Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1XIPzq3riubZp9Gh0Y247ORgb0A.cer
File: 1XIPzq3riubZp9Gh0Y247ORgb0A.cer (raw, json)
Hash identifier: 6VWzCzNS2vAP+NS7kIs2KnHDANeptyxRipu1H5Dg3Ak=
Subject key identifier: D5:72:0F:CE:AD:EB:8A:E6:D9:A7:D1:A1:D1:8D:B8:EC:E4:60:6F:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188B8E1D5D54347F78119B2C1B01EA6B063
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 14 Jun 2023 07:49:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 198136
AS: 212068
IP: 185.0.32.0/24
IP: 2001:7f8:14b::/48
Validation: Failed, certificate revoked on Thu 28 Dec 2023 21:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:e1:d5:d5:43:47:f7:81:19:b2:c1:b0:1e:a6:b0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 14 07:49:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5720fceadeb8ae6d9a7d1a1d18db8ece4606f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:f8:16:9d:af:4d:54:89:b3:f5:6a:fb:d0:
a3:c4:fb:df:1d:25:0f:01:32:80:25:ee:65:76:c0:
95:23:d0:b8:b8:a5:fa:1c:23:8b:29:31:ac:58:bc:
f2:3f:5d:08:6e:c5:79:ca:35:fa:3e:8c:d1:8e:c0:
7d:bb:89:a9:11:f3:a3:0a:10:e9:a1:2a:fd:df:30:
f4:cb:94:66:9d:e6:0b:28:d0:6c:fd:c0:60:61:d7:
da:93:56:a4:ed:d8:ae:1a:b0:b8:1f:40:29:17:0e:
59:73:86:a1:11:2e:ba:07:15:b5:70:70:ce:b8:d4:
a8:31:de:af:e5:7a:7d:ed:64:83:f5:d8:6a:f8:44:
b2:d5:a9:4a:0b:c9:d6:26:7d:90:b8:5f:16:84:4f:
2f:60:20:b4:75:69:7e:c2:1d:f4:b0:70:af:af:81:
3a:42:69:e3:15:3f:1f:e3:ca:77:c3:3d:01:6b:52:
15:40:08:85:c5:3d:1b:5f:9c:44:12:43:f6:07:f8:
7d:0d:72:4c:de:dd:d5:eb:91:0c:b0:b4:62:44:97:
08:50:c1:8c:35:c7:ad:16:80:10:2d:4b:62:4f:4f:
b3:0e:23:d9:e3:38:db:05:0d:64:1a:89:a4:a0:a4:
72:07:70:e2:11:a0:20:c2:05:60:9c:3f:aa:4b:d2:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:0F:CE:AD:EB:8A:E6:D9:A7:D1:A1:D1:8D:B8:EC:E4:60:6F:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.32.0/24
IPv6:
2001:7f8:14b::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198136
212068
Signature Algorithm: sha256WithRSAEncryption
6f:d5:ad:d8:fb:5b:f8:5f:69:86:09:a5:6c:a3:3c:04:ae:c5:
4f:94:fd:6b:82:13:0b:71:04:22:96:07:a9:d9:22:09:20:71:
20:53:4b:58:35:02:48:bd:59:50:ab:9b:94:eb:81:f9:28:b2:
b4:78:16:f1:99:8c:43:d1:45:3a:66:14:22:c4:43:16:72:23:
1b:8e:2f:7d:8a:6b:96:84:60:c3:d8:18:5f:44:29:21:4d:49:
ce:7f:c4:b0:d9:b6:d1:1b:97:9d:88:e2:f1:e1:51:d8:2e:c6:
99:44:08:2c:9d:28:79:58:ff:36:a0:db:38:96:69:f5:bd:c9:
c4:c1:8c:8a:85:f7:d0:74:4b:8a:55:5b:88:c1:07:24:be:85:
b2:37:57:94:88:60:e7:1e:2d:3e:7b:d4:29:51:0f:c4:f8:80:
3a:94:01:75:d4:c6:8c:e2:1d:8c:3e:f8:3a:3b:83:1e:08:c2:
77:a3:a2:e5:bf:b6:04:5d:36:fd:d8:a1:16:68:db:05:02:e4:
a1:2a:11:a8:e0:ed:e3:82:2c:19:3b:c9:c3:f7:30:cc:ed:d3:
62:8e:ff:02:e7:02:95:80:00:d8:45:a1:ba:b9:5f:ef:22:9b:
00:cc:db:78:43:46:39:bc:9a:65:ee:ed:08:ae:5a:21:f0:8d:
55:6e:99:40
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAYi44dXVQ0f3gRmywbAeprBjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjE0MDc0OTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTcyMGZjZWFkZWI4YWU2ZDlhN2QxYTFkMThkYjhlY2U0NjA2ZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCH4Fp2vTVSJs/Vq+9CjxPvfHSUP
ATKAJe5ldsCVI9C4uKX6HCOLKTGsWLzyP10IbsV5yjX6PozRjsB9u4mpEfOjChDp
oSr93zD0y5RmneYLKNBs/cBgYdfak1ak7diuGrC4H0ApFw5Zc4ahES66BxW1cHDO
uNSoMd6v5Xp97WSD9dhq+ESy1alKC8nWJn2QuF8WhE8vYCC0dWl+wh30sHCvr4E6
QmnjFT8f48p3wz0Ba1IVQAiFxT0bX5xEEkP2B/h9DXJM3t3V65EMsLRiRJcIUMGM
NcetFoAQLUtiT0+zDiPZ4zjbBQ1kGomkoKRyB3DiEaAgwgVgnD+qS9IKFwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFNVyD86t64rm2afRodGNuOzkYG9AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5L2UyYTJl
Ni1kMTZjLTQ3ZTYtYTU5NS1lODJjNDkxMGJmNjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvZTJhMmU2
LWQxNmMtNDdlNi1hNTk1LWU4MmM0OTEwYmY2My8xLzFYSVB6cTNyaXViWnA5R2gw
WTI0N09SZ2IwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAuQAgMA8EAgACMAkDBwAgAQf4AUswHwYIKwYB
BQUHAQgBAf8EEDAOoAwwCgIDAwX4AgMDPGQwDQYJKoZIhvcNAQELBQADggEBAG/V
rdj7W/hfaYYJpWyjPASuxU+U/WuCEwtxBCKWB6nZIgkgcSBTS1g1Aki9WVCrm5Tr
gfkosrR4FvGZjEPRRTpmFCLEQxZyIxuOL32Ka5aEYMPYGF9EKSFNSc5/xLDZttEb
l52I4vHhUdguxplECCydKHlY/zag2ziWafW9ycTBjIqF99B0S4pVW4jBByS+hbI3
V5SIYOceLT571ClRD8T4gDqUAXXUxoziHYw++Do7gx4IwnejouW/tgRdNv3YoRZo
2wUC5KEqEajg7eOCLBk7ycP3MMzt02KO/wLnApWAANhFobq5X+8imwDM23hDRjm8
mmXu7QiuWiHwjVVumUA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:13 2024 by rpki-client on console-fra.rpki-client.org