Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
File: 8rHa_EVYgkK_muEFyRrog6HEA7M.cer (raw, json)
Hash identifier: 86grlfrUI2bDWM58usoEyY2rskvu6mEhy8jd4lnvB7w=
Subject key identifier: F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC79545CF183BE61E0A874D79EF2CF6A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/8rHa_EVYgkK_muEFyRrog6HEA7M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:31:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.61.0/24
IP: 2a12:23c0::/29
Validation: Failed, certificate revoked on Mon 25 Mar 2024 14:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:45:cf:18:3b:e6:1e:0a:87:4d:79:ef:2c:f6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:54:dd:84:6f:86:69:a4:a5:f6:84:8c:e0:
67:02:fb:f2:3f:82:24:57:4b:86:2f:61:0d:4a:a4:
06:b2:cc:46:56:ac:cf:6c:c0:fa:f7:0e:8f:32:40:
3c:60:55:22:90:3f:b4:97:c0:9a:eb:79:70:04:64:
67:c6:fb:15:44:46:b3:d9:91:e4:7e:47:3d:62:5f:
e0:d7:cb:58:c5:44:8f:23:fb:f6:2a:d8:48:2f:9b:
2d:d0:77:ba:cd:b9:8c:fa:34:9b:84:90:29:aa:66:
5e:56:00:d9:02:7f:36:23:34:99:19:c4:73:b8:21:
65:71:77:6c:4b:dd:20:c8:fc:de:c1:53:84:e3:78:
3f:6d:26:d2:3d:ff:34:a3:89:67:2e:10:22:5a:5f:
2f:d2:8f:26:d6:3a:b8:f3:2b:cd:58:ee:30:46:e0:
1f:44:d8:02:c9:30:39:cb:fa:17:fc:5b:7c:16:1c:
fb:0f:57:2a:bc:6b:88:b9:99:af:1a:32:12:35:c7:
30:7d:34:24:c7:f6:2f:a5:38:bf:fc:a8:af:9d:91:
dc:34:39:db:f6:05:fd:7c:65:5d:86:3e:aa:26:d5:
00:2e:5c:63:60:fb:f4:75:d9:a3:2b:be:16:e0:3c:
25:95:ed:f8:e3:5b:76:93:27:df:75:3f:74:f4:13:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/8rHa_EVYgkK_muEFyRrog6HEA7M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.61.0/24
IPv6:
2a12:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:12:57:d0:49:52:ba:73:ac:05:e9:04:c2:2a:0c:76:db:ad:
bf:64:b7:00:da:bd:07:04:43:78:0f:9a:9c:ef:aa:db:48:81:
f3:07:48:d8:b4:4f:32:64:00:aa:c0:4e:2b:19:a8:da:4f:8b:
26:9d:1b:54:b3:a8:22:f1:1f:1f:ff:ed:c3:82:a7:81:7a:76:
2c:f3:77:1c:ed:ad:c1:84:6a:e7:18:11:68:54:cd:76:72:56:
a0:66:dd:57:70:ef:44:fe:75:ba:8d:f2:b7:7b:c7:6f:b9:c4:
64:96:7b:71:f5:85:ba:8f:43:a8:b4:2d:52:0c:1f:c7:cf:79:
69:6d:f0:e1:79:c7:c3:d2:5b:ff:59:8d:20:39:b6:b7:58:c4:
ea:8a:b8:f6:69:61:fc:fd:f6:68:57:d9:f1:2b:80:93:f0:50:
b4:15:90:68:1b:15:da:25:86:44:42:1f:a8:0c:95:ef:df:a5:
1d:8a:08:54:1a:f4:e9:e2:09:7a:65:cb:1a:24:a6:ff:df:98:
3e:09:5f:17:3e:61:c4:cf:f3:c7:94:90:29:d1:d2:df:7b:8b:
2a:5b:c3:45:45:10:91:25:39:79:82:3b:5c:f0:03:56:a9:12:
87:f2:29:ac:6e:00:4a:5d:2c:21:1c:49:dc:e3:14:ff:c9:a5:
53:f2:ab:e7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzHlUXPGDvmHgqHTXnvLPaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmIxZGFmYzQ1NTg4MjQyYmY5YWUxMDVjOTFhZTg4M2ExYzQwM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+9U3YRvhmmkpfaEjOBnAvvyP4Ik
V0uGL2ENSqQGssxGVqzPbMD69w6PMkA8YFUikD+0l8Ca63lwBGRnxvsVREaz2ZHk
fkc9Yl/g18tYxUSPI/v2KthIL5st0He6zbmM+jSbhJApqmZeVgDZAn82IzSZGcRz
uCFlcXdsS90gyPzewVOE43g/bSbSPf80o4lnLhAiWl8v0o8m1jq48yvNWO4wRuAf
RNgCyTA5y/oX/Ft8Fhz7D1cqvGuIuZmvGjISNccwfTQkx/YvpTi//KivnZHcNDnb
9gX9fGVdhj6qJtUALlxjYPv0ddmjK74W4Dwlle3441t2kyffdT909BMbwwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPKx2vxFWIJCv5rhBcka6IOhxAOzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzM1MGY1
NC1mNTBiLTQ1OGUtYWM4YS1kZDU1OGRhNjliZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvMzUwZjU0
LWY1MGItNDU4ZS1hYzhhLWRkNTU4ZGE2OWJkNy8xLzhySGFfRVZZZ2tLX211RUZ5
UnJvZzZIRUE3TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW9Q9MA0EAgACMAcDBQMqEiPAMA0GCSqGSIb3
DQEBCwUAA4IBAQApElfQSVK6c6wF6QTCKgx2262/ZLcA2r0HBEN4D5qc76rbSIHz
B0jYtE8yZACqwE4rGajaT4smnRtUs6gi8R8f/+3DgqeBenYs83cc7a3BhGrnGBFo
VM12clagZt1XcO9E/nW6jfK3e8dvucRklntx9YW6j0OotC1SDB/Hz3lpbfDhecfD
0lv/WY0gOba3WMTqirj2aWH8/fZoV9nxK4CT8FC0FZBoGxXaJYZEQh+oDJXv36Ud
ighUGvTp4gl6ZcsaJKb/35g+CV8XPmHEz/PHlJAp0dLfe4sqW8NFRRCRJTl5gjtc
8ANWqRKH8imsbgBKXSwhHEnc4xT/yaVT8qvn
-----END CERTIFICATE-----
Generated at Mon Mar 25 17:25:43 2024 by rpki-client on console-fra.rpki-client.org