Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
File: 0romGKtLYELuJcRnngd15DBtccY.cer (raw, json)
Hash identifier: 35RJ3u7wxRs0KFCcp6cQi6O/rjWsFGXW6vuKse01cw8=
Subject key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801F0A66D1FACDF79F050E29B91138C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.145.176.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:f0:a6:6d:1f:ac:df:79:f0:50:e2:9b:91:13:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:44:82:2c:fd:7f:76:4f:48:13:3f:77:57:
dd:6b:85:30:04:2c:64:a8:4e:73:35:15:0c:da:63:
d7:67:a6:10:1a:06:f9:c3:55:70:38:56:9c:f0:31:
60:0e:f0:b6:e7:ad:58:f0:b8:43:d9:1a:70:5a:5d:
84:bd:22:39:97:79:19:77:8a:bc:00:9a:20:16:05:
29:d2:38:ab:05:7a:7e:5b:e5:95:04:61:60:ff:be:
30:1f:21:89:34:18:0c:95:85:0a:3f:97:ca:ac:24:
aa:3a:a0:d0:67:6e:0d:8e:44:f7:8f:6e:2a:c9:08:
fe:32:cc:35:80:d9:f5:af:f6:c0:d3:51:91:0a:1c:
15:fa:9a:fb:bf:a4:a5:e9:f2:d7:0c:fb:40:03:be:
f4:6f:15:90:a4:db:5d:46:5c:0b:66:e3:51:06:c1:
02:60:ef:09:e5:80:c6:c1:f4:e9:3e:9e:f2:7f:f0:
bb:df:5e:a4:94:26:a2:38:74:56:5f:09:9c:98:4a:
b4:77:b4:28:be:a3:4a:da:e0:c4:7b:2c:a1:16:5f:
28:d3:60:49:2e:db:71:90:6d:58:0f:d1:70:0c:99:
c0:ca:69:e4:ad:fe:77:56:7a:e0:43:af:fd:3a:14:
22:fc:ea:f1:60:46:54:2c:5e:de:ae:2b:c1:57:3d:
46:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.176.0/22
Signature Algorithm: sha256WithRSAEncryption
47:4f:30:43:a2:2d:66:da:0d:a6:a7:1e:c6:19:c3:d8:20:b0:
cb:21:08:f9:fe:0a:6f:65:af:f5:30:30:5b:44:59:a5:3d:47:
42:e3:ca:e1:28:88:f6:b4:71:b1:09:5a:2b:35:28:fe:2f:6c:
bd:a3:1a:1b:c3:4e:f7:e0:1d:b8:ec:50:29:52:7b:66:68:fb:
64:fd:68:44:7e:26:da:fa:8a:f5:8c:9a:ff:2e:96:c2:2d:5c:
5e:f8:ad:42:76:7e:eb:1d:f1:63:70:55:0d:a3:07:a0:98:cd:
1d:4a:d2:6e:89:03:10:a3:61:5d:95:aa:22:62:f7:d6:10:06:
b1:72:83:38:e7:46:f9:e9:6d:94:2b:e4:23:f5:1f:3c:77:ca:
e0:53:73:b4:d8:48:0e:89:7e:64:e9:fa:b8:c2:52:5a:fe:ca:
65:c4:eb:45:7f:3a:96:ca:b4:eb:43:87:41:3f:c2:4c:a6:21:
cb:69:05:e2:e9:b7:bc:f5:e9:49:ac:0a:a8:66:4a:e4:08:04:
c5:35:0c:fa:a9:ca:49:87:60:d7:5e:43:87:9e:9c:14:78:61:
02:b2:dc:c2:f2:49:13:15:67:09:43:3c:3b:16:ed:a3:a1:c0:
94:10:2d:0f:26:66:31:66:23:83:c3:d0:33:76:19:4f:fb:55:
03:c7:55:71
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAfCmbR+s33nwUOKbkROMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmJhMjYxOGFiNGI2MDQyZWUyNWM0Njc5ZTA3NzVlNDMwNmQ3MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzFEgiz9f3ZPSBM/d1fda4UwBCxk
qE5zNRUM2mPXZ6YQGgb5w1VwOFac8DFgDvC2561Y8LhD2RpwWl2EvSI5l3kZd4q8
AJogFgUp0jirBXp+W+WVBGFg/74wHyGJNBgMlYUKP5fKrCSqOqDQZ24NjkT3j24q
yQj+Msw1gNn1r/bA01GRChwV+pr7v6Sl6fLXDPtAA770bxWQpNtdRlwLZuNRBsEC
YO8J5YDGwfTpPp7yf/C7316klCaiOHRWXwmcmEq0d7QovqNK2uDEeyyhFl8o02BJ
LttxkG1YD9FwDJnAymnkrf53VnrgQ6/9OhQi/OrxYEZULF7erivBVz1GVwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNK6JhirS2BC7iXEZ54HdeQwbXHGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2E2Nzk5
Ni01NGYxLTRmMWUtYTc2MC04ZTBkNTI5M2FhYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvYTY3OTk2
LTU0ZjEtNGYxZS1hNzYwLThlMGQ1MjkzYWFjOC8xLzByb21HS3RMWUVMdUpjUm5u
Z2QxNURCdGNjWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLZGwMA0GCSqGSIb3DQEBCwUAA4IBAQBHTzBD
oi1m2g2mpx7GGcPYILDLIQj5/gpvZa/1MDBbRFmlPUdC48rhKIj2tHGxCVorNSj+
L2y9oxobw0734B247FApUntmaPtk/WhEfiba+or1jJr/LpbCLVxe+K1Cdn7rHfFj
cFUNowegmM0dStJuiQMQo2FdlaoiYvfWEAaxcoM450b56W2UK+Qj9R88d8rgU3O0
2EgOiX5k6fq4wlJa/splxOtFfzqWyrTrQ4dBP8JMpiHLaQXi6be89elJrAqoZkrk
CATFNQz6qcpJh2DXXkOHnpwUeGECstzC8kkTFWcJQzw7Fu2jocCUEC0PJmYxZiOD
w9AzdhlP+1UDx1Vx
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:36 2024 by rpki-client on console-fra.rpki-client.org