Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
File: 1-rZ0NK_FlhgEaCihNefn0MftjJo.cer (raw, json)
Hash identifier: AA4QcBRp+Ek/oHjdrjM0hOn17FCWGV/yvBRQjLgRqPM=
Subject key identifier: FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD11631344EBAB35BA5F7982EE368E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 62267
IP: 185.41.228.0/22
IP: 2a01:56a0::/32
Validation: Failed, certificate revoked on Mon 19 Jun 2023 09:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:16:31:34:4e:ba:b3:5b:a5:f7:98:2e:e3:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:69:2f:7b:4f:00:5b:87:08:90:f7:5f:e9:
9d:bd:9c:39:3a:e0:89:87:c7:6f:a7:f7:30:e1:44:
0f:63:c9:7f:18:1f:ea:21:8b:c4:4f:d4:14:87:fd:
36:44:53:df:d6:03:b0:1f:44:e9:6c:49:0a:45:68:
60:de:84:0b:5a:ce:62:d4:50:ce:7e:ad:f5:bf:1e:
7b:26:5c:38:2b:c1:ce:1a:2e:d2:87:a2:3f:17:5c:
b4:71:f8:a6:33:61:ed:16:96:20:f6:e7:62:8c:5f:
ed:e0:4c:7c:4d:50:62:54:f8:fe:38:11:c7:74:df:
41:91:36:bf:3a:a6:e5:74:a2:ad:d4:19:06:47:c8:
40:ae:69:17:6d:31:38:68:15:6f:6e:a8:e6:73:87:
f1:01:69:78:6c:d1:7a:a5:e8:1d:bf:bd:26:10:a0:
a9:c4:51:a6:b3:4e:44:85:cf:95:93:b0:00:9e:28:
26:05:28:f0:c5:6b:4b:3d:4e:c1:f6:d5:1b:96:8e:
eb:a6:5f:37:79:95:c2:02:e7:06:f3:43:3a:c8:96:
d7:9a:d3:16:55:c7:a1:56:32:09:06:ee:3a:6d:ef:
c3:c7:16:61:51:44:ce:c5:da:62:56:ce:bb:ee:d3:
7a:07:d6:6a:45:51:e5:5e:75:ce:45:66:c6:58:7c:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.228.0/22
IPv6:
2a01:56a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62267
Signature Algorithm: sha256WithRSAEncryption
86:78:08:e5:af:a9:d0:d5:34:07:01:07:1f:bc:75:06:fb:07:
d7:d3:6e:e8:cd:57:e1:b3:81:7d:95:6a:9b:76:a7:a1:1b:e9:
11:13:f8:a0:bf:ee:7d:5b:27:07:1a:2f:4e:32:8a:99:bb:a0:
53:a4:2d:4e:a6:4b:7d:94:3f:16:b9:d9:0c:61:92:0d:99:7f:
45:00:86:49:d3:14:09:f3:ce:f6:bb:ec:27:20:d5:e2:66:67:
71:0a:da:26:37:d5:ba:70:90:df:69:7a:cb:2d:42:40:22:b7:
98:cf:14:be:2c:d4:c3:4c:6e:1a:eb:d0:13:ad:34:87:30:0e:
0f:88:d2:b4:cd:55:57:84:60:66:90:36:0f:cc:dc:b9:f6:16:
5f:fb:c5:c9:80:8d:9d:7e:ce:6b:cc:29:e1:28:aa:ef:c2:ce:
12:2e:ba:21:2f:d0:8f:5b:21:8b:ac:de:e5:01:f5:e9:73:07:
eb:28:c3:76:d4:cf:8d:5c:73:dc:4d:4d:36:01:c1:aa:36:52:
02:c6:f7:3a:bc:e3:28:2b:dd:c8:3e:60:60:b8:ad:20:f5:c3:
b4:00:2f:bc:22:7c:ca:69:a3:73:2c:e4:1e:7d:4a:8b:5b:81:
53:3a:50:80:98:27:3c:e3:1c:fb:3f:31:a7:37:7b:d4:25:14:
5f:cc:a2:d8
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYVr0RYxNE66s1ul95gu42jlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWI2NzQzNGFmYzU5NjE4MDQ2ODI4YTEzNWU3ZTdkMGM3ZWQ4YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaBpL3tPAFuHCJD3X+mdvZw5OuCJ
h8dvp/cw4UQPY8l/GB/qIYvET9QUh/02RFPf1gOwH0TpbEkKRWhg3oQLWs5i1FDO
fq31vx57Jlw4K8HOGi7Sh6I/F1y0cfimM2HtFpYg9udijF/t4Ex8TVBiVPj+OBHH
dN9BkTa/OqbldKKt1BkGR8hArmkXbTE4aBVvbqjmc4fxAWl4bNF6pegdv70mEKCp
xFGms05Ehc+Vk7AAnigmBSjwxWtLPU7B9tUblo7rpl83eZXCAucG80M6yJbXmtMW
VcehVjIJBu46be/DxxZhUUTOxdpiVs677tN6B9ZqRVHlXnXORWbGWHzgdQIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFPq2dDSvxZYYBGgooTXn59DH7YyaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzAwNGIy
Ny05ZTcwLTQ0NjYtOGEzMi1hMzMwYzc2NDA2ODIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMDA0YjI3
LTllNzAtNDQ2Ni04YTMyLWEzMzBjNzY0MDY4Mi8xLzEtclowTktfRmxoZ0VhQ2lo
TmVmbjBNZnRqSm8ubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEF
BQcBBwEB/wQfMB0wDAQCAAEwBgMEArkp5DANBAIAAjAHAwUAKgFWoDAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMA8zswDQYJKoZIhvcNAQELBQADggEBAIZ4COWvqdDV
NAcBBx+8dQb7B9fTbujNV+GzgX2Vapt2p6Eb6RET+KC/7n1bJwcaL04yipm7oFOk
LU6mS32UPxa52Qxhkg2Zf0UAhknTFAnzzva77Ccg1eJmZ3EK2iY31bpwkN9pesst
QkAit5jPFL4s1MNMbhrr0BOtNIcwDg+I0rTNVVeEYGaQNg/M3Ln2Fl/7xcmAjZ1+
zmvMKeEoqu/CzhIuuiEv0I9bIYus3uUB9elzB+sow3bUz41cc9xNTTYBwao2UgLG
9zq84ygr3cg+YGC4rSD1w7QAL7wifMppo3Ms5B59SotbgVM6UICYJzzjHPs/Mac3
e9QlFF/Motg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:46 2024 by rpki-client on console-ams.rpki-client.org