Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47EHC6PXoWjtJeg5EQ_tFwb7Bg0.cer
File: 47EHC6PXoWjtJeg5EQ_tFwb7Bg0.cer (raw, json)
Hash identifier: N0V+90uL6q3w/54c16I21W0ewBEnW8VLP0F7ia5Mq8k=
Subject key identifier: E3:B1:07:0B:A3:D7:A1:68:ED:25:E8:39:11:0F:ED:17:06:FB:06:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222D41EA638C907F6FB5E7E127A2F15C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202/E3B1070BA3D7A168ED25E839110FED1706FB060D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.48.204.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2d:41:ea:63:8c:90:7f:6f:b5:e7:e1:27:a2:f1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3b1070ba3d7a168ed25e839110fed1706fb060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:70:d5:82:ae:0f:96:ac:69:40:54:75:24:
87:a8:a0:22:e9:12:4e:b9:d2:0a:0f:4e:a1:f2:74:
a7:86:06:49:c8:be:d7:b8:9b:54:93:15:41:78:40:
72:a5:74:10:a1:ef:da:71:b5:9e:76:3f:cf:b2:44:
28:75:99:11:f2:00:48:5e:5a:d7:ff:0f:f0:d6:ae:
cc:23:15:e4:f6:1c:00:f6:05:0a:2d:7f:2b:c9:8c:
f5:ca:c5:ad:b3:31:11:02:63:d9:7c:d0:7c:0a:ca:
c7:e6:bd:50:32:56:1b:5b:a2:ba:47:9e:dd:28:3e:
0b:ac:60:ab:67:13:d8:1a:d5:b9:b5:63:3d:1e:55:
cc:fc:53:9d:87:b9:63:c4:69:5a:f6:5e:7e:2f:28:
ac:7d:f6:64:5b:53:43:48:38:b1:53:ac:1a:60:0b:
d8:cb:37:8c:05:0f:d1:e5:4c:d6:cd:e2:a8:6b:a5:
cf:03:ac:21:4e:1c:f3:36:bb:2f:a2:bd:32:be:26:
05:c7:91:6a:e2:1a:19:3b:73:64:18:5f:3d:c8:3c:
32:f4:37:0d:fc:76:99:32:d1:57:55:ae:e7:da:69:
3b:5c:36:22:8e:10:01:42:03:e3:14:7b:27:2d:0a:
df:1d:22:bd:69:0c:36:7a:d1:45:d4:b9:f0:e5:86:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B1:07:0B:A3:D7:A1:68:ED:25:E8:39:11:0F:ED:17:06:FB:06:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/202/E3B1070BA3D7A168ED25E839110FED1706FB060D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:aa:a9:9c:37:da:46:7b:61:f0:ab:c7:a2:70:d1:5b:aa:5b:
fc:f1:ba:9a:ef:13:c0:4b:de:b6:58:b0:12:77:1e:08:a8:f7:
8c:28:6f:f4:bd:aa:a9:1b:47:69:ae:6b:90:13:bc:df:ae:31:
56:a9:7b:dc:82:b7:e5:27:f1:93:96:19:dc:0e:e9:5d:f9:ba:
c7:9f:69:8e:40:4e:45:a8:a9:72:3f:3e:1e:97:78:09:02:f6:
a8:c7:65:2e:68:96:4f:ec:f6:d5:45:ec:75:82:e0:69:52:b4:
af:56:63:c2:19:59:ac:13:43:38:d9:4d:fd:6c:88:9e:4c:79:
56:e7:38:c4:48:ed:0b:c2:5e:68:08:b7:e1:5a:05:f4:dc:cc:
e8:0e:c1:eb:29:b1:9e:dc:fc:dc:25:e1:e2:89:d3:c1:44:d0:
75:c3:f4:c6:b6:af:6b:b8:ce:4d:a5:f2:9e:e5:a9:41:14:d0:
3f:d9:6e:9e:83:8a:09:da:98:4f:89:02:c5:58:fa:d8:7a:81:
14:94:8b:a8:7a:26:49:c3:18:48:b0:09:de:c3:b9:52:fe:4b:
d8:4e:9d:92:8b:2c:81:d6:16:5c:38:bc:4d:d0:f9:99:ac:92:
9b:85:4d:96:d1:a4:7b:b9:9c:25:e8:ba:df:5f:9d:70:1d:a5:
2a:c6:75:f0
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgISAYciLUHqY4yQf2+15+EnovFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzI3MDgyNjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2IxMDcwYmEzZDdhMTY4ZWQyNWU4MzkxMTBmZWQxNzA2ZmIwNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnlw1YKuD5asaUBUdSSHqKAi6RJO
udIKD06h8nSnhgZJyL7XuJtUkxVBeEBypXQQoe/acbWedj/PskQodZkR8gBIXlrX
/w/w1q7MIxXk9hwA9gUKLX8ryYz1ysWtszERAmPZfNB8CsrH5r1QMlYbW6K6R57d
KD4LrGCrZxPYGtW5tWM9HlXM/FOdh7ljxGla9l5+LyisffZkW1NDSDixU6waYAvY
yzeMBQ/R5UzWzeKoa6XPA6whThzzNrsvor0yviYFx5Fq4hoZO3NkGF89yDwy9DcN
/HaZMtFXVa7n2mk7XDYijhABQgPjFHsnLQrfHSK9aQw2etFF1Lnw5YbcTQIDAQAB
o4ICpDCCAqAwHQYDVR0OBBYEFOOxBwuj16Fo7SXoOREP7RcG+wYNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFDBggrBgEFBQcBCwSCATUwggExMGAGCCsGAQUFBzAFhlRy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcw
OGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBiOTlhZi8yMDIwgY4GCCsGAQUFBzAK
hoGBcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9m
ZTM3MDhhMC02N2Q1LTRhYzItYWJjNC1hMzMyNTkwYjk5YWYvMjAyL0UzQjEwNzBC
QTNEN0ExNjhFRDI1RTgzOTExMEZFRDE3MDZGQjA2MEQubWZ0MDwGCCsGAQUFBzAN
hjBodHRwczovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54
bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADCMMwwDQYJKoZIhvcNAQELBQADggEBAE2qqZw32kZ7YfCrx6Jw0VuqW/zx
uprvE8BL3rZYsBJ3Hgio94wob/S9qqkbR2mua5ATvN+uMVape9yCt+Un8ZOWGdwO
6V35usefaY5ATkWoqXI/Ph6XeAkC9qjHZS5olk/s9tVF7HWC4GlStK9WY8IZWawT
QzjZTf1siJ5MeVbnOMRI7QvCXmgIt+FaBfTczOgOwespsZ7c/Nwl4eKJ08FE0HXD
9Ma2r2u4zk2l8p7lqUEU0D/Zbp6DignamE+JAsVY+th6gRSUi6h6JknDGEiwCd7D
uVL+S9hOnZKLLIHWFlw4vE3Q+ZmskpuFTZbRpHu5nCXout9fnXAdpSrGdfA=
-----END CERTIFICATE-----
Generated at Thu Dec 21 15:01:45 2023 by rpki-client on console-fra.rpki-client.org