Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer
File: 6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer (raw, json)
Hash identifier: YTCjGUlWnEqhkXoalZKr9C6jLA+Wxs7hJt2MRWO0zaw=
Subject key identifier: EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0188456EA2FB694B167EE80FB30CD9D3C6B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.co/repo/Pudu/0/EAD264C4A27C6BF24AE80E57C50BD86D4B72B06E.mft
caRepository: rsync://rpki.co/repo/Pudu/0/
Notify URL: https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before: Mon 22 May 2023 21:47:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 47689
AS: 210761
IP: 64.187.208.0/23
IP: 91.193.114.0/24
IP: 2a06:a340::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:45:6e:a2:fb:69:4b:16:7e:e8:0f:b3:0c:d9:d3:c6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 21:47:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:97:e7:ea:3f:e4:e3:f0:b1:4c:15:e9:ea:
60:86:c4:7b:76:9b:87:01:e5:93:12:da:bb:7d:fd:
25:0b:7c:57:1d:37:dc:1b:7c:fb:c7:7b:df:3d:46:
2b:80:4c:a3:96:2c:88:31:4f:c7:33:10:b3:c8:45:
29:d4:a0:2d:18:12:3c:c6:dc:25:ca:f4:52:7a:e6:
42:5c:4b:dc:da:c1:17:88:c0:e9:67:77:ae:25:b4:
0f:08:c6:97:4e:e3:7a:cd:51:e4:a7:8d:d9:b3:d6:
01:67:5d:50:c6:75:71:91:11:01:e1:fd:a9:b8:19:
4b:72:2f:91:05:d4:3d:a5:d6:df:70:03:7d:25:2d:
b7:fc:f7:ac:63:9a:0d:cf:73:97:6e:b8:83:39:de:
52:8c:0e:c1:d8:4e:22:9f:2a:c7:d3:73:83:3c:22:
fa:e6:81:1b:b4:e7:dc:5b:11:40:f9:00:9b:c1:ed:
3e:07:83:47:e0:69:bc:0d:ec:8c:5a:73:5f:2d:26:
68:ae:38:40:e7:2e:af:a6:93:f5:85:05:6d:88:f8:
45:c9:4e:c6:5a:30:65:17:72:c1:91:0d:08:6b:4c:
47:5a:bf:1d:dc:16:0f:7c:8d:49:28:60:df:12:6c:
1f:b1:3f:b7:28:c3:5b:fe:50:b2:d3:86:3c:c5:d6:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/Pudu/0/
RPKI Manifest - URI:rsync://rpki.co/repo/Pudu/0/EAD264C4A27C6BF24AE80E57C50BD86D4B72B06E.mft
RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.187.208.0/23
91.193.114.0/24
IPv6:
2a06:a340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47689
210761
Signature Algorithm: sha256WithRSAEncryption
ac:87:14:0a:84:2b:ca:47:f7:80:d7:12:df:92:76:53:2e:7b:
33:0f:72:d0:95:69:4b:86:50:b4:71:3b:9c:4f:4b:26:61:0c:
ee:3b:ad:dd:06:68:f1:b9:2f:84:79:c6:30:e4:00:02:c7:82:
1e:12:37:3c:cf:a6:6b:3e:f3:20:e3:ad:16:8e:96:27:9b:f9:
52:f4:72:c6:c7:ca:00:c9:5a:f3:9b:86:75:df:b8:8a:21:7c:
0a:59:02:9d:a9:7e:6a:39:b0:48:af:ad:16:27:7c:df:4f:d9:
c7:33:ee:dc:0d:b9:31:1c:34:5a:9d:b2:bf:24:06:09:ae:b5:
c6:b8:7c:15:0e:27:74:b9:f9:19:14:57:a2:aa:8d:71:b4:90:
60:32:40:7c:52:ab:20:b4:48:26:d7:fc:c4:57:70:2a:21:fd:
07:33:4e:6c:d7:03:a5:a4:04:45:04:84:f7:e5:30:cc:3b:3c:
cf:3d:e4:25:8f:5e:8d:9f:ca:5c:be:c9:94:45:ec:d0:b6:1d:
62:93:e9:ff:ca:73:5d:47:c6:a1:4f:9b:e5:65:61:4e:f0:22:
71:58:a5:4e:c2:54:5f:98:7c:cb:93:61:82:38:4b:91:be:2d:
a5:d0:c6:81:e0:cd:8d:2f:3f:0a:57:af:0b:37:fe:a2:3d:f5:
af:b3:88:c1
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAYhFbqL7aUsWfugPswzZ08a0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTIyMjE0NzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWQyNjRjNGEyN2M2YmYyNGFlODBlNTdjNTBiZDg2ZDRiNzJiMDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ROX5+o/5OPwsUwV6epghsR7dpuH
AeWTEtq7ff0lC3xXHTfcG3z7x3vfPUYrgEyjliyIMU/HMxCzyEUp1KAtGBI8xtwl
yvRSeuZCXEvc2sEXiMDpZ3euJbQPCMaXTuN6zVHkp43Zs9YBZ11QxnVxkREB4f2p
uBlLci+RBdQ9pdbfcAN9JS23/PesY5oNz3OXbriDOd5SjA7B2E4inyrH03ODPCL6
5oEbtOfcWxFA+QCbwe0+B4NH4Gm8DeyMWnNfLSZorjhA5y6vppP1hQVtiPhFyU7G
WjBlF3LBkQ0Ia0xHWr8d3BYPfI1JKGDfEmwfsT+3KMNb/lCy04Y8xdZ0swIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFOrSZMSifGvySugOV8UL2G1LcrBuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgcgGCCsGAQUFBwELBIG7MIG4MCgGCCsGAQUFBzAFhhxyc3lu
YzovL3Jwa2kuY28vcmVwby9QdWR1LzAvMFQGCCsGAQUFBzAKhkhyc3luYzovL3Jw
a2kuY28vcmVwby9QdWR1LzAvRUFEMjY0QzRBMjdDNkJGMjRBRTgwRTU3QzUwQkQ4
NkQ0QjcyQjA2RS5tZnQwNgYIKwYBBQUHMA2GKmh0dHBzOi8vcnJkcC5ycGtpLmNv
L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElK
bkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0Bggr
BgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAUC70AMEAFvBcjANBAIAAjAHAwUDKgaj
QDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAukkCAwM3STANBgkqhkiG9w0BAQsF
AAOCAQEArIcUCoQrykf3gNcS35J2Uy57Mw9y0JVpS4ZQtHE7nE9LJmEM7jut3QZo
8bkvhHnGMOQAAseCHhI3PM+maz7zIOOtFo6WJ5v5UvRyxsfKAMla85uGdd+4iiF8
ClkCnal+ajmwSK+tFid830/ZxzPu3A25MRw0Wp2yvyQGCa61xrh8FQ4ndLn5GRRX
oqqNcbSQYDJAfFKrILRIJtf8xFdwKiH9BzNObNcDpaQERQSE9+UwzDs8zz3kJY9e
jZ/KXL7JlEXs0LYdYpPp/8pzXUfGoU+b5WVhTvAicVilTsJUX5h8y5NhgjhLkb4t
pdDGgeDNjS8/ClevCzf+oj31r7OIwQ==
-----END CERTIFICATE-----
Generated at Thu Nov 2 20:48:26 2023 by rpki-client on console-ams.rpki-client.org