Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer
File: Ss0tUZIrLhYS5fgsOU8tGYANHd8.cer (raw, json)
Hash identifier: Ks7xnHJySLokI8dgD/BUPnSYuPf3M7X38GrNeVBuJf4=
Subject key identifier: 4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018F80E9281B3DA50178E794F5E278D8484F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Thu 16 May 2024 10:18:34 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 80.75.221.0/24
IP: 2a03:e080::/29
Validation: Failed, certificate revoked on Thu 16 May 2024 13:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:e9:28:1b:3d:a5:01:78:e7:94:f5:e2:78:d8:48:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 10:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4acd2d51922b2e1612e5f82c394f2d19800d1ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:fd:a3:c1:d6:ee:1d:f9:c5:83:5a:87:59:
f1:8a:7c:7b:49:24:ca:bb:bf:5f:ee:35:65:58:25:
44:95:04:0b:cf:dc:c3:a4:d9:6a:b3:92:b3:c7:c2:
a0:8e:c1:fe:43:90:37:98:08:d2:53:e8:50:af:2f:
5c:e6:28:bf:cf:af:38:a3:78:25:ae:71:1c:c0:15:
ad:6d:71:dc:e4:d4:7d:6c:6d:c1:1c:59:d3:1f:c5:
c7:02:65:ab:de:90:38:c6:5a:39:46:02:da:8f:2f:
92:7b:49:66:b8:b6:21:f5:a8:7c:1e:6b:c4:9c:51:
a5:13:45:53:5f:62:89:88:05:c2:0d:25:3a:b4:de:
52:b2:23:1b:07:e0:94:08:d0:ed:34:2e:7b:4f:93:
cf:1a:5c:37:59:73:f6:6b:f6:13:11:ab:d2:dd:a8:
28:1c:50:de:97:21:cb:4d:4d:44:9b:f0:f2:08:2e:
e1:5a:f0:c8:f9:bc:98:a1:08:66:c4:3b:da:83:1d:
a9:35:5e:12:d9:74:4d:f0:d9:42:95:ef:1e:14:5a:
2b:7a:89:50:96:07:b2:68:47:c5:f5:75:8e:c8:6a:
94:34:5b:8f:c9:b1:85:15:fd:13:11:05:4d:ff:60:
9f:0d:a5:70:15:3f:dd:6e:cd:18:08:e5:4e:7d:8e:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:2D:51:92:2B:2E:16:12:E5:F8:2C:39:4F:2D:19:80:0D:1D:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/72e30f6f-a332-49ad-868e-f38ed3a72603/0/4ACD2D51922B2E1612E5F82C394F2D19800D1DDF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
IPv6:
2a03:e080::/29
Signature Algorithm: sha256WithRSAEncryption
9c:97:fe:32:2e:57:62:ad:64:d4:f8:8f:a6:8a:bc:42:31:5e:
9c:bf:33:5d:82:bf:c8:a4:d6:91:30:f2:75:4c:39:f8:98:0f:
80:ab:15:12:53:03:83:2a:8e:da:3f:1a:8b:9b:59:de:ce:5a:
9e:09:2c:6a:dd:6b:d1:88:13:44:15:65:af:25:ae:6b:53:94:
a8:34:ef:12:d9:8a:9f:2f:04:06:53:4f:9b:de:de:71:a1:5a:
37:04:b7:63:3a:84:d6:82:2b:a7:24:e8:0f:e6:a8:82:a8:1e:
db:81:f8:1f:30:b0:b3:f0:3d:93:fd:e8:5c:95:6c:63:46:98:
ef:9c:2b:37:e2:24:3c:6e:4c:a5:72:50:5d:07:a5:c0:b0:19:
d8:b8:c7:bc:9e:21:68:23:a3:a5:7d:e7:56:c7:b7:58:66:d5:
01:39:00:d2:26:b9:3a:22:0f:c1:11:ba:00:c7:da:47:ba:15:
3b:74:56:de:8c:34:db:6a:63:ff:4c:cb:06:7c:94:34:9b:1b:
61:5d:fe:07:c4:c6:1a:88:da:96:6d:03:fb:f3:ce:46:12:ad:
6a:92:b6:36:c0:fc:92:19:2d:e7:76:82:de:db:27:7f:b0:ae:
c8:f3:df:7e:5c:de:c2:9c:f1:90:d0:5a:93:40:bf:06:00:7d:
c8:1b:02:f5
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAY+A6SgbPaUBeOeU9eJ42EhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNTE2MTAxODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWNkMmQ1MTkyMmIyZTE2MTJlNWY4MmMzOTRmMmQxOTgwMGQxZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIn9o8HW7h35xYNah1nxinx7SSTK
u79f7jVlWCVElQQLz9zDpNlqs5Kzx8KgjsH+Q5A3mAjSU+hQry9c5ii/z684o3gl
rnEcwBWtbXHc5NR9bG3BHFnTH8XHAmWr3pA4xlo5RgLajy+Se0lmuLYh9ah8HmvE
nFGlE0VTX2KJiAXCDSU6tN5SsiMbB+CUCNDtNC57T5PPGlw3WXP2a/YTEavS3ago
HFDelyHLTU1Em/DyCC7hWvDI+byYoQhmxDvagx2pNV4S2XRN8NlCle8eFForeolQ
lgeyaEfF9XWOyGqUNFuPybGFFf0TEQVN/2CfDaVwFT/dbs0YCOVOfY4efwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFErNLVGSKy4WEuX4LDlPLRmADR3fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcyZTMw
ZjZmLWEzMzItNDlhZC04NjhlLWYzOGVkM2E3MjYwMy8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzJl
MzBmNmYtYTMzMi00OWFkLTg2OGUtZjM4ZWQzYTcyNjAzLzAvNEFDRDJENTE5MjJC
MkUxNjEyRTVGODJDMzk0RjJEMTk4MDBEMURERi5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME
AFBL3TANBAIAAjAHAwUDKgPggDANBgkqhkiG9w0BAQsFAAOCAQEAnJf+Mi5XYq1k
1PiPpoq8QjFenL8zXYK/yKTWkTDydUw5+JgPgKsVElMDgyqO2j8ai5tZ3s5angks
at1r0YgTRBVlryWua1OUqDTvEtmKny8EBlNPm97ecaFaNwS3YzqE1oIrpyToD+ao
gqge24H4HzCws/A9k/3oXJVsY0aY75wrN+IkPG5MpXJQXQelwLAZ2LjHvJ4haCOj
pX3nVse3WGbVATkA0ia5OiIPwRG6AMfaR7oVO3RW3ow022pj/0zLBnyUNJsbYV3+
B8TGGojalm0D+/PORhKtapK2NsD8khkt53aC3tsnf7CuyPPfflzewpzxkNBak0C/
BgB9yBsC9Q==
-----END CERTIFICATE-----
Generated at Thu May 16 17:49:04 2024 by rpki-client on console-fra.rpki-client.org