Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31ox5UkV6xDrAV7Y8EdtjD9k__E.cer
File: 31ox5UkV6xDrAV7Y8EdtjD9k__E.cer (raw, json)
Hash identifier: Lzc+WD0gDuE6EtI+j79zS8UDbw4QSmaMwie4+jOsHF4=
Subject key identifier: DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC251F9685A05C1EBCC9D9D4596E25185
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft
caRepository: rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/
Notify URL: https://rpki1.rpki-test.sit.fraunhofer.de/rrdp/notification.xml
Certificate not before: Mon 01 Jan 2024 00:00:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 208162
AS: 212795
AS: 213242
IP: 45.155.128.0/22
IP: 158.220.128.0/17
IP: 160.200.0.0/16
IP: 161.51.128.0/18
IP: 193.162.137.0/24
IP: 2a10:9040::/29
Validation: Failed, certificate revoked on Tue 19 Mar 2024 11:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:51:f9:68:5a:05:c1:eb:cc:9d:9d:45:96:e2:51:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:00:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5a31e54915eb10eb015ed8f0476d8c3f64fff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:a8:16:15:bb:26:6e:28:5b:27:21:5e:7a:
24:28:95:10:7d:15:0c:4b:95:41:2e:b6:d1:3d:dc:
01:e5:7b:9b:0f:44:51:71:08:8a:92:cf:aa:17:21:
d6:5b:4f:21:29:4d:f5:ab:90:ec:d4:64:57:24:4f:
26:b5:3c:22:05:62:f5:2c:bf:34:67:45:b9:f7:30:
b8:eb:bd:2a:35:75:bf:1e:6e:1e:8e:73:7f:91:72:
9f:3e:b7:95:c2:fc:8b:1e:dc:b7:77:da:ea:dc:80:
2d:17:41:65:03:ae:bd:58:24:f0:a5:b0:20:cd:80:
18:58:24:fc:ab:b3:b8:b7:ac:35:30:a9:82:8c:d6:
66:27:e1:ac:77:50:98:67:b5:36:07:46:77:44:24:
0a:0f:08:16:19:13:07:a2:29:f3:ee:38:b7:95:99:
65:72:07:7b:3f:38:39:b9:df:f6:63:96:24:7b:24:
ce:7b:86:b6:f3:12:2d:4b:8a:7b:b2:18:8e:84:2c:
1c:bc:4b:dc:2b:73:9c:6a:34:de:f7:f2:26:5c:7e:
10:5a:44:7f:88:61:29:0e:67:a9:c2:48:09:6d:5b:
5e:d0:1e:75:bf:15:60:a3:66:95:6e:04:e2:0e:d1:
93:e9:63:42:1d:9b:90:e3:44:36:a1:ed:75:fb:a5:
0f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5A:31:E5:49:15:EB:10:EB:01:5E:D8:F0:47:6D:8C:3F:64:FF:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/
RPKI Manifest - URI:rsync://rpki1.rpki-test.sit.fraunhofer.de/repo/rpki1_fraunhofer/0/DF5A31E54915EB10EB015ED8F0476D8C3F64FFF1.mft
RPKI Notify - URI:https://rpki1.rpki-test.sit.fraunhofer.de/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.128.0/22
158.220.128.0/17
160.200.0.0/16
161.51.128.0/18
193.162.137.0/24
IPv6:
2a10:9040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208162
212795
213242
Signature Algorithm: sha256WithRSAEncryption
16:dd:0d:35:98:ea:41:6e:41:c2:ee:1d:01:42:a7:2d:f6:2b:
e4:95:62:87:ed:72:f6:e0:d1:1c:a7:56:f7:44:f5:8a:80:e2:
d2:bb:3f:8a:4b:65:23:e6:18:6b:83:89:7c:75:a3:e4:5e:dd:
9f:d8:9f:59:06:fe:5f:98:5d:ce:8f:ae:da:0b:83:d2:f2:df:
48:b5:49:74:0a:03:69:e4:55:2a:77:bf:51:c5:ca:af:6d:e3:
fc:1d:23:d9:66:e8:85:83:c2:89:82:f4:57:cf:05:b6:57:39:
c5:52:34:a8:2d:c9:ec:7b:68:ba:e7:e7:e8:3e:7f:a3:d3:05:
98:e4:b5:42:76:c7:d0:13:ae:dd:06:be:47:f2:57:d3:9a:a3:
04:04:a0:fa:5a:5b:f7:e0:72:45:78:b5:d7:03:19:4b:6a:29:
82:14:ad:28:3d:99:1e:dc:f6:48:e2:f1:3c:81:9d:da:24:72:
ab:6f:2f:32:4d:ca:8a:6c:22:c9:3e:36:8b:f7:98:2d:0b:98:
58:e6:71:fc:cd:87:09:0b:15:af:0d:32:f4:72:04:63:cd:8a:
92:09:50:37:df:49:dd:e2:ca:09:3a:54:61:6f:0b:61:4b:bb:
da:60:c2:82:af:81:13:f9:8a:da:23:13:27:86:6a:7c:a8:1d:
c9:e1:f1:24
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAYzCUfloWgXB68ydnUWW4lGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAwMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjVhMzFlNTQ5MTVlYjEwZWIwMTVlZDhmMDQ3NmQ4YzNmNjRmZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zaoFhW7Jm4oWychXnokKJUQfRUM
S5VBLrbRPdwB5XubD0RRcQiKks+qFyHWW08hKU31q5Ds1GRXJE8mtTwiBWL1LL80
Z0W59zC4670qNXW/Hm4ejnN/kXKfPreVwvyLHty3d9rq3IAtF0FlA669WCTwpbAg
zYAYWCT8q7O4t6w1MKmCjNZmJ+Gsd1CYZ7U2B0Z3RCQKDwgWGRMHoinz7ji3lZll
cgd7Pzg5ud/2Y5YkeyTOe4a28xItS4p7shiOhCwcvEvcK3OcajTe9/ImXH4QWkR/
iGEpDmepwkgJbVte0B51vxVgo2aVbgTiDtGT6WNCHZuQ40Q2oe11+6UPxwIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFN9aMeVJFesQ6wFe2PBHbYw/ZP/xMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggErBggrBgEFBQcBCwSCAR0wggEZME4GCCsGAQUFBzAFhkJy
c3luYzovL3Jwa2kxLnJwa2ktdGVzdC5zaXQuZnJhdW5ob2Zlci5kZS9yZXBvL3Jw
a2kxX2ZyYXVuaG9mZXIvMC8wegYIKwYBBQUHMAqGbnJzeW5jOi8vcnBraTEucnBr
aS10ZXN0LnNpdC5mcmF1bmhvZmVyLmRlL3JlcG8vcnBraTFfZnJhdW5ob2Zlci8w
L0RGNUEzMUU1NDkxNUVCMTBFQjAxNUVEOEYwNDc2RDhDM0Y2NEZGRjEubWZ0MEsG
CCsGAQUFBzANhj9odHRwczovL3Jwa2kxLnJwa2ktdGVzdC5zaXQuZnJhdW5ob2Zl
ci5kZS9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5
bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3
RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
RQYIKwYBBQUHAQcBAf8ENjA0MCMEAgABMB0DBAItm4ADBAee3IADAwCgyAMEBqEz
gAMEAMGiiTANBAIAAjAHAwUDKhCQQDAkBggrBgEFBQcBCAEB/wQVMBOgETAPAgMD
LSICAwM/OwIDA0D6MA0GCSqGSIb3DQEBCwUAA4IBAQAW3Q01mOpBbkHC7h0BQqct
9ivklWKH7XL24NEcp1b3RPWKgOLSuz+KS2Uj5hhrg4l8daPkXt2f2J9ZBv5fmF3O
j67aC4PS8t9ItUl0CgNp5FUqd79RxcqvbeP8HSPZZuiFg8KJgvRXzwW2VznFUjSo
Lcnse2i65+foPn+j0wWY5LVCdsfQE67dBr5H8lfTmqMEBKD6Wlv34HJFeLXXAxlL
aimCFK0oPZke3PZI4vE8gZ3aJHKrby8yTcqKbCLJPjaL95gtC5hY5nH8zYcJCxWv
DTL0cgRjzYqSCVA330nd4soJOlRhbwthS7vaYMKCr4ET+YraIxMnhmp8qB3J4fEk
-----END CERTIFICATE-----
Generated at Sun May 11 14:49:16 2025 by rpki-client