Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cIndygkcCuNALrJTH3f-Y6AmJ2M.cer
File: cIndygkcCuNALrJTH3f-Y6AmJ2M.cer (raw, json)
Hash identifier: snfaCIfcYe/ZM1Cw3zwlnY1ZjMMp9LmF1Ws16aXSRYU=
Subject key identifier: 70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1AC5B61DFC07B54329FF0F35E56906
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.93.117.0/24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:53:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:c5:b6:1d:fc:07:b5:43:29:ff:0f:35:e5:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7089ddca091c0ae3402eb2531f77fe63a0262763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:22:45:dc:6a:4f:d2:90:25:d3:e5:52:e5:
30:b7:0c:54:24:f3:82:95:e0:2b:21:4f:c6:56:2d:
58:26:9b:94:e3:35:23:8e:37:13:cf:a2:bd:10:b5:
2e:3a:96:70:ff:34:3d:6d:e3:ee:17:bc:47:88:78:
80:de:1d:3e:8a:04:83:59:74:ce:56:8a:f6:49:c8:
62:7d:48:60:82:27:76:4c:a0:8e:aa:b0:ff:ee:6c:
6c:83:9d:a8:fd:98:e6:0e:1b:2e:b2:f8:11:ca:21:
dc:c5:8f:05:bf:1a:99:41:28:f9:a2:fb:a3:04:a5:
74:72:a4:e5:49:0a:38:0e:38:8b:99:5c:52:0b:3f:
c6:e1:06:80:3e:7f:17:f6:04:fb:8e:8e:00:e6:03:
5c:31:56:2b:fa:f0:af:6b:92:75:4e:37:60:4e:56:
11:3c:98:34:0b:c4:89:18:bd:00:79:72:5b:ff:b7:
cc:b4:cf:69:3a:af:4d:d9:20:37:4b:31:11:06:cd:
55:c4:2f:40:e5:b9:60:fb:70:e7:b2:f0:09:96:b7:
bf:92:8d:44:e1:5f:06:04:b8:df:a9:28:b1:41:da:
22:ed:88:ff:33:6e:c2:61:16:5c:02:ee:ca:23:99:
81:6a:74:2b:15:87:af:6a:e7:3b:3c:6c:1a:0f:55:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:DD:CA:09:1C:0A:E3:40:2E:B2:53:1F:77:FE:63:A0:26:27:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3dcb72-aae1-4603-80bb-2d69004db3bb/1/cIndygkcCuNALrJTH3f-Y6AmJ2M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.117.0/24
Signature Algorithm: sha256WithRSAEncryption
28:3d:91:73:38:56:f3:cc:f5:42:ec:9b:30:e4:f5:cb:28:d5:
d5:44:7d:14:6d:7c:06:75:bb:80:e8:71:7f:14:c9:d3:94:c2:
14:9d:2d:10:7f:73:18:24:9b:27:7b:9f:63:88:c8:31:7a:9d:
ca:77:08:0b:14:06:19:3d:37:e0:c6:08:05:61:fa:12:5d:35:
9b:a0:b1:50:93:d8:3d:b4:10:7d:7e:73:39:01:04:85:b0:46:
6b:42:45:e1:b2:02:f3:96:09:37:3d:9b:28:ab:65:56:90:76:
80:cf:39:33:7d:bc:00:64:10:b5:52:51:7e:41:40:5b:89:0c:
4a:0f:58:76:e8:4e:df:35:a8:06:81:82:06:b1:f0:bd:46:c9:
e5:4c:f8:68:6a:0d:55:75:f6:cc:41:42:92:07:a7:a1:1c:05:
45:a2:90:cb:40:12:98:d7:a4:a3:51:a6:a0:59:d2:b1:10:ee:
20:92:df:f2:e2:75:4d:fa:d7:40:29:9d:35:90:41:7c:4e:9f:
82:90:d3:1d:74:e2:07:ef:ea:9b:8d:28:e6:db:1a:2a:78:63:
b1:60:e5:bb:ea:1e:d8:1b:bd:5a:03:f0:ac:ef:7e:f8:92:93:
bf:e3:f1:89:5e:d0:3e:6f:8f:36:2c:9c:b0:50:c7:03:cb:e4:
58:9b:7a:22
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVtGsW2HfwHtUMp/w815WkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDg5ZGRjYTA5MWMwYWUzNDAyZWIyNTMxZjc3ZmU2M2EwMjYyNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobciRdxqT9KQJdPlUuUwtwxUJPOC
leArIU/GVi1YJpuU4zUjjjcTz6K9ELUuOpZw/zQ9bePuF7xHiHiA3h0+igSDWXTO
Vor2SchifUhggid2TKCOqrD/7mxsg52o/ZjmDhsusvgRyiHcxY8FvxqZQSj5ovuj
BKV0cqTlSQo4DjiLmVxSCz/G4QaAPn8X9gT7jo4A5gNcMVYr+vCva5J1TjdgTlYR
PJg0C8SJGL0AeXJb/7fMtM9pOq9N2SA3SzERBs1VxC9A5blg+3DnsvAJlre/ko1E
4V8GBLjfqSixQdoi7Yj/M27CYRZcAu7KI5mBanQrFYevauc7PGwaD1UkgQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHCJ3coJHArjQC6yUx93/mOgJidjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzNkY2I3
Mi1hYWUxLTQ2MDMtODBiYi0yZDY5MDA0ZGIzYmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvM2RjYjcy
LWFhZTEtNDYwMy04MGJiLTJkNjkwMDRkYjNiYi8xL2NJbmR5Z2tjQ3VOQUxySlRI
M2YtWTZBbUoyTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAvF11MA0GCSqGSIb3DQEBCwUAA4IBAQAoPZFz
OFbzzPVC7Jsw5PXLKNXVRH0UbXwGdbuA6HF/FMnTlMIUnS0Qf3MYJJsne59jiMgx
ep3KdwgLFAYZPTfgxggFYfoSXTWboLFQk9g9tBB9fnM5AQSFsEZrQkXhsgLzlgk3
PZsoq2VWkHaAzzkzfbwAZBC1UlF+QUBbiQxKD1h26E7fNagGgYIGsfC9RsnlTPho
ag1VdfbMQUKSB6ehHAVFopDLQBKY16SjUaagWdKxEO4gkt/y4nVN+tdAKZ01kEF8
Tp+CkNMddOIH7+qbjSjm2xoqeGOxYOW76h7YG71aA/Cs7374kpO/4/GJXtA+b482
LJywUMcDy+RYm3oi
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:11 2024 by rpki-client on console-ams.rpki-client.org