Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8tm533B9TuVTu_4H41DkqD-5iV4.cer
File: 8tm533B9TuVTu_4H41DkqD-5iV4.cer (raw, json)
Hash identifier: NxmVvHWdEW+NmYuoPyZXeg2HCqjNMKMOuZc/4vaj73o=
Subject key identifier: F2:D9:B9:DF:70:7D:4E:E5:53:BB:FE:07:E3:50:E4:A8:3F:B9:89:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4D63936EF3E63A258DAF3FE404962
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/8tm533B9TuVTu_4H41DkqD-5iV4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.148.0/24
IP: 2a11:7cc0::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:d6:39:36:ef:3e:63:a2:58:da:f3:fe:40:49:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2d9b9df707d4ee553bbfe07e350e4a83fb9895e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:4b:70:6d:57:74:d1:5b:25:0c:be:1b:00:
98:5d:c1:95:66:55:2e:5a:ef:7c:3a:b3:18:22:67:
07:4f:8b:1f:66:e2:e7:83:c3:98:19:84:b9:80:ab:
1f:9c:70:c6:c3:5f:a7:71:d1:e5:d5:c9:3d:02:3a:
00:13:dc:3a:c2:e4:94:e9:6b:66:97:ae:40:bb:ca:
e4:63:72:cf:14:38:c3:f6:6e:92:06:40:e5:a2:ed:
d2:d8:6b:00:92:60:56:48:79:23:66:4c:ba:b0:85:
48:69:04:6c:4a:cb:b1:c8:b5:ae:ad:81:7e:07:a0:
b0:5c:d1:a5:ee:4c:3d:91:6c:3d:dd:fd:7c:ef:dc:
f0:f8:cb:f3:41:5a:3c:b2:db:e2:c2:13:33:8c:b0:
a6:6c:31:09:04:64:d4:27:14:dc:05:58:19:07:b0:
4e:b9:fe:65:27:c7:62:29:ae:64:5d:d1:10:08:f0:
7a:fc:66:dd:ea:34:14:ab:7f:bf:4e:e1:6c:35:fe:
21:d4:f9:a5:9f:4e:ea:62:79:25:21:e4:f2:8a:50:
ca:d9:d8:63:31:13:68:b8:7f:54:2d:73:53:37:91:
24:42:84:a5:d3:84:43:c5:00:f9:a4:50:d6:bc:c0:
25:61:70:ec:a9:c0:00:d4:6f:7c:07:5b:9a:27:b8:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:B9:DF:70:7D:4E:E5:53:BB:FE:07:E3:50:E4:A8:3F:B9:89:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0cc5de-fc04-4017-9bc0-4c45d9f1eaa0/1/8tm533B9TuVTu_4H41DkqD-5iV4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.148.0/24
IPv6:
2a11:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:27:1d:e3:31:fa:d6:a3:be:3a:a8:d0:b1:f3:1a:35:1f:6e:
79:c3:3c:6f:54:0b:bd:f3:bb:32:45:9b:2a:a3:ed:b7:06:3b:
14:22:1e:07:a8:ad:d4:b4:8f:de:bb:3f:8a:43:96:09:97:a4:
bd:3c:b3:8a:fc:db:8d:97:80:9e:aa:da:7b:5f:4a:5a:ff:af:
10:11:7d:1d:64:d4:c1:d6:a9:10:ce:5d:df:cf:c6:81:74:30:
0a:ad:a5:1c:a8:25:69:a7:81:c6:05:35:10:24:40:d2:d7:0b:
2d:05:71:da:40:7b:70:dd:b2:d5:86:ea:a2:49:73:ec:2f:2e:
4b:09:ea:e0:7a:74:e0:31:5d:3b:2e:95:3f:5a:16:1d:a0:78:
41:00:25:5f:72:5e:bb:eb:42:78:de:24:4d:93:d4:a5:bb:a3:
35:dc:17:89:cd:52:2e:d1:a4:f3:a9:72:77:f2:4f:ab:33:14:
ae:bb:71:5f:ef:70:4f:12:4b:6a:44:39:77:ee:64:64:b4:e9:
10:02:79:85:84:87:df:68:0a:f2:96:b4:d0:00:41:44:e4:cb:
76:48:7b:bf:b1:2f:ca:13:84:8e:4c:d0:75:6c:d0:de:35:bc:
51:53:d9:38:fb:b0:ab:f5:ef:4d:b1:0a:34:88:7b:02:0f:b3:
1e:ba:20:5e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9NY5Nu8+Y6JY2vP+QEliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmQ5YjlkZjcwN2Q0ZWU1NTNiYmZlMDdlMzUwZTRhODNmYjk4OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWlLcG1XdNFbJQy+GwCYXcGVZlUu
Wu98OrMYImcHT4sfZuLng8OYGYS5gKsfnHDGw1+ncdHl1ck9AjoAE9w6wuSU6Wtm
l65Au8rkY3LPFDjD9m6SBkDlou3S2GsAkmBWSHkjZky6sIVIaQRsSsuxyLWurYF+
B6CwXNGl7kw9kWw93f1879zw+MvzQVo8stviwhMzjLCmbDEJBGTUJxTcBVgZB7BO
uf5lJ8diKa5kXdEQCPB6/Gbd6jQUq3+/TuFsNf4h1Pmln07qYnklIeTyilDK2dhj
MRNouH9ULXNTN5EkQoSl04RDxQD5pFDWvMAlYXDsqcAA1G98B1uaJ7geeQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFPLZud9wfU7lU7v+B+NQ5Kg/uYleMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzBjYzVk
ZS1mYzA0LTQwMTctOWJjMC00YzQ1ZDlmMWVhYTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvMGNjNWRl
LWZjMDQtNDAxNy05YmMwLTRjNDVkOWYxZWFhMC8xLzh0bTUzM0I5VHVWVHVfNEg0
MURrcUQtNWlWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1W2UMA0EAgACMAcDBQMqEXzAMA0GCSqGSIb3
DQEBCwUAA4IBAQBdJx3jMfrWo746qNCx8xo1H255wzxvVAu987syRZsqo+23BjsU
Ih4HqK3UtI/euz+KQ5YJl6S9PLOK/NuNl4Ceqtp7X0pa/68QEX0dZNTB1qkQzl3f
z8aBdDAKraUcqCVpp4HGBTUQJEDS1wstBXHaQHtw3bLVhuqiSXPsLy5LCergenTg
MV07LpU/WhYdoHhBACVfcl6760J43iRNk9Slu6M13BeJzVIu0aTzqXJ38k+rMxSu
u3Ff73BPEktqRDl37mRktOkQAnmFhIffaArylrTQAEFE5Mt2SHu/sS/KE4SOTNB1
bNDeNbxRU9k4+7Cr9e9NsQo0iHsCD7MeuiBe
-----END CERTIFICATE-----
Generated at Thu Nov 9 16:25:08 2023 by rpki-client on console-fra.rpki-client.org