Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2nmy2SwZztqi20I1f4VNpliOGZM.cer
File: 2nmy2SwZztqi20I1f4VNpliOGZM.cer (raw, json)
Hash identifier: 4Bzci/iFyo+9JRzD77jHyXKOxcG1I7W0V2Mp/DYIdiU=
Subject key identifier: DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571691805220D1CDAE812D7B1823D7B07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.247.173.0/24
IP: 2a11:c640::/29
Validation: Failed, certificate revoked on Thu 09 Nov 2023 08:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:18:05:22:0d:1c:da:e8:12:d7:b1:82:3d:7b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da79b2d92c19cedaa2db42357f854da6588e1993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:46:d4:81:8e:04:1e:3b:00:c2:59:4c:bf:
63:a2:7f:b6:67:57:bb:fb:44:70:e2:6b:33:38:ee:
62:27:f3:2c:13:e2:b2:c7:df:24:1a:c7:95:26:91:
ae:ab:66:56:fc:53:19:0b:39:a2:3b:9b:f5:9b:2b:
8f:61:a1:76:5f:16:03:f6:7e:ed:d9:22:d9:ea:99:
6a:a3:b9:e2:cc:bb:69:1d:08:1d:c0:5e:9d:11:e0:
f1:a8:b9:c4:a0:57:83:58:5e:5f:97:f5:5d:aa:36:
92:75:96:1f:93:e3:9e:f4:77:ab:ba:0d:22:bf:8d:
5b:56:09:31:18:e6:3d:34:ee:3b:76:88:6d:f1:9c:
84:26:2f:95:ad:ac:aa:5d:b3:fd:b0:c2:41:f6:c0:
25:c0:40:31:fd:32:b3:94:f0:00:db:30:7f:da:e4:
9c:50:10:cf:f5:fc:d2:7d:25:8a:e8:64:0f:71:a2:
d9:a8:3b:1f:22:4b:27:bc:3c:9a:43:1d:4b:93:4c:
c5:9c:b2:06:5b:49:94:fb:9a:0e:43:47:f8:b0:cd:
b8:e1:71:21:c9:c8:ad:19:45:d5:0b:92:25:ff:1e:
ae:a1:ab:3b:e3:ee:59:cc:b4:68:0b:9a:a8:7a:68:
81:8e:ba:5a:f8:67:d0:1c:92:5c:44:88:66:f8:37:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.173.0/24
IPv6:
2a11:c640::/29
Signature Algorithm: sha256WithRSAEncryption
1e:70:22:cc:a7:05:57:5b:41:6a:15:77:76:fc:e2:5b:ac:48:
53:fc:86:3e:b2:1a:d7:77:b4:46:a2:57:d4:1d:cd:56:32:4c:
cd:13:1e:4c:19:95:7f:8a:7b:7b:d0:83:bb:2e:46:99:85:ee:
33:61:a7:aa:73:a0:44:54:c5:93:6d:13:6b:d6:d7:5a:e0:f5:
68:3d:9d:23:59:a5:8a:4b:af:50:0c:a2:f7:e7:71:ff:5c:e7:
83:d3:73:fd:4c:ae:b3:19:84:5e:bc:e4:37:d5:bf:a4:e8:b6:
0c:4e:0c:a5:86:45:11:4e:8e:09:fc:02:80:e9:14:f6:a8:37:
91:1c:76:98:4f:9f:45:75:e6:b8:21:2f:b4:f8:ab:bf:34:08:
d6:84:09:03:32:4d:cb:3d:42:ea:4e:a9:36:05:3b:be:47:03:
89:67:6a:49:5a:8b:dc:5b:b0:a3:b0:12:da:c7:a6:dd:30:a6:
fb:3d:29:70:27:ab:de:35:b3:ca:0d:7f:e0:78:4a:90:e3:b1:
8f:db:cb:24:14:7f:1d:26:7c:7f:fc:e4:8f:bc:13:8e:98:c4:
a3:f1:60:df:7a:cd:65:98:a9:1c:b6:bb:7a:ec:9e:0b:2a:f2:
95:b6:26:3f:6e:c3:a7:8a:b2:02:99:41:08:64:38:61:ac:bd:
e3:f3:97:f6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVxaRgFIg0c2ugS17GCPXsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTc5YjJkOTJjMTljZWRhYTJkYjQyMzU3Zjg1NGRhNjU4OGUxOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNRG1IGOBB47AMJZTL9jon+2Z1e7
+0Rw4mszOO5iJ/MsE+Kyx98kGseVJpGuq2ZW/FMZCzmiO5v1myuPYaF2XxYD9n7t
2SLZ6plqo7nizLtpHQgdwF6dEeDxqLnEoFeDWF5fl/VdqjaSdZYfk+Oe9Herug0i
v41bVgkxGOY9NO47doht8ZyEJi+VrayqXbP9sMJB9sAlwEAx/TKzlPAA2zB/2uSc
UBDP9fzSfSWK6GQPcaLZqDsfIksnvDyaQx1Lk0zFnLIGW0mU+5oOQ0f4sM244XEh
ycitGUXVC5Il/x6uoas74+5ZzLRoC5qoemiBjrpa+GfQHJJcRIhm+DfCnwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNp5stksGc7aottCNX+FTaZYjhmTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzE3MmNm
Ni0zYzg2LTQzNGYtYmFhNS03ZjcyMDFjOWMwNWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvMTcyY2Y2
LTNjODYtNDM0Zi1iYWE1LTdmNzIwMWM5YzA1Zi8xLzJubXkyU3daenRxaTIwSTFm
NFZOcGxpT0daTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/etMA0EAgACMAcDBQMqEcZAMA0GCSqGSIb3
DQEBCwUAA4IBAQAecCLMpwVXW0FqFXd2/OJbrEhT/IY+shrXd7RGolfUHc1WMkzN
Ex5MGZV/int70IO7LkaZhe4zYaeqc6BEVMWTbRNr1tda4PVoPZ0jWaWKS69QDKL3
53H/XOeD03P9TK6zGYRevOQ31b+k6LYMTgylhkURTo4J/AKA6RT2qDeRHHaYT59F
dea4IS+0+Ku/NAjWhAkDMk3LPULqTqk2BTu+RwOJZ2pJWovcW7CjsBLax6bdMKb7
PSlwJ6veNbPKDX/geEqQ47GP28skFH8dJnx//OSPvBOOmMSj8WDfes1lmKkctrt6
7J4LKvKVtiY/bsOnirICmUEIZDhhrL3j85f2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:18 2024 by rpki-client on console-fra.rpki-client.org