Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-YDJHr8QlkYqK3RGncYctKOsPTI.cer
File: 1-YDJHr8QlkYqK3RGncYctKOsPTI.cer (raw, json)
Hash identifier: PKgI0WpXvaxDXa+fOgCnYy+5XHT31SUnVzsB1L7Si94=
Subject key identifier: F9:80:C9:1E:BF:10:96:46:2A:2B:74:46:9D:C6:1C:B4:A3:AC:3D:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B9582C88FFC8EB617CA47C53C3CA70CFC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Nov 2023 14:07:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.20.0/24
IP: 2a14:1500::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:82:c8:8f:fc:8e:b6:17:ca:47:c5:3c:3c:a7:0c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 3 14:07:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f980c91ebf1096462a2b74469dc61cb4a3ac3d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:ea:9d:59:8c:26:05:63:72:2c:b2:c7:c1:
91:d4:94:28:71:17:36:34:40:31:38:4f:b2:54:0f:
ed:25:20:31:5d:a5:79:2e:44:ee:83:9f:f9:4c:0a:
cd:74:6d:59:fb:af:4f:19:be:7e:11:e8:47:73:ae:
24:7f:c5:68:d8:ce:c9:ae:c2:2c:98:e3:c7:89:ae:
b0:69:47:6e:ac:3e:08:89:d7:1a:13:b5:8c:02:88:
66:ac:1b:07:83:6d:5a:6e:30:2a:2e:95:a6:09:96:
2b:fb:41:95:e5:91:35:d3:17:05:e8:19:3e:99:7d:
b7:8a:ec:a1:ac:90:3d:ab:83:62:b9:04:60:5a:9b:
f9:38:f2:4b:58:41:88:d4:c6:bd:df:fa:05:ed:f7:
5e:c3:00:5f:ad:e5:77:60:60:ce:b8:6d:34:a7:0e:
dd:54:f6:b4:a1:46:d1:26:15:d9:7b:1d:b4:76:35:
07:ee:e4:33:9a:95:8f:d3:30:cd:0b:6a:35:a1:87:
51:42:aa:bf:4b:d9:bf:44:64:cc:1e:8f:45:d3:76:
91:40:b5:46:e3:9b:75:41:5b:5b:ea:07:d2:87:e7:
69:f5:ca:76:9c:e2:b4:6d:e0:cb:d8:c5:bd:6b:fe:
40:1a:4d:a6:69:c6:a2:c2:bd:ba:2f:db:00:e4:27:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:80:C9:1E:BF:10:96:46:2A:2B:74:46:9D:C6:1C:B4:A3:AC:3D:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e0a8f4-864f-4cae-b4a8-a1e5ca179a75/1/1-YDJHr8QlkYqK3RGncYctKOsPTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.20.0/24
IPv6:
2a14:1500::/29
Signature Algorithm: sha256WithRSAEncryption
48:09:8d:bd:5a:33:50:be:75:11:2f:c8:87:86:91:6a:bf:48:
f4:a0:88:38:48:df:90:dc:83:98:69:84:57:96:4c:08:be:b4:
c3:33:71:e5:62:aa:c5:de:a3:c5:ed:a2:70:2e:f8:7f:1e:bb:
d8:f4:f6:68:23:89:6f:05:60:00:7b:b5:cf:d0:72:db:da:e0:
ee:e1:5e:ff:4a:e7:95:5b:05:70:fa:2e:42:9b:f5:51:fe:f2:
77:13:37:fd:32:4b:15:8f:99:62:96:86:5b:5b:79:16:62:c1:
a1:cd:d7:2c:fe:06:98:17:44:cd:5a:98:88:09:7c:24:74:bf:
eb:04:27:a8:c3:67:c1:94:16:70:c7:3a:b7:ad:68:00:3a:ac:
e3:29:e6:04:ed:5e:7b:16:cd:4f:f8:fd:cc:83:3c:37:f7:3c:
fc:32:08:80:15:99:dc:f4:72:b6:33:63:24:81:1e:4f:ef:b0:
6b:d8:1c:8e:15:6a:db:78:a3:55:d1:08:22:8d:6b:bd:d1:6c:
2c:6f:b2:b1:84:d3:01:79:78:f0:74:f0:6d:bd:d0:10:76:64:
fb:17:b5:cf:95:2a:ff:72:03:76:cd:c6:c4:0b:2b:25:1b:ce:
f5:63:40:39:57:41:aa:27:4e:51:0a:13:9a:70:20:36:dc:02:
46:cd:8f:dd
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYuVgsiP/I62F8pHxTw8pwz8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMTAzMTQwNzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTgwYzkxZWJmMTA5NjQ2MmEyYjc0NDY5ZGM2MWNiNGEzYWMzZDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNjqnVmMJgVjciyyx8GR1JQocRc2
NEAxOE+yVA/tJSAxXaV5LkTug5/5TArNdG1Z+69PGb5+EehHc64kf8Vo2M7JrsIs
mOPHia6waUdurD4IidcaE7WMAohmrBsHg21abjAqLpWmCZYr+0GV5ZE10xcF6Bk+
mX23iuyhrJA9q4NiuQRgWpv5OPJLWEGI1Ma93/oF7fdewwBfreV3YGDOuG00pw7d
VPa0oUbRJhXZex20djUH7uQzmpWP0zDNC2o1oYdRQqq/S9m/RGTMHo9F03aRQLVG
45t1QVtb6gfSh+dp9cp2nOK0beDL2MW9a/5AGk2macaiwr26L9sA5CfKkQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFPmAyR6/EJZGKit0Rp3GHLSjrD0yMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2UwYThm
NC04NjRmLTRjYWUtYjRhOC1hMWU1Y2ExNzlhNzUvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZTBhOGY0
LTg2NGYtNGNhZS1iNGE4LWExZTVjYTE3OWE3NS8xLzEtWURKSHI4UWxrWXFLM1JH
bmNZY3RLT3NQVEkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEAJITFDANBAIAAjAHAwUDKhQVADANBgkqhkiG
9w0BAQsFAAOCAQEASAmNvVozUL51ES/Ih4aRar9I9KCIOEjfkNyDmGmEV5ZMCL60
wzNx5WKqxd6jxe2icC74fx672PT2aCOJbwVgAHu1z9By29rg7uFe/0rnlVsFcPou
Qpv1Uf7ydxM3/TJLFY+ZYpaGW1t5FmLBoc3XLP4GmBdEzVqYiAl8JHS/6wQnqMNn
wZQWcMc6t61oADqs4ynmBO1eexbNT/j9zIM8N/c8/DIIgBWZ3PRytjNjJIEeT++w
a9gcjhVq23ijVdEIIo1rvdFsLG+ysYTTAXl48HTwbb3QEHZk+xe1z5Uq/3IDds3G
xAsrJRvO9WNAOVdBqidOUQoTmnAgNtwCRs2P3Q==
-----END CERTIFICATE-----
Generated at Thu Nov 23 14:39:32 2023 by rpki-client on console-fra.rpki-client.org