Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-W26EwaKP4yKQ0BUYIA-rp3uul8.cer
File: 1-W26EwaKP4yKQ0BUYIA-rp3uul8.cer (raw, json)
Hash identifier: g1dfS/LCeuKgC702JlWFO8In64rvvGy3o8g9Ol2uPCM=
Subject key identifier: F9:6D:BA:13:06:8A:3F:8C:8A:43:40:54:60:80:3E:AE:9D:EE:BA:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FA2CD485F236AF4E86508D3D8B5EA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/fbae2d-76c0-425f-86bb-bee94a03a87a/1/1-W26EwaKP4yKQ0BUYIA-rp3uul8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/fbae2d-76c0-425f-86bb-bee94a03a87a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:35:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 16221
IP: 195.134.128.0/19
IP: 217.118.192.0/20
Validation: Failed, certificate revoked on Wed 29 Nov 2023 10:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:2c:d4:85:f2:36:af:4e:86:50:8d:3d:8b:5e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f96dba13068a3f8c8a43405460803eae9deeba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:c3:bc:a8:e7:8b:ef:5b:54:0c:02:c9:0c:
c9:8b:28:3b:8d:78:36:4b:93:67:d7:7e:ad:bd:c4:
8e:6d:a8:61:83:ef:a7:2e:40:2c:98:42:1a:1a:b6:
5b:3d:37:8a:01:77:8e:df:ac:97:37:9b:a6:0d:3c:
fb:ed:c8:80:6f:25:06:8e:78:0f:93:4e:7d:50:b3:
3e:98:56:18:66:86:d5:23:98:42:f8:e1:3e:4e:bd:
66:74:cd:3e:f9:2f:85:aa:19:d5:dd:89:7c:ea:f6:
3e:5d:27:2a:c0:82:19:27:75:73:1b:97:de:55:7a:
4f:a3:7a:f6:bf:69:55:32:4b:6a:11:cc:44:35:44:
ca:6e:80:63:80:3a:34:9e:ff:79:7a:df:bd:6d:39:
2d:ec:1f:2f:5d:63:cb:fa:ae:a7:b3:4a:d0:3c:ce:
c1:88:7c:59:f1:d0:5a:cf:a5:7d:c3:16:af:cf:95:
a9:9e:d6:b0:3b:46:f6:d9:45:20:9d:e9:20:03:4b:
79:fc:d2:f5:70:d8:b7:71:a4:a1:ff:51:f8:ec:a3:
66:7d:ea:e2:cf:9d:0f:c5:42:41:ba:98:23:8b:f2:
d1:32:3c:3e:a9:18:60:31:ca:fc:72:e6:57:05:50:
9e:9d:64:fc:d4:8f:a6:22:a4:1d:0c:0b:a5:59:6f:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6D:BA:13:06:8A:3F:8C:8A:43:40:54:60:80:3E:AE:9D:EE:BA:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fbae2d-76c0-425f-86bb-bee94a03a87a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fbae2d-76c0-425f-86bb-bee94a03a87a/1/1-W26EwaKP4yKQ0BUYIA-rp3uul8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.134.128.0/19
217.118.192.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16221
Signature Algorithm: sha256WithRSAEncryption
4c:54:f4:f4:a8:2e:98:86:20:44:e3:fb:10:01:79:58:27:21:
04:c8:ae:68:0d:ad:1c:26:51:24:08:e6:e1:61:aa:c4:e4:c3:
f2:51:18:3f:d8:37:38:c5:33:d8:0e:ef:50:10:64:43:08:35:
33:6d:07:96:af:92:3b:a2:fb:ee:9b:74:69:49:fa:ac:f4:f9:
c7:b8:c3:ba:b3:4a:a8:ff:07:12:43:c8:29:77:e7:a9:05:58:
11:d8:b8:99:6c:b2:13:2f:07:35:9b:97:99:7a:af:8b:e9:6c:
a0:e8:23:ea:23:04:fd:43:4e:9b:4c:e1:af:4c:c7:9b:56:62:
7b:46:f5:49:e4:c5:31:b7:95:70:c8:77:72:06:98:0f:c8:74:
5a:69:39:2e:02:c9:a9:a6:19:90:5f:ae:be:52:d9:b0:f8:c3:
31:8c:7d:d6:1f:87:d3:ef:6a:ca:c7:b3:96:29:7d:30:42:f2:
c5:09:0b:ed:96:85:e3:3d:a9:c9:89:ae:c6:a0:13:7d:d6:6d:
44:77:4e:10:2c:f2:47:6f:80:13:96:a1:7f:80:60:9f:a5:28:
8f:06:99:a9:86:a3:54:4d:0d:0e:d9:6a:8e:e3:42:4e:ba:e6:
52:a3:e1:4d:df:3d:0b:8e:b7:fc:6d:06:3e:47:7f:49:af:9d:
91:4d:3a:0b
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYVw+izUhfI2r06GUI09i16lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTZkYmExMzA2OGEzZjhjOGE0MzQwNTQ2MDgwM2VhZTlkZWViYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXnDvKjni+9bVAwCyQzJiyg7jXg2
S5Nn136tvcSObahhg++nLkAsmEIaGrZbPTeKAXeO36yXN5umDTz77ciAbyUGjngP
k059ULM+mFYYZobVI5hC+OE+Tr1mdM0++S+FqhnV3Yl86vY+XScqwIIZJ3VzG5fe
VXpPo3r2v2lVMktqEcxENUTKboBjgDo0nv95et+9bTkt7B8vXWPL+q6ns0rQPM7B
iHxZ8dBaz6V9wxavz5WpntawO0b22UUgnekgA0t5/NL1cNi3caSh/1H47KNmferi
z50PxUJBupgji/LRMjw+qRhgMcr8cuZXBVCenWT81I+mIqQdDAulWW+rOwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFPltuhMGij+MikNAVGCAPq6d7rpfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2ZiYWUy
ZC03NmMwLTQyNWYtODZiYi1iZWU5NGEwM2E4N2EvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvZmJhZTJk
LTc2YzAtNDI1Zi04NmJiLWJlZTk0YTAzYTg3YS8xLzEtVzI2RXdhS1A0eUtRMEJV
WUlBLXJwM3V1bDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEF
BQcBBwEB/wQWMBQwEgQCAAEwDAMEBcOGgAMEBNl2wDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgI/XTANBgkqhkiG9w0BAQsFAAOCAQEATFT09KgumIYgROP7EAF5WCch
BMiuaA2tHCZRJAjm4WGqxOTD8lEYP9g3OMUz2A7vUBBkQwg1M20Hlq+SO6L77pt0
aUn6rPT5x7jDurNKqP8HEkPIKXfnqQVYEdi4mWyyEy8HNZuXmXqvi+lsoOgj6iME
/UNOm0zhr0zHm1Zie0b1SeTFMbeVcMh3cgaYD8h0Wmk5LgLJqaYZkF+uvlLZsPjD
MYx91h+H0+9qysezlil9MELyxQkL7ZaF4z2pyYmuxqATfdZtRHdOECzyR2+AE5ah
f4Bgn6UojwaZqYajVE0NDtlqjuNCTrrmUqPhTd89C463/G0GPkd/Sa+dkU06Cw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:20 2024 by rpki-client on console-fra.rpki-client.org