Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-XTMLa_y8jSHnXlVe1U73iqxCDY.cer
File: 1-XTMLa_y8jSHnXlVe1U73iqxCDY.cer (raw, json)
Hash identifier: e2T/B2W4qJnXdqSGcHNWWeJbVM8qZFTzVqlmjAtDxpU=
Subject key identifier: F9:74:CC:2D:AF:F2:F2:34:87:9D:79:55:7B:55:3B:DE:2A:B1:08:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018783FC039BF7FC23067815BA77E7F181D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/1-XTMLa_y8jSHnXlVe1U73iqxCDY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 15 Apr 2023 08:15:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 198283
IP: 194.8.4.0/24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 09:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:83:fc:03:9b:f7:fc:23:06:78:15:ba:77:e7:f1:81:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 15 08:15:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f974cc2daff2f234879d79557b553bde2ab10836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:5e:54:f4:9b:d6:4c:4d:9c:24:c2:96:0c:
ea:22:41:78:4b:74:f1:3c:1c:93:f2:77:d8:9c:0f:
dc:f2:fb:ff:53:ed:44:25:8f:1e:7f:8e:a7:bd:af:
e8:dd:a9:d8:bf:6c:42:d4:85:e7:4a:9a:0b:20:83:
03:23:7b:16:e6:82:95:c9:bc:1a:04:1c:64:cc:ad:
5e:f8:49:77:e9:71:41:b0:fe:92:35:8a:79:71:67:
90:23:9d:07:9d:13:8b:49:8f:b4:50:61:19:7a:d7:
b4:8d:b8:c5:c8:da:a8:7b:92:73:8f:8e:69:d5:29:
21:ee:ab:03:b8:f9:a8:53:28:b6:2c:da:be:38:65:
57:90:0b:68:a4:f0:f2:53:55:70:4b:d7:ac:eb:fb:
b2:22:58:af:cc:7e:09:f8:dc:d0:ea:b2:16:cc:48:
04:c3:86:44:f3:c5:60:d2:fc:87:03:b4:64:56:f4:
c8:82:e7:5e:bd:40:9f:7f:17:18:26:20:9d:21:b5:
f6:1b:fb:79:d8:77:41:90:9f:92:dc:47:10:7c:ae:
11:5d:25:f3:5a:d7:56:cc:fa:ac:bd:99:ca:ac:b9:
d9:3b:89:c8:16:52:2c:7c:3a:14:b4:60:1e:df:20:
ff:9c:b3:b2:12:64:34:0e:ef:02:b3:0a:79:d6:88:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:CC:2D:AF:F2:F2:34:87:9D:79:55:7B:55:3B:DE:2A:B1:08:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/1-XTMLa_y8jSHnXlVe1U73iqxCDY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.4.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198283
Signature Algorithm: sha256WithRSAEncryption
65:61:2b:d0:51:85:3f:66:61:65:bf:33:2c:86:1f:5a:3e:d3:
a2:e9:9a:50:4a:22:54:0a:5c:b1:1a:37:b0:52:6c:13:a2:68:
4c:52:86:f3:a6:17:b5:ad:c2:2f:ed:1c:3d:80:0c:da:80:93:
5d:c7:54:73:51:03:48:ea:88:88:62:04:6c:57:25:5e:d1:54:
5c:87:9e:89:96:3f:8b:b7:94:a5:e6:c2:e5:4d:64:74:45:80:
03:35:f8:fa:de:8e:c5:df:a3:d3:d6:eb:a0:ea:e9:48:8c:00:
eb:09:d7:b0:f0:91:a0:1e:33:da:48:fe:df:f3:71:ee:8a:f3:
4a:54:ca:0a:cf:32:9f:e7:47:df:6f:10:1c:d9:21:79:61:b7:
5f:64:75:b0:85:65:51:c8:9c:1c:20:63:c5:27:50:ec:e5:3c:
01:d6:84:c6:2d:fb:30:32:fd:40:20:e1:42:db:4a:b6:bd:36:
3e:d7:d1:37:8e:71:ee:f2:d5:d0:9c:aa:35:db:93:c4:19:4f:
f7:80:4c:50:2a:8d:00:33:a9:a9:47:2e:b8:f0:61:62:b0:82:
85:29:7d:d8:60:c0:16:49:2b:96:45:87:2a:5d:4f:68:91:52:
77:c1:04:85:60:3b:aa:90:3d:40:45:fe:dc:bd:22:77:b4:3a:
4c:d8:60:55
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYeD/AOb9/wjBngVunfn8YHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDE1MDgxNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc0Y2MyZGFmZjJmMjM0ODc5ZDc5NTU3YjU1M2JkZTJhYjEwODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljdeVPSb1kxNnCTClgzqIkF4S3Tx
PByT8nfYnA/c8vv/U+1EJY8ef46nva/o3anYv2xC1IXnSpoLIIMDI3sW5oKVybwa
BBxkzK1e+El36XFBsP6SNYp5cWeQI50HnROLSY+0UGEZete0jbjFyNqoe5Jzj45p
1Skh7qsDuPmoUyi2LNq+OGVXkAtopPDyU1VwS9es6/uyIlivzH4J+NzQ6rIWzEgE
w4ZE88Vg0vyHA7RkVvTIgudevUCffxcYJiCdIbX2G/t52HdBkJ+S3EcQfK4RXSXz
WtdWzPqsvZnKrLnZO4nIFlIsfDoUtGAe3yD/nLOyEmQ0Du8Cswp51ojTJwIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFPl0zC2v8vI0h515VXtVO94qsQg2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzhhNTg4
OC1mYmU2LTQ3OGUtYmE3Yi03MTlhMDNhNTlkYjkvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvOGE1ODg4
LWZiZTYtNDc4ZS1iYTdiLTcxOWEwM2E1OWRiOS8xLzEtWFRNTGFfeThqU0huWGxW
ZTFVNzNpcXhDRFkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIIBDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDBoswDQYJKoZIhvcNAQELBQADggEBAGVhK9BRhT9mYWW/MyyGH1o+06LpmlBK
IlQKXLEaN7BSbBOiaExShvOmF7Wtwi/tHD2ADNqAk13HVHNRA0jqiIhiBGxXJV7R
VFyHnomWP4u3lKXmwuVNZHRFgAM1+PrejsXfo9PW66Dq6UiMAOsJ17DwkaAeM9pI
/t/zce6K80pUygrPMp/nR99vEBzZIXlht19kdbCFZVHInBwgY8UnUOzlPAHWhMYt
+zAy/UAg4ULbSra9Nj7X0TeOce7y1dCcqjXbk8QZT/eATFAqjQAzqalHLrjwYWKw
goUpfdhgwBZJK5ZFhypdT2iRUnfBBIVgO6qQPUBF/ty9Ine0OkzYYFU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:20 2024 by rpki-client on console-fra.rpki-client.org