Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pxSn2y1twSK1BmkRpdXQAQM3QpM.cer
File: pxSn2y1twSK1BmkRpdXQAQM3QpM.cer (raw, json)
Hash identifier: Z/DqaxzzHSLc1HwjXpwmYi38Tab3Zkmj1AqEIDlFUoo=
Subject key identifier: A7:14:A7:DB:2D:6D:C1:22:B5:06:69:11:A5:D5:D0:01:03:37:42:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D388F0C7166DFF6F8AE4FD7B7033D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/184/A714A7DB2D6DC122B5066911A5D5D00103374293.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/184
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.107.150.0/24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 11:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:38:8f:0c:71:66:df:f6:f8:ae:4f:d7:b7:03:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a714a7db2d6dc122b5066911a5d5d00103374293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:ec:d7:71:c5:d2:70:e0:5c:96:ab:b0:9c:
3b:01:7e:62:c4:4f:a3:b5:2e:e8:7b:cd:13:63:1e:
1e:0b:72:2f:a5:33:14:a9:7e:b3:29:94:87:20:bc:
19:94:2e:a2:e2:48:2e:c0:b5:db:e4:1c:e5:f3:8b:
9d:87:2f:dd:e1:0f:0d:ac:e7:82:bc:e3:a7:90:8b:
cd:22:f6:f2:86:34:f7:ed:e1:87:0b:49:71:7e:44:
16:69:b0:6c:b4:72:08:eb:47:47:14:4b:22:32:49:
7a:de:b0:94:0e:bc:d1:f0:7c:b7:28:00:65:45:d9:
25:2b:24:e1:65:84:92:a5:e8:d9:4a:7e:e1:52:9a:
fe:57:37:de:42:59:36:03:89:a0:82:b2:f2:db:ed:
b5:ec:c1:a3:38:6a:5a:37:e6:cc:04:4f:e0:20:6e:
7a:dc:5f:8d:29:10:72:97:8e:a7:7a:fc:fd:88:50:
69:22:4a:3f:21:b0:45:fe:3c:0a:7d:79:52:f6:e0:
00:e9:07:b4:70:29:55:41:38:1b:e2:e9:55:ed:32:
bd:db:69:85:17:2e:4f:f8:e5:a0:1f:8e:77:b7:90:
22:f6:7d:8b:69:b6:d8:95:13:4b:94:2e:46:09:ea:
e0:f8:a8:04:cc:3e:6d:c8:d2:8c:90:6d:99:a4:a8:
dd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:A7:DB:2D:6D:C1:22:B5:06:69:11:A5:D5:D0:01:03:37:42:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/184
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/184/A714A7DB2D6DC122B5066911A5D5D00103374293.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.150.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9f:ff:bf:74:aa:6d:1e:9d:de:4c:2b:53:dc:7a:95:ea:ce:
86:dc:bd:8c:a2:f5:9a:31:96:e2:02:21:55:9f:71:a9:e6:0a:
0f:fd:cc:76:34:03:f9:37:b8:b7:f3:77:53:49:37:aa:3e:fd:
3e:67:37:b3:df:68:a2:2d:3e:bf:27:5e:73:36:6c:0a:07:53:
30:1c:fd:92:71:48:39:4d:9e:a0:21:b0:0f:b0:a3:88:33:49:
62:61:bd:23:53:d8:9f:a1:e2:ab:97:03:86:43:b7:53:6f:dd:
f3:00:f7:08:91:f3:60:34:27:c1:28:ad:fe:8a:41:af:80:d2:
f4:db:97:b6:af:6d:32:7d:ad:f8:75:e9:4c:a5:f4:5e:88:4a:
3a:2d:b8:8d:cc:43:02:53:bb:b3:a7:53:78:68:5b:d1:88:5f:
f3:b3:50:05:13:21:25:af:f9:f6:ed:2e:f1:c6:e9:f4:1c:c7:
08:82:2d:15:f4:3b:88:be:44:b5:b6:64:97:db:5d:36:f2:83:
93:67:58:61:8e:dc:97:96:1c:cb:0e:8c:91:b1:6f:c3:bc:1f:
5d:d2:6a:e4:91:a1:5f:de:33:c9:b6:59:bf:ec:0d:89:ec:2a:
c1:e1:e5:c0:c3:f9:2c:0f:94:de:d4:f7:a3:46:e2:f7:f0:e5:
33:a3:55:5b
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYciLTiPDHFm3/b4rk/XtwM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI3MDgyNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzE0YTdkYjJkNmRjMTIyYjUwNjY5MTFhNWQ1ZDAwMTAzMzc0MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zs13HF0nDgXJarsJw7AX5ixE+j
tS7oe80TYx4eC3IvpTMUqX6zKZSHILwZlC6i4kguwLXb5Bzl84udhy/d4Q8NrOeC
vOOnkIvNIvbyhjT37eGHC0lxfkQWabBstHII60dHFEsiMkl63rCUDrzR8Hy3KABl
RdklKyThZYSSpejZSn7hUpr+VzfeQlk2A4mggrLy2+217MGjOGpaN+bMBE/gIG56
3F+NKRByl46nevz9iFBpIko/IbBF/jwKfXlS9uAA6Qe0cClVQTgb4ulV7TK922mF
Fy5P+OWgH453t5Ai9n2LabbYlRNLlC5GCerg+KgEzD5tyNKMkG2ZpKjdgwIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFKcUp9stbcEitQZpEaXV0AEDN0KTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFDBggrBgEFBQcBCwSCATUwggExMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcw
OGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBiOTlhZi8xODQwgY4GCCsGAQUFBzAK
hoGBcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9m
ZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvMTg0L0E3MTRBN0RC
MkQ2REMxMjJCNTA2NjkxMUE1RDVEMDAxMDMzNzQyOTMubWZ0MDwGCCsGAQUFBzAN
hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABta5YwDQYJKoZIhvcNAQELBQADggEBAG2f/790qm0end5MK1PcepXqzobc
vYyi9ZoxluICIVWfcanmCg/9zHY0A/k3uLfzd1NJN6o+/T5nN7PfaKItPr8nXnM2
bAoHUzAc/ZJxSDlNnqAhsA+wo4gzSWJhvSNT2J+h4quXA4ZDt1Nv3fMA9wiR82A0
J8Eorf6KQa+A0vTbl7avbTJ9rfh16Uyl9F6ISjotuI3MQwJTu7OnU3hoW9GIX/Oz
UAUTISWv+fbtLvHG6fQcxwiCLRX0O4i+RLW2ZJfbXTbyg5NnWGGO3JeWHMsOjJGx
b8O8H13SauSRoV/eM8m2Wb/sDYnsKsHh5cDD+SwPlN7U96NG4vfw5TOjVVs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:50 2024 by rpki-client on console-fra.rpki-client.org