Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
File: 5sLVELjwVQenEULr-yOaUbJxepE.cer (raw, json)
Hash identifier: nO2CnAYl8h8nN/xXBL83xsM5vmXgrqP7n/hDs0PDSRM=
Subject key identifier: E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9BC6B004EECD00E33B1617CAB85CEF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:33:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.192.0/24
IP: 2a12:15c0::/29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 09:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6b:00:4e:ec:d0:0e:33:b1:61:7c:ab:85:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:6a:26:41:53:74:65:a4:6a:3c:55:da:9e:
ed:c5:20:37:29:84:0d:a2:aa:b0:e2:04:30:36:7e:
4c:cb:12:28:96:f5:d3:e2:2e:97:8c:6b:fb:a7:3b:
97:76:49:e2:76:83:5c:4d:f7:fd:2d:31:8f:33:5c:
71:31:c5:66:02:51:8f:c6:23:80:aa:b1:18:c2:5c:
1b:15:d0:0e:c6:aa:ec:83:a3:4f:c2:4f:22:71:87:
a6:00:84:12:f4:93:90:95:8c:b7:0a:e3:6a:f8:30:
a7:ce:bd:e8:83:25:68:06:f3:8b:32:4a:4b:65:ea:
56:71:28:dc:72:29:ef:01:fd:06:f0:7b:ea:90:41:
79:77:e6:13:2d:a0:ed:68:20:58:1b:40:86:db:28:
91:1a:2a:bb:55:6f:7e:4a:97:63:a5:c4:7a:cb:81:
62:0e:64:71:b3:0f:4b:23:a6:9d:82:64:54:31:8a:
2c:93:96:b5:58:d7:35:08:74:3f:54:b7:67:e3:b0:
12:b3:bd:3d:af:93:7f:12:ea:c3:47:3f:88:8e:f8:
04:29:da:52:66:e3:2d:db:2e:69:d1:3e:f4:55:51:
6d:4f:7c:62:e1:7f:8b:8a:70:55:83:ce:f7:2d:04:
5b:78:ca:ce:65:fb:2b:87:8c:a2:df:bb:79:a5:99:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.192.0/24
IPv6:
2a12:15c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:2b:a4:4a:44:31:ab:10:79:fd:50:29:82:19:93:53:18:8f:
fb:42:25:9c:e1:27:27:66:10:09:b9:16:f5:c9:7b:61:03:a5:
f8:cc:03:dc:18:d4:fd:99:80:9d:b5:13:1c:03:d6:9b:89:dc:
b2:6f:7b:24:56:24:f1:e7:cf:ab:af:29:f5:a6:f3:49:ee:89:
a9:12:b3:99:7c:ff:af:7b:6b:88:01:3f:9b:42:ee:16:2b:73:
d2:8e:b4:15:7b:af:11:39:30:ac:6a:b7:8a:e8:94:c1:f4:0b:
f9:82:02:de:42:26:f6:06:fd:06:52:8e:30:95:e7:6d:c5:9d:
cb:4c:62:ca:b9:21:dd:1c:4f:3c:c8:81:6a:c6:c0:93:d9:50:
65:7c:b9:01:64:92:71:ec:f4:aa:a5:8c:15:b3:29:7e:87:fb:
23:e9:d0:f5:27:d8:64:ef:ad:dd:3c:cd:b0:fe:6c:68:da:3f:
49:9a:c7:b0:a3:10:6f:1b:bf:f6:35:83:de:69:65:ad:98:c9:
05:54:0c:7b:e1:ef:e0:27:fd:5d:2e:1f:3f:ae:37:3c:a4:58:
54:39:ff:c0:e0:44:f5:ef:60:ec:e9:86:22:b9:34:fd:bf:1e:
e2:3c:0b:20:d7:1c:b0:f9:ee:f2:0b:03:7c:74:ce:ef:4c:d5:
fc:66:64:df
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzJvGsATuzQDjOxYXyrhc75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTAzMzM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmMyZDUxMGI4ZjA1NTA3YTcxMTQyZWJmYjIzOWE1MWIyNzE3YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud1qJkFTdGWkajxV2p7txSA3KYQN
oqqw4gQwNn5MyxIolvXT4i6XjGv7pzuXdknidoNcTff9LTGPM1xxMcVmAlGPxiOA
qrEYwlwbFdAOxqrsg6NPwk8icYemAIQS9JOQlYy3CuNq+DCnzr3ogyVoBvOLMkpL
ZepWcSjccinvAf0G8HvqkEF5d+YTLaDtaCBYG0CG2yiRGiq7VW9+SpdjpcR6y4Fi
DmRxsw9LI6adgmRUMYosk5a1WNc1CHQ/VLdn47ASs709r5N/EurDRz+IjvgEKdpS
ZuMt2y5p0T70VVFtT3xi4X+LinBVg873LQRbeMrOZfsrh4yi37t5pZl3GQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFObC1RC48FUHpxFC6/sjmlGycXqRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzZmZTEy
Yy1jYWMzLTQ3NWItOTI5OS1lNDc4YmFmOTUwZGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNmZlMTJj
LWNhYzMtNDc1Yi05Mjk5LWU0NzhiYWY5NTBkYi8xLzVzTFZFTGp3VlFlbkVVTHIt
eU9hVWJKeGVwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQABSrAMA0EAgACMAcDBQMqEhXAMA0GCSqGSIb3
DQEBCwUAA4IBAQBJK6RKRDGrEHn9UCmCGZNTGI/7QiWc4ScnZhAJuRb1yXthA6X4
zAPcGNT9mYCdtRMcA9abidyyb3skViTx58+rryn1pvNJ7ompErOZfP+ve2uIAT+b
Qu4WK3PSjrQVe68ROTCsareK6JTB9Av5ggLeQib2Bv0GUo4wledtxZ3LTGLKuSHd
HE88yIFqxsCT2VBlfLkBZJJx7PSqpYwVsyl+h/sj6dD1J9hk763dPM2w/mxo2j9J
msewoxBvG7/2NYPeaWWtmMkFVAx74e/gJ/1dLh8/rjc8pFhUOf/A4ET172Ds6YYi
uTT9vx7iPAsg1xyw+e7yCwN8dM7vTNX8ZmTf
-----END CERTIFICATE-----
Generated at Tue Apr 9 12:12:01 2024 by rpki-client on console-ams.rpki-client.org