Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DVPBFNR2IPunO0eAITymTRURkZQ.cer
File: DVPBFNR2IPunO0eAITymTRURkZQ.cer (raw, json)
Hash identifier: Nl+YO8Th5SlVVSm4IACnv7P7/8TwrDZoYuKRIz4Ipjo=
Subject key identifier: 0D:53:C1:14:D4:76:20:FB:A7:3B:47:80:21:3C:A6:4D:15:11:91:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222CE906A5FE92FAFA7E0F88E8D15091
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196/0D53C114D47620FBA73B4780213CA64D15119194.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.101.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 15:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:e9:06:a5:fe:92:fa:fa:7e:0f:88:e8:d1:50:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d53c114d47620fba73b4780213ca64d15119194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:68:7a:1c:b5:8e:7a:cd:22:78:36:8a:3c:
3d:17:f1:e7:2b:24:67:7e:51:b6:8d:2f:df:13:62:
79:e1:75:40:88:d1:a1:f4:6f:98:69:91:ba:9b:6d:
02:41:a3:98:78:c8:43:c7:5b:da:b4:10:8e:45:ca:
aa:cd:8f:7a:2a:26:16:8e:f7:12:cc:a1:12:f7:07:
35:d6:d1:fa:9b:57:36:16:fe:ed:25:a5:2f:be:97:
38:6d:e4:4c:3c:03:14:3a:ea:25:a3:19:82:78:85:
96:e8:5b:42:33:64:6f:33:41:19:74:b8:02:a6:fe:
b0:50:90:a1:97:f1:8f:ce:de:a4:16:b1:c1:94:47:
93:40:55:d7:e2:60:85:fd:13:dc:9a:2f:d7:b6:f8:
5a:69:95:31:07:bf:0c:e5:3e:2b:d4:79:7a:e1:a8:
34:17:ad:9e:7e:a5:89:97:3a:73:ab:ea:08:84:e7:
1d:c2:77:95:f6:db:ca:b8:59:4e:d2:9e:47:60:6c:
d9:49:7a:b2:91:16:bb:ae:58:24:54:18:16:05:17:
31:61:3c:ce:c4:d8:3a:22:34:77:09:93:2c:34:36:
79:86:ce:3b:f5:f4:82:84:d5:75:d4:dd:d7:8d:44:
75:d9:4f:0a:f9:41:62:b4:89:0f:80:b2:2c:c9:bd:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:C1:14:D4:76:20:FB:A7:3B:47:80:21:3C:A6:4D:15:11:91:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/196/0D53C114D47620FBA73B4780213CA64D15119194.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.101.0/24
Signature Algorithm: sha256WithRSAEncryption
56:93:6b:43:d9:4b:96:10:6b:3b:17:6f:79:1d:14:7a:8d:0d:
52:3b:28:2a:68:02:cf:02:0c:74:86:49:b8:26:ed:0c:2a:15:
4c:22:62:40:12:a9:80:2a:c8:09:c4:88:17:55:3a:19:37:28:
35:08:ab:97:ee:be:3a:f2:d8:26:6c:06:75:6d:7a:4d:1b:80:
2b:1f:04:6a:85:b1:52:e3:1b:95:c1:3c:13:69:05:fd:6e:82:
f6:6c:d2:f2:4b:24:09:b5:4e:e7:22:e5:d9:a8:9d:d0:33:ad:
eb:f2:b3:7c:80:4c:64:1c:76:f4:35:ef:0e:c4:09:23:77:c7:
e7:de:fd:9d:ea:d1:db:96:b9:a5:90:4b:73:a6:7f:30:c2:85:
f4:5c:8a:bb:6a:ff:7b:b2:c3:49:9b:c9:dd:de:17:ae:f6:ac:
a4:6a:82:be:da:56:05:d8:fd:5c:9a:80:2e:3e:a2:11:54:66:
3c:01:73:ef:5e:8c:ed:37:7e:76:f3:de:83:fb:e8:5b:53:08:
14:22:6f:26:7d:02:ff:8b:cb:29:5e:a6:2e:84:09:2a:b6:b3:
d9:22:ef:31:71:e1:36:b1:8d:13:53:8d:3c:94:72:b2:a4:d2:
77:47:e5:06:c3:42:25:f3:c8:d2:0d:f5:a1:f1:55:c7:6e:43:
56:46:82:81
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYciLOkGpf6S+vp+D4jo0VCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI3MDgyNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDUzYzExNGQ0NzYyMGZiYTczYjQ3ODAyMTNjYTY0ZDE1MTE5MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV1oehy1jnrNIng2ijw9F/HnKyRn
flG2jS/fE2J54XVAiNGh9G+YaZG6m20CQaOYeMhDx1vatBCORcqqzY96KiYWjvcS
zKES9wc11tH6m1c2Fv7tJaUvvpc4beRMPAMUOuoloxmCeIWW6FtCM2RvM0EZdLgC
pv6wUJChl/GPzt6kFrHBlEeTQFXX4mCF/RPcmi/XtvhaaZUxB78M5T4r1Hl64ag0
F62efqWJlzpzq+oIhOcdwneV9tvKuFlO0p5HYGzZSXqykRa7rlgkVBgWBRcxYTzO
xNg6IjR3CZMsNDZ5hs479fSChNV11N3XjUR12U8K+UFitIkPgLIsyb3JtQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFA1TwRTUdiD7pztHgCE8pk0VEZGUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFDBggrBgEFBQcBCwSCATUwggExMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcw
OGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBiOTlhZi8xOTYwgY4GCCsGAQUFBzAK
hoGBcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9m
ZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvMTk2LzBENTNDMTE0
RDQ3NjIwRkJBNzNCNDc4MDIxM0NBNjREMTUxMTkxOTQubWZ0MDwGCCsGAQUFBzAN
hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACSE2UwDQYJKoZIhvcNAQELBQADggEBAFaTa0PZS5YQazsXb3kdFHqNDVI7
KCpoAs8CDHSGSbgm7QwqFUwiYkASqYAqyAnEiBdVOhk3KDUIq5fuvjry2CZsBnVt
ek0bgCsfBGqFsVLjG5XBPBNpBf1ugvZs0vJLJAm1Tuci5dmondAzrevys3yATGQc
dvQ17w7ECSN3x+fe/Z3q0duWuaWQS3OmfzDChfRcirtq/3uyw0mbyd3eF672rKRq
gr7aVgXY/VyagC4+ohFUZjwBc+9ejO03fnbz3oP76FtTCBQibyZ9Av+Lyylepi6E
CSq2s9ki7zFx4TaxjRNTjTyUcrKk0ndH5QbDQiXzyNIN9aHxVcduQ1ZGgoE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:28:00 2024 by rpki-client on console-ams.rpki-client.org