Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8RdcgR7p7i4KIPwdtKuKTWB0bls.cer
File: 8RdcgR7p7i4KIPwdtKuKTWB0bls.cer (raw, json)
Hash identifier: KpSOC3fsBEa8AkGh24B8my53gqSJQqk7B4byamu7BPc=
Subject key identifier: F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187937CC797BEEE9DC0E1D3AD32226DCB29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/8RdcgR7p7i4KIPwdtKuKTWB0bls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 18 Apr 2023 08:30:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.228.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:7c:c7:97:be:ee:9d:c0:e1:d3:ad:32:22:6d:cb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 18 08:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1175c811ee9ee2e0a20fc1db4ab8a4d60746e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0b:0d:e7:82:ba:d2:15:07:a1:74:39:9c:33:
d5:5a:ed:d7:de:ec:6e:f7:ac:02:4d:0e:d0:e5:13:
71:cc:0a:4b:fc:22:91:22:e1:b6:9a:59:62:f2:d5:
78:90:30:a8:27:02:03:ca:57:05:db:1e:d2:20:04:
3c:a4:12:5f:09:bb:0f:db:8a:c6:3e:b3:c7:c4:4f:
ae:92:d0:15:ad:dd:0c:f6:91:a5:41:37:bb:b9:1f:
26:15:37:d0:3e:fe:1a:de:e2:b2:c7:4a:bf:64:c8:
59:8d:ec:9d:91:8d:03:48:a9:1e:3b:d8:2d:70:86:
e8:72:36:39:bd:65:25:03:d4:40:28:04:86:f3:2a:
87:bb:22:44:a3:2e:b9:3d:74:fe:1a:c6:1b:b2:86:
95:25:e8:59:e3:a8:c6:40:a7:91:3d:a7:fe:4c:54:
a9:6a:34:d1:9d:e8:a4:27:fb:d9:de:e3:72:7f:d0:
26:9e:49:19:80:88:6e:4f:61:01:5f:ae:45:13:2a:
40:8a:a7:6e:a9:d9:99:4b:22:87:7d:1a:1e:4a:13:
d4:c5:f7:e2:a7:76:47:96:60:46:f9:ce:0f:d4:0a:
7a:df:c5:9f:6c:c7:cc:8e:16:3e:10:be:7f:8a:a2:
01:b9:96:b9:c8:9d:d6:22:47:82:9b:42:37:19:67:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:5C:81:1E:E9:EE:2E:0A:20:FC:1D:B4:AB:8A:4D:60:74:6E:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b03f14-a6c8-4fa5-a84f-892c735705f6/1/8RdcgR7p7i4KIPwdtKuKTWB0bls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.228.0/24
Signature Algorithm: sha256WithRSAEncryption
86:48:47:04:64:da:ef:da:b6:33:16:bd:92:06:41:50:b1:b6:
34:36:9c:e8:1c:eb:4b:5b:b9:ce:cf:d3:cb:1e:45:54:9b:e4:
a1:9b:de:23:21:11:40:68:01:37:34:4d:82:fa:01:d0:b7:0d:
e9:e8:d2:4c:a7:0a:c8:c3:fb:0f:74:f0:52:ee:bd:01:84:d2:
82:63:f4:e0:8f:56:da:c4:6c:32:37:1f:1c:d6:35:1b:c6:c7:
14:29:0a:ca:bc:69:ce:38:d1:d4:70:64:44:86:41:cc:8f:52:
4a:a4:67:3d:93:57:d2:b5:0b:be:d6:f0:d1:68:a5:65:d9:04:
eb:24:a5:02:4d:11:ee:57:e2:67:bc:da:ed:d9:20:61:26:d7:
c0:3c:ee:09:7e:4f:ae:25:0d:a1:c9:57:16:4b:cb:b3:41:5f:
1b:25:6f:30:ae:7c:b5:0b:59:50:ac:2f:38:3b:d1:d0:f3:90:
5d:ea:3b:dd:96:67:ef:c8:48:b5:c3:b0:bc:13:ad:d4:5d:07:
75:0a:65:25:14:5f:1c:65:32:13:a1:e5:5b:3c:6d:9a:f6:16:
d5:50:23:c4:95:8a:79:11:34:32:86:d5:14:9b:cf:97:1c:a0:
cf:bc:8d:cc:12:18:ee:9a:e1:a3:15:6d:d6:d6:f8:52:f9:13:
9a:db:6b:19
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYeTfMeXvu6dwOHTrTIibcspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDE4MDgzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE3NWM4MTFlZTllZTJlMGEyMGZjMWRiNGFiOGE0ZDYwNzQ2ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQsN54K60hUHoXQ5nDPVWu3X3uxu
96wCTQ7Q5RNxzApL/CKRIuG2mlli8tV4kDCoJwIDylcF2x7SIAQ8pBJfCbsP24rG
PrPHxE+uktAVrd0M9pGlQTe7uR8mFTfQPv4a3uKyx0q/ZMhZjeydkY0DSKkeO9gt
cIbocjY5vWUlA9RAKASG8yqHuyJEoy65PXT+GsYbsoaVJehZ46jGQKeRPaf+TFSp
ajTRneikJ/vZ3uNyf9AmnkkZgIhuT2EBX65FEypAiqduqdmZSyKHfRoeShPUxffi
p3ZHlmBG+c4P1Ap638WfbMfMjhY+EL5/iqIBuZa5yJ3WIkeCm0I3GWcl+QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPEXXIEe6e4uCiD8HbSrik1gdG5bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2IwM2Yx
NC1hNmM4LTRmYTUtYTg0Zi04OTJjNzM1NzA1ZjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvYjAzZjE0
LWE2YzgtNGZhNS1hODRmLTg5MmM3MzU3MDVmNi8xLzhSZGNnUjdwN2k0S0lQd2R0
S3VLVFdCMGJscy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW/LkMA0GCSqGSIb3DQEBCwUAA4IBAQCGSEcE
ZNrv2rYzFr2SBkFQsbY0NpzoHOtLW7nOz9PLHkVUm+Shm94jIRFAaAE3NE2C+gHQ
tw3p6NJMpwrIw/sPdPBS7r0BhNKCY/Tgj1baxGwyNx8c1jUbxscUKQrKvGnOONHU
cGREhkHMj1JKpGc9k1fStQu+1vDRaKVl2QTrJKUCTRHuV+JnvNrt2SBhJtfAPO4J
fk+uJQ2hyVcWS8uzQV8bJW8wrny1C1lQrC84O9HQ85Bd6jvdlmfvyEi1w7C8E63U
XQd1CmUlFF8cZTIToeVbPG2a9hbVUCPElYp5ETQyhtUUm8+XHKDPvI3MEhjumuGj
FW3W1vhS+ROa22sZ
-----END CERTIFICATE-----
Generated at Mon Dec 11 16:00:40 2023 by rpki-client on console-fra.rpki-client.org