Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d_7xqHvytEtuu-iKhbdLDlR_a7M.cer
File: d_7xqHvytEtuu-iKhbdLDlR_a7M.cer (raw, json)
Hash identifier: cu9z+oHwdZbasXnAEDSYqrVnfPDPI9mB3Lp1g706M0Q=
Subject key identifier: 77:FE:F1:A8:7B:F2:B4:4B:6E:BB:E8:8A:85:B7:4B:0E:54:7F:6B:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222CC68A71673E23DAF09C110FD74EB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207/77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.93.201.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:c6:8a:71:67:3e:23:da:f0:9c:11:0f:d7:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77fef1a87bf2b44b6ebbe88a85b74b0e547f6bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:d2:41:67:e3:a9:92:06:28:5e:d7:df:bf:
1f:c8:18:a2:aa:b1:1e:50:6f:25:e4:e1:ef:06:c0:
16:e9:c6:6d:cc:5e:26:93:3b:91:33:9e:71:5e:ec:
7c:c7:7d:27:24:77:4b:a2:16:ae:c3:8e:77:48:3e:
41:6e:02:b8:14:8e:c1:44:c3:88:6c:2c:09:36:12:
4b:1c:c4:77:cc:d6:f2:92:ec:ec:58:ee:a8:29:ef:
5e:ec:43:65:f4:9d:e0:a0:1f:9a:1a:e2:50:17:c8:
36:19:0e:26:a6:19:8f:fa:37:11:32:85:c2:d4:e0:
2e:78:29:ec:01:6e:61:ac:a4:75:0b:2d:50:87:13:
42:01:d6:c5:44:cd:01:39:27:87:bb:ba:d4:5d:de:
b9:f3:80:c4:ab:ce:f1:01:f9:3b:29:77:45:c1:86:
79:10:0a:6e:97:4d:a6:8b:f7:f6:19:47:f3:96:fd:
07:d7:5b:d7:0e:77:a1:e4:9d:44:ae:13:c8:3d:da:
9d:e9:d8:ca:ab:a0:c2:b8:8c:02:4a:9a:ca:c6:59:
98:6b:ec:0e:fc:95:57:5f:74:99:5d:14:8f:39:bd:
eb:22:c6:c0:55:62:7b:87:f7:a2:37:56:04:3c:c1:
1d:ac:7d:c0:b3:cb:9d:74:a8:03:7b:ae:54:44:4e:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:F1:A8:7B:F2:B4:4B:6E:BB:E8:8A:85:B7:4B:0E:54:7F:6B:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/207/77FEF1A87BF2B44B6EBBE88A85B74B0E547F6BB3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0a:06:e4:cf:f6:78:34:1b:db:51:85:d0:01:83:fe:b1:71:
e5:ac:30:de:16:3e:41:e6:c7:f1:b2:9c:62:04:10:bc:6a:81:
9b:92:aa:6c:a4:56:a1:9d:24:18:f8:03:75:2d:6e:2e:4f:1b:
75:b2:a8:ce:48:77:76:a5:a0:4d:10:0a:42:4e:35:80:35:3f:
c3:09:df:ba:d0:49:89:b7:c1:5f:93:5e:cf:f1:39:ed:72:0a:
f9:3d:ca:6d:15:c0:a4:2a:22:75:b7:54:cb:37:e7:88:c5:68:
5d:33:36:0d:01:cf:0d:00:8d:d3:15:f4:bc:42:02:73:b9:4c:
e1:73:26:36:a3:d5:77:36:37:b6:08:34:78:af:0b:d4:06:f8:
e2:fd:fd:ae:6f:d0:ef:af:a0:6d:11:c0:dd:84:de:af:cd:09:
9a:fa:c4:e7:2c:ea:52:48:19:b1:2c:62:9f:30:e3:af:e6:33:
38:c9:82:ff:a8:22:a5:95:4c:46:0e:fb:53:8a:80:df:38:97:
74:ff:0f:51:9a:ca:bb:02:31:46:38:75:70:12:73:ca:50:f8:
e7:e7:7b:01:24:2c:98:75:cf:37:c1:d0:00:8d:14:c2:d7:b3:
a1:9c:2a:ca:41:be:91:3a:c6:0f:50:b1:bf:e9:4b:9c:51:c4:
f5:c5:69:a9
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYciLMaKcWc+I9rwnBEP106zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI3MDgyNjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2ZlZjFhODdiZjJiNDRiNmViYmU4OGE4NWI3NGIwZTU0N2Y2YmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg3SQWfjqZIGKF7X378fyBiiqrEe
UG8l5OHvBsAW6cZtzF4mkzuRM55xXux8x30nJHdLohauw453SD5BbgK4FI7BRMOI
bCwJNhJLHMR3zNbykuzsWO6oKe9e7ENl9J3goB+aGuJQF8g2GQ4mphmP+jcRMoXC
1OAueCnsAW5hrKR1Cy1QhxNCAdbFRM0BOSeHu7rUXd6584DEq87xAfk7KXdFwYZ5
EApul02mi/f2GUfzlv0H11vXDneh5J1ErhPIPdqd6djKq6DCuIwCSprKxlmYa+wO
/JVXX3SZXRSPOb3rIsbAVWJ7h/eiN1YEPMEdrH3As8uddKgDe65URE7jsQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFHf+8ah78rRLbrvoioW3Sw5Uf2uzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFDBggrBgEFBQcBCwSCATUwggExMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcw
OGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBiOTlhZi8yMDcwgY4GCCsGAQUFBzAK
hoGBcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9m
ZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvMjA3Lzc3RkVGMUE4
N0JGMkI0NEI2RUJCRTg4QTg1Qjc0QjBFNTQ3RjZCQjMubWZ0MDwGCCsGAQUFBzAN
hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABdXckwDQYJKoZIhvcNAQELBQADggEBAD4KBuTP9ng0G9tRhdABg/6xceWs
MN4WPkHmx/GynGIEELxqgZuSqmykVqGdJBj4A3Utbi5PG3WyqM5Id3aloE0QCkJO
NYA1P8MJ37rQSYm3wV+TXs/xOe1yCvk9ym0VwKQqInW3VMs354jFaF0zNg0Bzw0A
jdMV9LxCAnO5TOFzJjaj1Xc2N7YINHivC9QG+OL9/a5v0O+voG0RwN2E3q/NCZr6
xOcs6lJIGbEsYp8w46/mMzjJgv+oIqWVTEYO+1OKgN84l3T/D1GayrsCMUY4dXAS
c8pQ+OfnewEkLJh1zzfB0ACNFMLXs6GcKspBvpE6xg9Qsb/pS5xRxPXFaak=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:01 2024 by rpki-client on console-fra.rpki-client.org