Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3T2t4ncM-gbgcWZmhAcJXwjCdPg.cer
File: 3T2t4ncM-gbgcWZmhAcJXwjCdPg.cer (raw, json)
Hash identifier: p62hJ5vSwiUvZvj/fJkWaSsqYgI9QRe8mQ5wBkQLWyw=
Subject key identifier: DD:3D:AD:E2:77:0C:FA:06:E0:71:66:66:84:07:09:5F:08:C2:74:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AC1FAF085B5F144D8402F0F68A89E5C29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 23 Sep 2023 12:19:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.145.237.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 08:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:fa:f0:85:b5:f1:44:d8:40:2f:0f:68:a8:9e:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 23 12:19:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd3dade2770cfa06e07166668407095f08c274f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:50:ef:cd:fb:8c:bb:de:09:dd:50:23:5c:
63:6b:4e:f5:2b:05:10:0d:51:59:d5:59:fd:eb:ea:
65:8a:88:62:24:60:47:32:bf:21:a3:79:4f:8b:da:
7a:af:74:04:26:fc:eb:ab:ba:9b:33:8e:ff:56:08:
84:67:4e:2b:33:64:54:33:70:e8:4a:fc:6e:ad:28:
fd:a5:68:4e:dc:11:c6:4e:ce:91:2e:09:eb:a2:58:
ab:c6:31:9f:b8:5b:44:b6:34:e4:d3:27:f0:c5:cc:
14:a5:1d:94:0f:47:ff:9d:3c:a9:24:8b:c8:2c:d5:
c3:b1:5d:bb:5a:d3:34:90:f5:e0:91:06:e0:78:28:
60:9d:aa:ea:56:f4:93:69:36:36:37:ed:52:29:1b:
f7:31:b0:61:2a:6c:6a:f4:29:53:17:f6:9a:18:00:
16:40:93:21:50:6e:0f:7b:e5:a9:e2:16:28:9a:7b:
7f:28:21:a5:bd:08:0c:48:71:6d:08:3e:97:de:1d:
b3:be:2e:0d:68:5b:8a:ab:8b:72:aa:82:a6:18:16:
4f:b8:37:21:aa:91:e6:22:5d:b5:02:0d:7a:02:be:
37:73:73:dd:92:cd:db:61:95:33:88:65:0d:8f:6f:
7b:d5:c3:b3:b7:88:bd:54:63:82:b7:12:8b:c3:f9:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:AD:E2:77:0C:FA:06:E0:71:66:66:84:07:09:5F:08:C2:74:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/29f8c1a3-4e13-49d0-a639-5bb5219b8f5b/0/DD3DADE2770CFA06E07166668407095F08C274F8.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:22:da:b0:e2:3b:33:b6:63:2f:05:36:98:e8:ff:03:3f:32:
22:ff:41:1c:f2:6f:f1:4a:9f:a8:98:a5:e3:23:5d:1c:f2:b5:
86:94:52:c0:35:d7:5a:04:e4:d5:de:45:ce:d9:6e:1a:83:8b:
db:82:44:c2:d4:2f:08:30:e5:cc:ab:21:c1:b4:54:41:6e:79:
60:d0:6c:03:a6:cc:a2:69:88:ec:9d:c5:10:30:e2:91:05:20:
78:51:e2:47:03:6c:6f:a6:f4:3d:35:89:1e:9b:85:14:1d:81:
63:60:83:48:5f:4f:33:3f:70:2a:b0:26:d3:f9:2e:44:d0:b9:
bd:be:45:eb:b2:c3:b6:90:9c:17:d2:3f:a0:75:8b:df:ef:ba:
33:20:4e:a7:a0:a5:5f:53:a2:41:e7:00:a4:94:b2:e0:06:bf:
13:c9:43:cf:e9:21:80:1a:17:f1:b2:6d:06:78:e3:f5:e5:a1:
e2:49:ee:5a:66:55:02:e5:05:1e:a7:9b:15:b8:fb:a1:72:78:
6e:55:b0:f9:ad:df:91:1c:55:fd:ba:8a:7e:b9:ee:2a:ca:3a:
b4:5b:04:7a:4c:da:bd:b0:d9:4e:f3:6c:c5:5d:db:dd:d8:7e:
1f:c7:72:56:12:49:76:95:48:9e:df:99:9f:fc:64:1d:35:8a:
15:e3:78:cf
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYrB+vCFtfFE2EAvD2ionlwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTIzMTIxOTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDNkYWRlMjc3MGNmYTA2ZTA3MTY2NjY4NDA3MDk1ZjA4YzI3NGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFNQ7837jLveCd1QI1xja071KwUQ
DVFZ1Vn96+pliohiJGBHMr8ho3lPi9p6r3QEJvzrq7qbM47/VgiEZ04rM2RUM3Do
SvxurSj9pWhO3BHGTs6RLgnrolirxjGfuFtEtjTk0yfwxcwUpR2UD0f/nTypJIvI
LNXDsV27WtM0kPXgkQbgeChgnarqVvSTaTY2N+1SKRv3MbBhKmxq9ClTF/aaGAAW
QJMhUG4Pe+Wp4hYomnt/KCGlvQgMSHFtCD6X3h2zvi4NaFuKq4tyqoKmGBZPuDch
qpHmIl21Ag16Ar43c3Pdks3bYZUziGUNj2971cOzt4i9VGOCtxKLw/nL0QIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFN09reJ3DPoG4HFmZoQHCV8IwnT4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzI5Zjhj
MWEzLTRlMTMtNDlkMC1hNjM5LTViYjUyMTliOGY1Yi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjlm
OGMxYTMtNGUxMy00OWQwLWE2MzktNWJiNTIxOWI4ZjViLzAvREQzREFERTI3NzBD
RkEwNkUwNzE2NjY2ODQwNzA5NUYwOEMyNzRGOC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AMKR7TANBgkqhkiG9w0BAQsFAAOCAQEACyLasOI7M7ZjLwU2mOj/Az8yIv9BHPJv
8UqfqJil4yNdHPK1hpRSwDXXWgTk1d5FztluGoOL24JEwtQvCDDlzKshwbRUQW55
YNBsA6bMommI7J3FEDDikQUgeFHiRwNsb6b0PTWJHpuFFB2BY2CDSF9PMz9wKrAm
0/kuRNC5vb5F67LDtpCcF9I/oHWL3++6MyBOp6ClX1OiQecApJSy4Aa/E8lDz+kh
gBoX8bJtBnjj9eWh4knuWmZVAuUFHqebFbj7oXJ4blWw+a3fkRxV/bqKfrnuKso6
tFsEekzavbDZTvNsxV3b3dh+H8dyVhJJdpVInt+Zn/xkHTWKFeN4zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:46 2024 by rpki-client on console-ams.rpki-client.org