78:e0:34:ab:c5:85:33:fe:ab:f1:d2:71:c0:e0:1d:e2:ab:89:
32:86:7c:93:eb:d3:8b:48:69:a8:e9:3f:13:b5:38:46:ad:26:
1b:12:98:51:cc:25:c6:7f:7f:a2:97:69:6f:24:ed:6e:aa:00:
f4:07:a5:d6:1d:50:bc:16:de:aa:2b:3a:37:64:7a:56:6b:d0:
3c:ef:d1:96:ff:c0:f4:e3:a9:00:4b:b5:e9:2a:71:6e:ad:10:
59:99:4e:a9:61:03:cf:94:4e:66:b5:43:be:1e:15:e5:1f:a8:
55:dc:83:eb:93:8d:0f:4f:60:85:e9:04:c9:7b:5f:bf:a4:c8:
cb:7f:62:41:88:9d:3c:f8:38:ae:d9:c1:b9:27:28:40:ef:63:
3e:82:dd:ac:dc:45:d9:36:2c:f2:9c:fd:bc:a4:68:40:6a:dc:
56:4c:83:d5
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 6 14:44:17 2023 by rpki-client on console-fra.rpki-client.org