Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9EV_vhDrKubg-Nx-pi1w8zFsNds.cer
File: 9EV_vhDrKubg-Nx-pi1w8zFsNds.cer (raw, json)
Hash identifier: qB0Jax86RHe6uDZmP8omv1uKsOUr3kk7mf0pQmqfh4Y=
Subject key identifier: F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F250E89621D0331EDFB503E3CD605
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 109.205.191.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:25:0e:89:62:1d:03:31:ed:fb:50:3e:3c:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4457fbe10eb2ae6e0f8dc7ea62d70f3316c35db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:55:8f:ad:be:62:4a:4d:e3:d4:9c:31:47:
d9:34:67:b6:06:b8:31:f6:0c:2c:cf:8c:25:e1:ac:
f4:71:61:86:bc:b2:0e:c6:64:72:5e:ad:17:22:66:
3d:05:f0:80:b7:7f:2e:13:38:91:24:4a:9e:ba:8f:
b6:85:a9:d2:40:c9:d8:86:ee:b7:c2:47:4e:35:1d:
aa:30:e8:3c:8f:c1:68:ac:f5:98:76:0e:bb:7a:76:
43:78:6d:bd:1c:4b:37:cc:32:e6:6f:3f:fb:65:c5:
c8:49:6d:f3:40:3b:10:e1:09:50:51:ea:3a:ea:70:
5f:76:68:7e:d8:b9:00:6c:b4:21:96:1b:ea:d7:66:
f8:fb:a2:59:0b:55:12:2e:dd:9c:a9:c7:0d:d4:be:
be:ff:e5:58:3f:36:0d:84:5c:c2:34:d8:a3:11:a7:
5e:20:30:b2:7e:dd:2f:59:9f:92:8f:0f:55:1e:bd:
69:0a:7b:e7:25:52:d1:41:a0:1e:da:f7:aa:5e:b4:
70:c2:7f:96:31:58:6c:d2:3e:28:8f:d4:e1:48:45:
d7:ee:e2:67:ab:09:d3:16:90:0a:8f:83:39:28:1e:
6a:cd:0e:e4:ec:96:78:f3:e5:ca:e4:f8:8c:69:b8:
69:1f:88:29:17:e8:90:87:c1:87:5a:a3:b5:4d:d3:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:45:7F:BE:10:EB:2A:E6:E0:F8:DC:7E:A6:2D:70:F3:31:6C:35:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/945f0e-268e-4947-abb3-a9424d948251/1/9EV_vhDrKubg-Nx-pi1w8zFsNds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.191.0/24
Signature Algorithm: sha256WithRSAEncryption
22:42:2e:3c:79:56:ae:10:25:51:7f:f8:38:17:18:3a:c0:c3:
d0:2f:6b:52:af:93:79:85:4e:be:c0:36:f2:2f:9a:b4:11:60:
63:fb:95:94:3b:25:a3:d5:e2:27:98:81:6a:75:1b:19:ea:b7:
df:f8:6a:3c:e2:d2:fd:91:ca:82:d1:0e:77:38:81:04:c0:cb:
c7:4d:a0:60:e4:9e:dc:2a:26:b3:6d:23:e6:d1:15:0f:41:fa:
3f:27:3c:84:c0:f3:09:4e:26:21:38:1d:8d:d0:9c:04:6c:80:
c0:e4:52:0a:ab:e3:24:73:dc:99:c4:f1:84:fd:f0:21:b0:6c:
c9:c4:f1:30:ac:f5:a0:d1:8a:aa:2b:48:0b:d0:54:e9:f6:45:
1f:1c:05:aa:83:31:31:53:d7:9a:ee:0c:3d:6d:d1:ac:fd:b7:
49:ef:42:97:99:07:85:b2:fd:94:80:03:5a:60:f8:52:4b:3b:
1a:37:b8:e7:d9:00:5d:e4:24:c5:c4:47:a7:64:7f:1f:bf:b4:
b1:83:d0:08:2b:26:df:ae:6f:b4:e8:97:eb:8b:b0:24:16:49:
54:0a:4e:71:5c:2d:4e:de:18:76:9a:63:b5:cf:b1:9e:03:42:
96:0c:aa:c4:2b:9d:bc:22:76:d4:b9:01:c7:46:4c:cf:23:1f:
54:5c:f9:ef
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVsPyUOiWIdAzHt+1A+PNYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMjM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDQ1N2ZiZTEwZWIyYWU2ZTBmOGRjN2VhNjJkNzBmMzMxNmMzNWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi1Vj62+YkpN49ScMUfZNGe2Brgx
9gwsz4wl4az0cWGGvLIOxmRyXq0XImY9BfCAt38uEziRJEqeuo+2hanSQMnYhu63
wkdONR2qMOg8j8ForPWYdg67enZDeG29HEs3zDLmbz/7ZcXISW3zQDsQ4QlQUeo6
6nBfdmh+2LkAbLQhlhvq12b4+6JZC1USLt2cqccN1L6+/+VYPzYNhFzCNNijEade
IDCyft0vWZ+Sjw9VHr1pCnvnJVLRQaAe2veqXrRwwn+WMVhs0j4oj9ThSEXX7uJn
qwnTFpAKj4M5KB5qzQ7k7JZ48+XK5PiMabhpH4gpF+iQh8GHWqO1TdPq+wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPRFf74Q6yrm4PjcfqYtcPMxbDXbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzk0NWYw
ZS0yNjhlLTQ5NDctYWJiMy1hOTQyNGQ5NDgyNTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvOTQ1ZjBl
LTI2OGUtNDk0Ny1hYmIzLWE5NDI0ZDk0ODI1MS8xLzlFVl92aERyS3ViZy1OeC1w
aTF3OHpGc05kcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAbc2/MA0GCSqGSIb3DQEBCwUAA4IBAQAiQi48
eVauECVRf/g4Fxg6wMPQL2tSr5N5hU6+wDbyL5q0EWBj+5WUOyWj1eInmIFqdRsZ
6rff+Go84tL9kcqC0Q53OIEEwMvHTaBg5J7cKiazbSPm0RUPQfo/JzyEwPMJTiYh
OB2N0JwEbIDA5FIKq+Mkc9yZxPGE/fAhsGzJxPEwrPWg0YqqK0gL0FTp9kUfHAWq
gzExU9ea7gw9bdGs/bdJ70KXmQeFsv2UgANaYPhSSzsaN7jn2QBd5CTFxEenZH8f
v7Sxg9AIKybfrm+06Jfri7AkFklUCk5xXC1O3hh2mmO1z7GeA0KWDKrEK528InbU
uQHHRkzPIx9UXPnv
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:03 2024 by rpki-client on console-ams.rpki-client.org