Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2z9UayS327CYSgnGJmClK60od1c.cer
File: 2z9UayS327CYSgnGJmClK60od1c.cer (raw, json)
Hash identifier: vJ+fWPqxs5Ht8ip+ms4ArKZn9WoohQSbMhdh6m7QEVQ=
Subject key identifier: DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF5008E8A08364310F9BC35F200D978
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:59 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.172.180.0/24
IP: 2a11:4d00::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:00:8e:8a:08:36:43:10:f9:bc:35:f2:00:d9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db3f546b24b7dbb0984a09c62660a52bad287757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:f7:a9:26:26:96:16:21:7c:60:64:27:d0:
49:a1:d2:be:36:72:38:df:2b:da:6e:02:52:ef:d5:
5d:40:72:aa:2b:85:cc:b4:1e:08:3c:55:fb:ad:35:
32:1e:10:14:f5:0f:23:15:d8:9a:be:8d:66:f8:35:
84:eb:f2:2a:c2:a2:9a:21:e7:bd:9a:8a:7c:1d:44:
66:00:fa:09:c7:23:8a:c1:a8:9e:06:3e:ff:aa:9c:
a0:b8:b5:3a:fc:c0:6a:30:1c:d5:d1:a7:95:a3:ad:
22:d9:8d:e1:97:f6:94:42:ac:ee:62:93:fd:ae:bf:
8e:a6:f4:5c:cb:08:f3:4a:7c:65:de:86:ae:2a:a3:
f4:d9:e3:11:47:a0:a7:ae:62:2c:94:79:39:58:5e:
9e:87:7a:fc:8d:43:06:eb:c8:9e:0e:5c:6d:c6:a8:
31:e6:6d:cb:ec:75:a8:93:f1:0e:d4:7e:ce:97:c5:
ad:98:22:b2:cf:64:a2:e3:72:01:8e:a0:37:8b:59:
70:9b:f9:95:95:a7:79:2d:6f:cc:33:e4:b1:3c:06:
5a:a4:e5:42:3d:ed:e9:bd:f0:ae:26:47:95:d4:e9:
9d:33:78:5b:f6:64:96:75:aa:81:3b:01:86:da:2e:
54:1a:47:01:fb:c7:c7:7e:50:24:65:d3:b9:9a:13:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:54:6B:24:B7:DB:B0:98:4A:09:C6:26:60:A5:2B:AD:28:77:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/91282f-f42c-442d-84bb-22f37a39b210/1/2z9UayS327CYSgnGJmClK60od1c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.180.0/24
IPv6:
2a11:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
7a:88:28:46:39:4a:f7:15:25:75:b5:7b:99:76:cd:5f:de:3d:
0b:0e:ad:93:8a:1d:62:6a:7b:24:aa:cf:1d:e8:82:51:aa:8e:
3c:88:ba:24:27:1d:1f:43:9d:f9:34:ca:8c:4b:ab:6e:fc:3d:
53:16:f3:90:15:3e:50:08:31:70:c7:02:44:cf:02:20:8d:54:
1f:3f:be:d4:03:ff:58:7d:56:63:bd:ad:b8:09:ee:1d:21:e6:
13:9c:9b:92:f5:2b:e7:ae:18:a7:29:e8:ca:9d:67:4b:bf:ef:
c3:a9:fa:6e:08:ea:bc:fa:dd:b4:38:63:60:31:9a:18:45:06:
01:e6:9a:09:ba:bf:53:5c:f3:50:7c:14:67:9c:31:34:b4:53:
6c:3a:8e:9e:22:3b:d6:38:ae:93:54:e0:11:82:40:b3:88:92:
ac:f3:19:b1:d4:07:9b:1a:5c:74:c1:31:1c:42:30:bc:48:e1:
64:cb:4c:e3:7e:2f:f7:96:b9:4d:53:9a:82:1e:40:24:ab:3e:
0c:9b:a7:54:cd:e7:5d:fb:bd:04:b5:90:a5:33:20:2f:43:a8:
28:c4:b9:d7:b1:46:cc:34:b6:0f:af:9e:3c:79:6b:f9:0a:af:
db:40:d7:a2:cd:23:4c:27:c8:bd:15:54:12:b3:15:c8:ff:4f:
43:eb:e7:f1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9QCOigg2QxD5vDXyANl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjNmNTQ2YjI0YjdkYmIwOTg0YTA5YzYyNjYwYTUyYmFkMjg3NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16j3qSYmlhYhfGBkJ9BJodK+NnI4
3yvabgJS79VdQHKqK4XMtB4IPFX7rTUyHhAU9Q8jFdiavo1m+DWE6/IqwqKaIee9
mop8HURmAPoJxyOKwaieBj7/qpyguLU6/MBqMBzV0aeVo60i2Y3hl/aUQqzuYpP9
rr+OpvRcywjzSnxl3oauKqP02eMRR6CnrmIslHk5WF6eh3r8jUMG68ieDlxtxqgx
5m3L7HWok/EO1H7Ol8WtmCKyz2Si43IBjqA3i1lwm/mVlad5LW/MM+SxPAZapOVC
Pe3pvfCuJkeV1OmdM3hb9mSWdaqBOwGG2i5UGkcB+8fHflAkZdO5mhM2EwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNs/VGskt9uwmEoJxiZgpSutKHdXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2LzkxMjgy
Zi1mNDJjLTQ0MmQtODRiYi0yMmYzN2EzOWIyMTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvOTEyODJm
LWY0MmMtNDQyZC04NGJiLTIyZjM3YTM5YjIxMC8xLzJ6OVVheVMzMjdDWVNnbkdK
bUNsSzYwb2QxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQABay0MA0EAgACMAcDBQMqEU0AMA0GCSqGSIb3
DQEBCwUAA4IBAQB6iChGOUr3FSV1tXuZds1f3j0LDq2Tih1ianskqs8d6IJRqo48
iLokJx0fQ535NMqMS6tu/D1TFvOQFT5QCDFwxwJEzwIgjVQfP77UA/9YfVZjva24
Ce4dIeYTnJuS9SvnrhinKejKnWdLv+/DqfpuCOq8+t20OGNgMZoYRQYB5poJur9T
XPNQfBRnnDE0tFNsOo6eIjvWOK6TVOARgkCziJKs8xmx1AebGlx0wTEcQjC8SOFk
y0zjfi/3lrlNU5qCHkAkqz4Mm6dUzedd+70EtZClMyAvQ6goxLnXsUbMNLYPr548
eWv5Cq/bQNeizSNMJ8i9FVQSsxXI/09D6+fx
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:20 2024 by rpki-client on console-ams.rpki-client.org