Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23mP2uLRiU7gM7ID50ZjE4yHm3A.cer
File: 23mP2uLRiU7gM7ID50ZjE4yHm3A.cer (raw, json)
Hash identifier: t2BDFOAwV6wRny9UZoHhoWN/XgcbEX0/iPaIjvp+RbY=
Subject key identifier: DB:79:8F:DA:E2:D1:89:4E:E0:33:B2:03:E7:46:63:13:8C:87:9B:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D64487C5CC09BC9C2F116667DBE41A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:45 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.56.128.0/20
IP: 2a00:9f80::/32
Validation: Failed, certificate revoked on Tue 13 Jun 2023 09:34:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:44:87:c5:cc:09:bc:9c:2f:11:66:67:db:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db798fdae2d1894ee033b203e74663138c879b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:0b:88:8c:76:72:f5:41:9c:26:3f:ad:7e:
09:52:03:04:17:07:8e:60:e5:f9:5b:5d:1d:9d:9b:
fc:6c:1b:03:4f:4d:d2:84:89:ae:bd:0b:b2:e2:1d:
f0:20:2c:1a:fb:db:b0:a0:17:42:ac:53:ab:2e:30:
5a:ad:e4:74:78:a0:1d:ad:df:46:6f:a8:07:a6:36:
d3:88:7f:de:90:fd:fb:81:1b:96:7d:01:25:6d:40:
19:24:65:d8:77:ca:d3:67:66:b2:44:27:17:bb:a6:
ac:c6:e8:c0:68:f2:bc:36:79:61:c1:d3:e5:5f:6e:
2a:fd:b5:71:f9:0b:55:15:6d:9c:09:4f:25:07:bc:
21:de:50:cc:4a:1e:e0:3b:91:76:95:a1:bc:5f:f2:
db:1e:3b:a0:6d:39:37:f2:dc:dc:cc:fe:2a:1c:a9:
7e:97:75:de:60:e7:3e:bc:c0:e7:db:4a:39:1a:50:
ef:87:c1:9d:48:63:04:70:70:c1:94:1b:cd:a7:39:
71:da:44:7f:dc:01:3c:d3:67:48:30:43:f2:4f:b7:
70:2e:43:e6:3a:69:6d:8f:ee:50:42:b5:0f:94:bf:
2c:bf:95:7e:c1:51:12:22:c7:d0:d6:2d:94:39:96:
f8:bc:b9:2a:99:b1:df:19:88:2a:6e:9a:8d:d8:e7:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:8F:DA:E2:D1:89:4E:E0:33:B2:03:E7:46:63:13:8C:87:9B:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2587c5-3352-4f58-91d9-0c552f8071dc/1/23mP2uLRiU7gM7ID50ZjE4yHm3A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.56.128.0/20
IPv6:
2a00:9f80::/32
Signature Algorithm: sha256WithRSAEncryption
84:e9:fd:02:f0:fb:63:36:84:29:77:83:ed:bb:71:60:1c:ca:
1c:f7:dd:11:59:3c:41:72:04:5e:fb:91:2c:18:cc:83:2b:fe:
d3:f9:a8:3a:3b:41:bb:38:eb:6b:e6:9f:ec:36:96:51:76:5f:
1b:b4:db:44:bb:75:f9:81:20:74:39:1d:a4:e8:4e:43:fd:e3:
c4:2a:cd:05:4b:91:5d:a7:90:1f:10:86:96:8a:e2:50:d6:fe:
bf:b8:75:36:50:ce:66:da:97:6a:77:24:15:c6:e8:c8:bc:e6:
5b:1a:5b:b5:76:8c:68:31:65:e7:c6:40:1e:99:35:3b:11:21:
76:de:45:b6:c3:07:33:fb:59:ad:bf:43:88:ed:0f:03:b5:82:
af:3b:e9:53:fd:66:8d:01:c0:68:f8:15:6d:34:a4:22:27:98:
8f:aa:78:bb:d9:4f:fe:f9:5a:74:41:6f:8e:53:67:a2:b9:8e:
8a:0b:2a:43:99:a6:3d:f9:06:7c:7a:67:0d:79:41:8d:0c:2c:
0a:75:52:a4:3b:48:64:88:7d:97:c2:b1:07:90:01:56:24:b6:
5d:a6:4c:b6:c6:a4:07:93:4c:0c:fd:47:0b:d0:40:76:ee:6e:
6c:d2:b7:d3:24:f6:4d:6d:34:f8:61:e9:f2:e9:6d:3b:3d:65:
d7:90:ea:92
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVx1kSHxcwJvJwvEWZn2+QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjc5OGZkYWUyZDE4OTRlZTAzM2IyMDNlNzQ2NjMxMzhjODc5YjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwcLiIx2cvVBnCY/rX4JUgMEFweO
YOX5W10dnZv8bBsDT03ShImuvQuy4h3wICwa+9uwoBdCrFOrLjBareR0eKAdrd9G
b6gHpjbTiH/ekP37gRuWfQElbUAZJGXYd8rTZ2ayRCcXu6asxujAaPK8NnlhwdPl
X24q/bVx+QtVFW2cCU8lB7wh3lDMSh7gO5F2laG8X/LbHjugbTk38tzczP4qHKl+
l3XeYOc+vMDn20o5GlDvh8GdSGMEcHDBlBvNpzlx2kR/3AE802dIMEPyT7dwLkPm
Omltj+5QQrUPlL8sv5V+wVESIsfQ1i2UOZb4vLkqmbHfGYgqbpqN2OepRQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNt5j9ri0YlO4DOyA+dGYxOMh5twMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzI1ODdj
NS0zMzUyLTRmNTgtOTFkOS0wYzU1MmY4MDcxZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvMjU4N2M1
LTMzNTItNGY1OC05MWQ5LTBjNTUyZjgwNzFkYy8xLzIzbVAydUxSaVU3Z003SUQ1
MFpqRTR5SG0zQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQEsDiAMA0EAgACMAcDBQAqAJ+AMA0GCSqGSIb3
DQEBCwUAA4IBAQCE6f0C8PtjNoQpd4Ptu3FgHMoc990RWTxBcgRe+5EsGMyDK/7T
+ag6O0G7OOtr5p/sNpZRdl8btNtEu3X5gSB0OR2k6E5D/ePEKs0FS5Fdp5AfEIaW
iuJQ1v6/uHU2UM5m2pdqdyQVxujIvOZbGlu1doxoMWXnxkAemTU7ESF23kW2wwcz
+1mtv0OI7Q8DtYKvO+lT/WaNAcBo+BVtNKQiJ5iPqni72U/++Vp0QW+OU2eiuY6K
CypDmaY9+QZ8emcNeUGNDCwKdVKkO0hkiH2XwrEHkAFWJLZdpky2xqQHk0wM/UcL
0EB27m5s0rfTJPZNbTT4Yeny6W07PWXXkOqS
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org