Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Ix1EFoTEp1S6ifiUVlcvrD4pko.cer
File: 1Ix1EFoTEp1S6ifiUVlcvrD4pko.cer (raw, json)
Hash identifier: tmCjc/k1mvYzjwgVvuKz+ATWFbcu2kgTMQrWpe9qs/o=
Subject key identifier: D4:8C:75:10:5A:13:12:9D:52:EA:27:E2:51:59:5C:BE:B0:F8:A6:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF0CFA0CE268CC2B8D84D168948B9B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.195.138.0/23
Validation: Failed, certificate revoked on Mon 27 Feb 2023 10:48:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:0c:fa:0c:e2:68:cc:2b:8d:84:d1:68:94:8b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d48c75105a13129d52ea27e251595cbeb0f8a64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:6e:cc:5e:86:d6:86:3b:d2:56:9e:98:98:
24:14:78:28:b4:28:62:b7:d7:fd:db:9e:d0:32:84:
6a:6f:b0:4d:9f:83:df:10:97:20:31:da:2c:99:9b:
a6:0a:0a:15:b5:cb:2a:7e:cd:76:fe:c4:92:c0:32:
6e:de:6e:47:c5:ef:60:1f:c7:4f:18:68:45:80:8b:
58:81:5c:43:c3:21:54:10:dd:c8:d2:a7:73:48:28:
b2:76:01:55:72:1f:c7:79:57:13:0b:39:9a:d5:ba:
6d:76:b9:71:88:28:08:5c:be:f2:0e:bc:61:50:6f:
16:d7:0e:db:00:e8:90:61:b8:87:d1:9e:5f:00:d8:
20:64:09:ee:38:9e:48:f8:4e:17:a2:4b:22:87:29:
ec:0d:34:fd:ce:53:a1:1d:e1:19:14:b4:36:73:11:
7e:2b:0e:0e:af:c5:f6:c5:f8:7a:62:5d:15:66:49:
d8:38:49:86:a8:3d:57:5e:ed:7c:be:d5:a8:31:73:
dd:6d:fa:8f:01:fb:bf:9c:ca:65:b8:67:83:84:9b:
53:3d:38:85:cd:3b:22:40:fb:12:94:6b:a4:d6:b6:
7e:a4:0b:a3:e5:3a:c2:79:a6:b8:46:c0:28:ff:94:
c8:11:eb:91:c0:25:2f:5b:1d:36:23:a7:be:6d:dd:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:75:10:5A:13:12:9D:52:EA:27:E2:51:59:5C:BE:B0:F8:A6:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a370c1-b2f6-4048-ae6c-8abcc15a999a/1/1Ix1EFoTEp1S6ifiUVlcvrD4pko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.138.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f4:7f:dd:84:7c:28:15:4c:96:bb:fa:a5:a5:e6:04:aa:9f:
78:c9:26:5f:66:d8:98:f6:9e:d2:0e:83:b6:ab:f1:e5:4c:bd:
ee:f8:22:0a:4d:a4:97:f8:cb:fd:08:9a:8d:76:c5:d5:ba:22:
82:49:2f:05:3a:3a:53:10:fe:eb:b7:d3:69:83:79:38:24:d8:
d9:7b:e2:5f:31:9b:3d:c3:dd:e8:df:1a:a3:90:97:a7:74:cb:
cf:c3:e3:c9:6c:72:f9:15:41:6d:c8:e2:11:ee:a7:4d:11:4f:
27:7e:6e:f7:a3:3b:f1:e0:57:e0:0f:1c:4b:b2:c5:9c:d5:61:
91:5a:ab:97:3f:0d:e8:bd:47:c9:72:62:3b:2e:4f:f7:29:84:
c1:56:a6:d7:93:c5:6b:7d:31:84:a2:90:e0:1f:c2:10:cd:ce:
f1:74:05:04:79:39:fd:41:af:b3:a7:62:a5:66:65:c8:d5:51:
4a:5b:c4:e6:9d:a3:a8:ad:3d:b6:ef:7d:60:4b:aa:2a:cc:13:
eb:6b:92:4e:35:2e:06:59:a9:85:62:51:a8:8f:da:16:16:38:
3c:06:ed:5d:86:39:03:0f:32:9d:a8:ce:38:4a:f6:2a:8b:72:
e1:df:34:01:86:38:71:a3:4e:1d:60:97:b2:9e:00:06:11:f4:
8b:13:02:6c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvrwz6DOJozCuNhNFolIubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDhjNzUxMDVhMTMxMjlkNTJlYTI3ZTI1MTU5NWNiZWIwZjhhNjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrhuzF6G1oY70laemJgkFHgotChi
t9f9257QMoRqb7BNn4PfEJcgMdosmZumCgoVtcsqfs12/sSSwDJu3m5Hxe9gH8dP
GGhFgItYgVxDwyFUEN3I0qdzSCiydgFVch/HeVcTCzma1bptdrlxiCgIXL7yDrxh
UG8W1w7bAOiQYbiH0Z5fANggZAnuOJ5I+E4XoksihynsDTT9zlOhHeEZFLQ2cxF+
Kw4Or8X2xfh6Yl0VZknYOEmGqD1XXu18vtWoMXPdbfqPAfu/nMpluGeDhJtTPTiF
zTsiQPsSlGuk1rZ+pAuj5TrCeaa4RsAo/5TIEeuRwCUvWx02I6e+bd2Z8wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNSMdRBaExKdUuon4lFZXL6w+KZKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzL2EzNzBj
MS1iMmY2LTQwNDgtYWU2Yy04YWJjYzE1YTk5OWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvYTM3MGMx
LWIyZjYtNDA0OC1hZTZjLThhYmNjMTVhOTk5YS8xLzFJeDFFRm9URXAxUzZpZmlV
VmxjdnJENHBrby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW8OKMA0GCSqGSIb3DQEBCwUAA4IBAQCA9H/d
hHwoFUyWu/qlpeYEqp94ySZfZtiY9p7SDoO2q/HlTL3u+CIKTaSX+Mv9CJqNdsXV
uiKCSS8FOjpTEP7rt9Npg3k4JNjZe+JfMZs9w93o3xqjkJendMvPw+PJbHL5FUFt
yOIR7qdNEU8nfm73ozvx4FfgDxxLssWc1WGRWquXPw3ovUfJcmI7Lk/3KYTBVqbX
k8VrfTGEopDgH8IQzc7xdAUEeTn9Qa+zp2KlZmXI1VFKW8TmnaOorT22731gS6oq
zBPra5JONS4GWamFYlGoj9oWFjg8Bu1dhjkDDzKdqM44SvYqi3Lh3zQBhjhxo04d
YJeyngAGEfSLEwJs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:27 2024 by rpki-client on console-ams.rpki-client.org