Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4AexRlVpflq7BZRH1NyzOKp07ng.cer
File: 4AexRlVpflq7BZRH1NyzOKp07ng.cer (raw, json)
Hash identifier: Fl1FIcZnquFJjMt/hIAU15BgZZmIK/OWXzwqXK7NmQU=
Subject key identifier: E0:07:B1:46:55:69:7E:5A:BB:05:94:47:D4:DC:B3:38:AA:74:EE:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E3DA06510E5868998EBE5DF3D6BC2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/faa88a-982b-4def-aeb8-9541f6e2a0d0/1/4AexRlVpflq7BZRH1NyzOKp07ng.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/faa88a-982b-4def-aeb8-9541f6e2a0d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.104.129.0/24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:3d:a0:65:10:e5:86:89:98:eb:e5:df:3d:6b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e007b14655697e5abb059447d4dcb338aa74ee78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:a8:aa:f8:77:23:c4:ae:14:4d:37:3d:0c:
d7:f4:7d:a5:3b:18:2d:e8:4d:a7:7b:06:29:dc:1f:
4d:b1:d3:99:f9:11:67:fa:7c:6e:9d:a3:82:56:ab:
1a:e7:7b:b8:9e:5d:51:91:88:9c:0e:82:14:8a:44:
e0:69:2a:87:87:10:38:b1:26:ea:1b:5e:30:7a:e6:
43:25:28:28:38:30:af:a9:97:03:f2:8d:ce:d5:fe:
da:9c:11:28:99:2a:a0:db:87:d5:f2:d0:84:31:1c:
f8:96:e4:72:7e:f1:c8:ce:4a:18:f9:8b:4a:01:89:
e3:b8:54:a8:e1:12:57:2c:49:e9:91:9a:6e:ed:ff:
0e:39:cc:27:12:b9:79:4b:2f:17:d6:d5:6c:76:0c:
0f:f7:f2:48:a1:3f:8c:38:6a:22:aa:46:19:cb:34:
6b:9a:b1:de:d7:0c:6e:d2:b9:5b:35:00:41:42:10:
f6:4d:2f:1b:d1:b9:30:c5:88:7c:9b:cc:d8:c0:f8:
2f:3b:be:8e:f2:49:a7:09:cf:2e:6b:c7:6f:36:bd:
bb:58:e7:22:dd:d9:30:3d:37:d8:dd:db:24:51:ee:
bb:57:da:cd:56:25:a4:27:ee:f1:85:22:a9:a4:46:
35:55:08:d3:c3:ff:cb:79:da:01:3a:2b:62:86:6e:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:B1:46:55:69:7E:5A:BB:05:94:47:D4:DC:B3:38:AA:74:EE:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/faa88a-982b-4def-aeb8-9541f6e2a0d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/faa88a-982b-4def-aeb8-9541f6e2a0d0/1/4AexRlVpflq7BZRH1NyzOKp07ng.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ba:c6:30:66:26:63:57:b9:ab:18:0e:54:b8:c2:57:1f:4a:
fb:ce:ae:72:ed:d4:84:f5:58:76:f0:92:1e:00:11:6e:ec:db:
8e:49:1f:3a:94:a3:6e:81:f8:76:3c:4c:59:00:9e:27:a6:5e:
b0:51:09:b0:95:55:27:73:5c:7f:7b:ec:d3:63:e6:8c:dd:ee:
56:54:8b:c2:08:25:f6:3e:56:c4:e4:21:c0:86:1f:a5:c3:a6:
10:dc:27:2d:e9:b1:ab:80:54:5d:f1:f1:86:3c:03:b0:1b:c2:
d0:e6:d8:3a:95:4e:81:0d:77:d0:18:92:ea:db:4a:06:00:56:
59:75:67:d1:20:94:a5:58:17:15:3a:50:57:a8:0e:af:c0:58:
d2:83:1c:be:b8:d8:9a:eb:3e:e6:38:c2:41:cd:3d:95:e9:a6:
15:10:2d:b0:e7:78:ec:d8:1f:1f:d2:9d:cd:1e:21:ae:5b:41:
fb:32:0a:32:42:23:20:48:08:82:63:8d:a2:fe:49:66:5b:b4:
2f:db:c0:9c:85:97:ae:12:c3:c1:19:00:b9:d1:08:73:a5:2f:
41:38:27:82:37:44:0e:36:37:71:78:39:b6:10:c0:1c:5f:a0:
d4:40:b6:d6:45:87:4c:e5:ea:f3:2f:80:e6:7f:96:03:cd:e7:
9e:bd:ec:bd
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzFbj2gZRDlhomY6+XfPWvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDA3YjE0NjU1Njk3ZTVhYmIwNTk0NDdkNGRjYjMzOGFhNzRlZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqqoqvh3I8SuFE03PQzX9H2lOxgt
6E2newYp3B9NsdOZ+RFn+nxunaOCVqsa53u4nl1RkYicDoIUikTgaSqHhxA4sSbq
G14weuZDJSgoODCvqZcD8o3O1f7anBEomSqg24fV8tCEMRz4luRyfvHIzkoY+YtK
AYnjuFSo4RJXLEnpkZpu7f8OOcwnErl5Sy8X1tVsdgwP9/JIoT+MOGoiqkYZyzRr
mrHe1wxu0rlbNQBBQhD2TS8b0bkwxYh8m8zYwPgvO76O8kmnCc8ua8dvNr27WOci
3dkwPTfY3dskUe67V9rNViWkJ+7xhSKppEY1VQjTw//LedoBOitihm6c6QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOAHsUZVaX5auwWUR9TcsziqdO54MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjL2ZhYTg4
YS05ODJiLTRkZWYtYWViOC05NTQxZjZlMmEwZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvZmFhODhh
LTk4MmItNGRlZi1hZWI4LTk1NDFmNmUyYTBkMC8xLzRBZXhSbFZwZmxxN0JaUkgx
Tnl6T0twMDduZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwmiBMA0GCSqGSIb3DQEBCwUAA4IBAQCNusYw
ZiZjV7mrGA5UuMJXH0r7zq5y7dSE9Vh28JIeABFu7NuOSR86lKNugfh2PExZAJ4n
pl6wUQmwlVUnc1x/e+zTY+aM3e5WVIvCCCX2PlbE5CHAhh+lw6YQ3Cct6bGrgFRd
8fGGPAOwG8LQ5tg6lU6BDXfQGJLq20oGAFZZdWfRIJSlWBcVOlBXqA6vwFjSgxy+
uNia6z7mOMJBzT2V6aYVEC2w53js2B8f0p3NHiGuW0H7MgoyQiMgSAiCY42i/klm
W7Qv28CchZeuEsPBGQC50QhzpS9BOCeCN0QONjdxeDm2EMAcX6DUQLbWRYdM5erz
L4Dmf5YDzeeevey9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:50 2024 by rpki-client on console-ams.rpki-client.org