Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fdHboqvr_hMmGJqI1xN3UCwpv4.cer
File: 4fdHboqvr_hMmGJqI1xN3UCwpv4.cer (raw, json)
Hash identifier: Gwcm1EzucherafmGempjowCa9N2qrQlPPUSkiq8Zo0Y=
Subject key identifier: E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708BAABC7321AF23FF0CFC1EBE942C58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.24.127.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:aa:bc:73:21:af:23:ff:0c:fc:1e:be:94:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1f7476e8aafaff84c98626a235c4ddd40b0a6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:e7:4d:8e:a5:cf:84:f7:be:65:3b:d5:bd:
13:c8:12:65:d6:a1:63:fa:9f:c8:28:cf:03:ef:1c:
60:76:9a:a6:c4:3a:ec:e8:8a:e3:d2:2c:8b:41:cf:
f1:6e:cc:aa:b2:56:9d:d1:58:48:af:8b:9c:3a:52:
3c:46:67:59:5e:37:57:8a:5f:d5:9c:db:d4:d9:24:
0a:6a:5a:a3:83:3a:07:eb:d1:ba:a9:c4:a3:19:09:
b1:07:ec:bd:52:58:c5:fc:86:11:0b:78:37:9d:74:
62:b0:a1:e9:8a:c6:8c:cb:3c:92:68:57:35:30:21:
40:ce:8c:80:56:1b:d5:44:2b:7b:1a:ae:9a:4b:a3:
ce:1d:2c:d5:7c:96:fb:b8:f8:51:63:53:d2:87:38:
96:9f:f7:73:74:92:e1:8f:d7:3a:5c:45:35:b9:42:
9a:9d:5e:d1:46:89:93:23:19:c8:91:ba:57:01:0e:
9b:08:18:15:10:72:90:8f:6e:9d:9c:51:f4:16:84:
f9:02:e0:98:c4:17:81:4d:7d:e0:85:72:1d:98:f2:
ab:69:56:1d:e7:9c:42:b3:d1:f4:39:34:a0:5e:65:
30:20:67:4a:2a:42:6c:c4:01:aa:91:9a:e1:8e:53:
12:95:91:b7:9f:cf:82:eb:9d:13:d7:11:10:0e:29:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:47:6E:8A:AF:AF:F8:4C:98:62:6A:23:5C:4D:DD:40:B0:A6:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a77156-105f-48ae-8fc1-97d8d8f8d97c/1/4fdHboqvr_hMmGJqI1xN3UCwpv4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7d:ff:0a:9a:29:d4:43:da:97:e5:b0:a2:2c:40:5f:a4:f1:
27:83:52:1c:55:71:94:79:2b:7c:69:3a:42:ce:3c:7e:0f:48:
d8:23:85:85:53:f7:c2:2c:33:be:90:b1:99:9d:d3:1c:2a:59:
1c:22:d6:89:ca:f6:d2:34:62:f7:9f:fc:cc:7e:c2:17:61:6a:
b2:f1:e5:15:7d:de:ad:fa:d7:31:8d:9d:ce:04:49:30:45:3f:
4c:96:13:b0:42:70:21:35:44:7f:79:6a:64:c7:db:bc:15:3d:
8f:03:1b:f3:ea:1b:aa:50:27:e9:30:30:2a:3c:53:56:5a:95:
64:17:89:0f:b9:2a:ea:0a:b9:fa:03:a1:3e:a3:c0:ee:06:ba:
3a:38:d5:37:e9:5c:2e:12:f5:fb:95:b4:76:7c:cf:c4:a7:71:
f1:4d:af:47:bc:ef:a7:24:8f:79:ae:8f:bc:11:6f:05:de:7e:
03:be:99:ea:c8:86:6b:b9:b2:de:7c:e3:03:d2:b3:35:4d:4f:
93:2c:fe:bf:16:11:00:10:c3:39:a0:60:55:d5:e3:39:ee:ba:
58:bf:fa:4e:1b:a9:05:ea:95:e0:ed:cd:5f:dc:b1:de:13:d1:
28:7b:46:26:03:74:ea:a0:a9:ef:19:1e:85:33:f0:34:5d:41:
3f:cd:91:b4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVwi6q8cyGvI/8M/B6+lCxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzNDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWY3NDc2ZThhYWZhZmY4NGM5ODYyNmEyMzVjNGRkZDQwYjBhNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjbnTY6lz4T3vmU71b0TyBJl1qFj
+p/IKM8D7xxgdpqmxDrs6Irj0iyLQc/xbsyqslad0VhIr4ucOlI8RmdZXjdXil/V
nNvU2SQKalqjgzoH69G6qcSjGQmxB+y9UljF/IYRC3g3nXRisKHpisaMyzySaFc1
MCFAzoyAVhvVRCt7Gq6aS6POHSzVfJb7uPhRY1PShziWn/dzdJLhj9c6XEU1uUKa
nV7RRomTIxnIkbpXAQ6bCBgVEHKQj26dnFH0FoT5AuCYxBeBTX3ghXIdmPKraVYd
55xCs9H0OTSgXmUwIGdKKkJsxAGqkZrhjlMSlZG3n8+C650T1xEQDimG0wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOH3R26Kr6/4TJhiaiNcTd1AsKb+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2E3NzE1
Ni0xMDVmLTQ4YWUtOGZjMS05N2Q4ZDhmOGQ5N2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYTc3MTU2
LTEwNWYtNDhhZS04ZmMxLTk3ZDhkOGY4ZDk3Yy8xLzRmZEhib3F2cl9oTW1HSnFJ
MXhOM1VDd3B2NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA1Bh/MA0GCSqGSIb3DQEBCwUAA4IBAQBXff8K
minUQ9qX5bCiLEBfpPEng1IcVXGUeSt8aTpCzjx+D0jYI4WFU/fCLDO+kLGZndMc
KlkcItaJyvbSNGL3n/zMfsIXYWqy8eUVfd6t+tcxjZ3OBEkwRT9MlhOwQnAhNUR/
eWpkx9u8FT2PAxvz6huqUCfpMDAqPFNWWpVkF4kPuSrqCrn6A6E+o8DuBro6ONU3
6VwuEvX7lbR2fM/Ep3HxTa9HvO+nJI95ro+8EW8F3n4DvpnqyIZrubLefOMD0rM1
TU+TLP6/FhEAEMM5oGBV1eM57rpYv/pOG6kF6pXg7c1f3LHeE9Eoe0YmA3TqoKnv
GR6FM/A0XUE/zZG0
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:49 2023 by rpki-client on console-ams.rpki-client.org