Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.cer
File: 8mhiy8WLTaRPcZUlVGSo2VRf7QQ.cer (raw, json)
Hash identifier: 4Sw9S2i6xCf23MIgU2EXr74jCQPlqximxDiABNWppGc=
Subject key identifier: F2:68:62:CB:C5:8B:4D:A4:4F:71:95:25:54:64:A8:D9:54:5F:ED:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D67E19166EB674E3E9645F87882048
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.212.225.0/24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:7e:19:16:6e:b6:74:e3:e9:64:5f:87:88:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f26862cbc58b4da44f7195255464a8d9545fed04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:68:1e:64:d8:18:c8:ba:95:10:46:51:4d:
58:23:83:c2:16:77:10:6c:46:db:d8:99:5e:b9:c9:
3c:4a:da:ef:1f:a3:de:02:39:00:e0:96:25:60:b4:
3c:af:47:fe:15:98:94:2c:86:9e:16:3f:12:ba:e4:
b6:96:1a:4c:f0:bb:e6:fc:91:3a:d4:c2:30:7b:c4:
0d:70:38:a8:85:f1:3b:c1:70:f2:7a:27:99:c2:f5:
fc:43:ac:58:99:84:a8:5c:ba:f7:4a:d8:64:96:7e:
7e:eb:1c:dc:19:a5:c1:5f:1e:72:f5:57:ae:16:3a:
91:bf:f3:71:2e:1e:59:11:8c:1b:67:3f:03:4b:c4:
2f:b4:12:f7:ea:42:7a:04:2c:a9:25:2c:2d:36:50:
c0:b5:09:57:08:a0:db:4c:01:be:4c:72:f6:f0:f5:
e7:c6:78:f8:3a:56:e4:76:23:4c:36:44:94:6a:28:
66:1e:36:ad:be:d5:f2:c7:cd:b5:55:eb:d7:e3:93:
7e:78:fe:8f:a0:42:ea:31:10:3d:41:c5:4f:bb:d9:
7a:4c:2a:4b:c8:57:84:c7:76:5b:47:f5:ec:d6:28:
e5:7b:7b:06:a8:d5:f5:bc:67:46:a6:d1:0a:53:c9:
82:80:01:0c:a0:9c:6a:82:6b:83:14:b0:dd:68:57:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:68:62:CB:C5:8B:4D:A4:4F:71:95:25:54:64:A8:D9:54:5F:ED:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/80dfb2-948b-4214-82ed-ac7012cf1dcd/1/8mhiy8WLTaRPcZUlVGSo2VRf7QQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.225.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2c:06:16:75:74:c8:33:03:d5:06:f9:82:f2:10:e7:32:65:
d0:61:ac:e7:30:98:d1:38:e4:f6:76:ea:7e:46:43:12:d6:1f:
90:68:b7:b9:d4:05:f0:44:f5:4b:12:9e:b5:8d:53:f0:1a:2e:
cb:b9:3d:1f:35:6e:da:cb:be:a7:4d:00:cb:d7:54:83:04:36:
70:68:0f:15:47:23:0b:4f:1b:ae:a3:4f:b4:01:fa:ca:4c:92:
83:1c:da:61:34:03:c6:b1:8d:bd:9c:77:5e:8b:1e:c9:75:e0:
dd:52:39:80:23:99:5e:09:7a:fc:8d:c1:e2:2c:ef:84:7f:66:
93:ba:9b:8b:57:cf:47:b5:ac:65:1a:c5:ec:02:07:17:81:4f:
24:5f:a7:c4:fc:18:e5:60:d8:59:2d:72:6c:14:66:ee:43:c6:
a6:e2:9b:56:d4:ff:13:70:a9:28:7e:4f:e6:bb:e5:44:5f:2f:
66:a8:d2:23:05:d5:6c:22:c9:7a:44:8b:f7:f0:44:16:4b:dc:
a0:85:e1:75:0f:ef:06:b5:64:60:ed:ab:3f:46:50:ef:da:b1:
d1:13:a4:1a:d5:d6:46:e2:eb:f7:86:ba:a6:5b:35:39:08:e7:
ce:05:9c:46:a0:4c:99:30:3e:0c:6a:f0:a4:b2:65:8a:0b:4a:
7a:fc:b7:2e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVx1n4ZFm62dOPpZF+HiCBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjY4NjJjYmM1OGI0ZGE0NGY3MTk1MjU1NDY0YThkOTU0NWZlZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC5oHmTYGMi6lRBGUU1YI4PCFncQ
bEbb2Jleuck8StrvH6PeAjkA4JYlYLQ8r0f+FZiULIaeFj8SuuS2lhpM8Lvm/JE6
1MIwe8QNcDiohfE7wXDyeieZwvX8Q6xYmYSoXLr3Sthkln5+6xzcGaXBXx5y9Veu
FjqRv/NxLh5ZEYwbZz8DS8QvtBL36kJ6BCypJSwtNlDAtQlXCKDbTAG+THL28PXn
xnj4OlbkdiNMNkSUaihmHjatvtXyx821VevX45N+eP6PoELqMRA9QcVPu9l6TCpL
yFeEx3ZbR/Xs1ijle3sGqNX1vGdGptEKU8mCgAEMoJxqgmuDFLDdaFebfQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPJoYsvFi02kT3GVJVRkqNlUX+0EMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3LzgwZGZi
Mi05NDhiLTQyMTQtODJlZC1hYzcwMTJjZjFkY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvODBkZmIy
LTk0OGItNDIxNC04MmVkLWFjNzAxMmNmMWRjZC8xLzhtaGl5OFdMVGFSUGNaVWxW
R1NvMlZSZjdRUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAstThMA0GCSqGSIb3DQEBCwUAA4IBAQCeLAYW
dXTIMwPVBvmC8hDnMmXQYaznMJjROOT2dup+RkMS1h+QaLe51AXwRPVLEp61jVPw
Gi7LuT0fNW7ay76nTQDL11SDBDZwaA8VRyMLTxuuo0+0AfrKTJKDHNphNAPGsY29
nHdeix7JdeDdUjmAI5leCXr8jcHiLO+Ef2aTupuLV89HtaxlGsXsAgcXgU8kX6fE
/BjlYNhZLXJsFGbuQ8am4ptW1P8TcKkofk/mu+VEXy9mqNIjBdVsIsl6RIv38EQW
S9ygheF1D+8GtWRg7as/RlDv2rHRE6Qa1dZG4uv3hrqmWzU5COfOBZxGoEyZMD4M
avCksmWKC0p6/Lcu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-fra.rpki-client.org