Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7jI1ksSqJVGNe-AleMqiRKZLgaY.cer
File: 7jI1ksSqJVGNe-AleMqiRKZLgaY.cer (raw, json)
Hash identifier: 9sCQGjetuCiYKD8zkkNIBs7DlrCHYHVbnNA6sqqH5WE=
Subject key identifier: EE:32:35:92:C4:AA:25:51:8D:7B:E0:25:78:CA:A2:44:A6:4B:81:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED49B028AFF4E357E422CC622B2FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/dbe02b-172d-4343-a0a6-570bfb64ac0e/1/7jI1ksSqJVGNe-AleMqiRKZLgaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/dbe02b-172d-4343-a0a6-570bfb64ac0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.213.0/24
IP: 2a12:22c0::/29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 12:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d4:9b:02:8a:ff:4e:35:7e:42:2c:c6:22:b2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee323592c4aa25518d7be02578caa244a64b81a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:76:32:31:a7:78:a9:9c:f6:0d:3d:99:d4:
bf:78:db:7a:5b:75:0d:27:84:9e:4b:6b:7f:70:50:
0f:e5:51:7d:3f:37:2b:50:43:d3:af:4b:29:cd:d4:
ca:3f:ab:ec:e1:70:53:16:8d:0c:c7:1e:0c:e4:5d:
11:89:a8:26:f9:69:c7:4d:f7:0b:0c:27:c2:2c:6d:
fa:01:1d:9f:b9:71:92:1d:79:9e:90:36:8d:0b:6b:
49:13:91:21:67:e2:86:73:11:af:b2:7a:df:a1:71:
ca:b0:67:1b:20:75:f3:4f:79:6c:64:b0:cd:b5:d4:
28:4a:f0:9c:73:c8:ae:e9:56:50:3c:50:18:9d:69:
db:be:a8:83:f3:79:73:00:4e:f7:00:0f:5b:38:d8:
1d:eb:70:c5:58:ed:cc:b9:fb:58:24:c1:b0:b9:17:
8e:02:bd:60:0d:d4:48:f4:4b:1e:7b:9f:bc:77:f9:
04:52:ae:a2:4c:e1:35:13:60:ae:dd:14:16:0d:fe:
4c:b6:70:6d:15:e9:ef:51:10:30:39:b3:dc:55:7e:
7e:22:42:f9:32:c4:41:a1:52:9d:62:71:16:2f:d0:
44:3c:62:ad:97:75:46:55:6e:77:b1:0a:75:65:ea:
87:c6:c2:31:bf:af:f1:dd:97:15:2a:0d:37:f7:29:
86:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:32:35:92:C4:AA:25:51:8D:7B:E0:25:78:CA:A2:44:A6:4B:81:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/dbe02b-172d-4343-a0a6-570bfb64ac0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/dbe02b-172d-4343-a0a6-570bfb64ac0e/1/7jI1ksSqJVGNe-AleMqiRKZLgaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.213.0/24
IPv6:
2a12:22c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:af:a1:64:ec:9c:0f:7f:3c:d5:55:ea:9d:90:4e:bb:e4:87:
1a:c3:e5:7b:3d:44:01:1d:94:65:ac:d1:b4:e9:dc:60:48:42:
04:9c:dd:ee:20:83:32:4b:94:84:8e:48:20:49:8d:8b:be:e2:
89:5f:f0:ba:a2:63:96:1b:53:12:57:ae:7e:4a:01:60:ea:0a:
69:f6:65:fc:4e:c7:54:23:3d:7c:00:9c:8f:4c:3f:d5:49:0d:
8f:71:bc:27:fb:1d:61:b0:ac:7f:4f:9a:d9:0b:95:5b:4e:51:
27:a5:dd:2d:34:a6:7d:82:62:47:ed:3a:8e:5e:6b:15:05:23:
f6:c3:db:52:de:96:4d:88:dc:53:40:d6:7f:56:e1:91:ba:af:
c9:d5:8d:ce:9a:4f:f2:75:68:22:78:e8:62:8b:38:ae:57:45:
41:2a:a5:0b:0d:86:6e:ef:21:a0:47:db:0a:47:c1:6e:75:f4:
65:27:4e:1b:f2:20:12:ca:bc:52:ab:db:f0:53:d2:ba:1a:dc:
a2:5f:d8:a5:6c:1b:e0:1a:ed:c6:ef:b6:7e:ea:c6:20:ea:3d:
0a:d4:cf:6e:50:9a:97:e7:d0:b9:23:cf:04:1c:6c:52:c8:94:
c4:37:67:16:22:15:95:49:75:e6:80:e4:67:a1:6d:ee:fc:7d:
60:86:aa:ab
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFbtSbAor/TjV+QizGIrL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTMyMzU5MmM0YWEyNTUxOGQ3YmUwMjU3OGNhYTI0NGE2NGI4MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kV2MjGneKmc9g09mdS/eNt6W3UN
J4SeS2t/cFAP5VF9PzcrUEPTr0spzdTKP6vs4XBTFo0Mxx4M5F0Riagm+WnHTfcL
DCfCLG36AR2fuXGSHXmekDaNC2tJE5EhZ+KGcxGvsnrfoXHKsGcbIHXzT3lsZLDN
tdQoSvCcc8iu6VZQPFAYnWnbvqiD83lzAE73AA9bONgd63DFWO3MuftYJMGwuReO
Ar1gDdRI9Esee5+8d/kEUq6iTOE1E2Cu3RQWDf5MtnBtFenvURAwObPcVX5+IkL5
MsRBoVKdYnEWL9BEPGKtl3VGVW53sQp1ZeqHxsIxv6/x3ZcVKg039ymG8wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFO4yNZLEqiVRjXvgJXjKokSmS4GmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2RiZTAy
Yi0xNzJkLTQzNDMtYTBhNi01NzBiZmI2NGFjMGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvZGJlMDJi
LTE3MmQtNDM0My1hMGE2LTU3MGJmYjY0YWMwZS8xLzdqSTFrc1NxSlZHTmUtQWxl
TXFpUktaTGdhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQABSrVMA0EAgACMAcDBQMqEiLAMA0GCSqGSIb3
DQEBCwUAA4IBAQBgr6Fk7JwPfzzVVeqdkE675Icaw+V7PUQBHZRlrNG06dxgSEIE
nN3uIIMyS5SEjkggSY2LvuKJX/C6omOWG1MSV65+SgFg6gpp9mX8TsdUIz18AJyP
TD/VSQ2Pcbwn+x1hsKx/T5rZC5VbTlEnpd0tNKZ9gmJH7TqOXmsVBSP2w9tS3pZN
iNxTQNZ/VuGRuq/J1Y3Omk/ydWgieOhiiziuV0VBKqULDYZu7yGgR9sKR8FudfRl
J04b8iASyrxSq9vwU9K6GtyiX9ilbBvgGu3G77Z+6sYg6j0K1M9uUJqX59C5I88E
HGxSyJTEN2cWIhWVSXXmgORnoW3u/H1ghqqr
-----END CERTIFICATE-----
Generated at Tue Apr 9 17:28:24 2024 by rpki-client on console-fra.rpki-client.org