Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AytF1GJQMh8taAHhzNiIYa_W1S4.cer
File: AytF1GJQMh8taAHhzNiIYa_W1S4.cer (raw, json)
Hash identifier: 9fiFggSxu0T+ikW/DQDJpJMZK0BYBdOpqGLQT7+dvWc=
Subject key identifier: 03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0A23F669B6D3EA68DF277B52206C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.135.0/24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 15:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:a2:3f:66:9b:6d:3e:a6:8d:f2:77:b5:22:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=032b45d46250321f2d6801e1ccd88861afd6d52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:ce:f4:c6:d3:38:f0:77:2b:e2:40:4a:db:
c8:3b:9b:eb:a9:4b:3f:01:ca:f4:19:ef:f9:68:1a:
5a:d8:c3:a9:34:3e:c1:f3:9a:2d:92:57:78:73:07:
09:8c:e4:01:cb:a0:a0:1a:68:1b:af:1f:10:e4:b9:
16:3b:63:fb:38:37:23:c6:08:1a:40:22:00:e3:55:
10:b8:c7:1d:91:19:11:6d:29:6e:b5:7d:38:cd:93:
0d:05:7e:c2:5b:6c:54:97:1d:9a:7b:e1:ac:1d:be:
be:97:b4:0f:51:ba:44:5b:3c:44:8b:05:65:14:c0:
4b:a8:be:5d:53:83:b8:c1:40:f1:ff:9b:9a:d8:04:
65:34:d8:9b:44:cf:93:86:51:e3:9c:df:0c:bc:29:
fa:17:8f:30:2b:83:59:48:34:0a:bd:c5:16:6a:46:
9a:f5:9d:15:0e:a7:f9:c8:db:3f:39:e5:53:61:17:
b7:5f:b7:fb:3b:72:32:de:51:b9:fe:ed:1a:e7:42:
e0:05:22:5e:0e:4e:29:46:3b:47:be:7f:b2:f6:bc:
a6:6f:d1:3a:a8:ad:6a:b3:ee:9b:40:61:0b:22:f1:
c7:bc:16:9e:f2:8e:bf:fd:f6:31:3a:ce:41:2b:cf:
c6:52:4c:1e:59:ad:bb:5b:b2:0e:a1:4c:80:3d:42:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2B:45:D4:62:50:32:1F:2D:68:01:E1:CC:D8:88:61:AF:D6:D5:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5e320a-2fb6-4c1f-ab8c-58247527a180/1/AytF1GJQMh8taAHhzNiIYa_W1S4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.135.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d5:94:dc:6e:fe:85:3f:cd:53:82:03:66:71:aa:05:91:99:
03:96:11:39:1d:92:52:a9:75:f2:f8:31:d6:21:ba:dd:b4:4c:
85:ee:61:1b:e8:19:6d:8e:bf:03:7f:c2:18:5f:02:fe:a5:96:
d8:54:37:ff:19:39:6c:30:a2:89:76:4b:a8:4e:7a:cd:77:8f:
9d:a1:70:79:63:96:fb:31:3c:11:6e:84:9a:f5:fe:03:69:fd:
cb:5d:57:9f:6f:04:13:4b:ed:05:6a:9f:a0:d8:9a:77:d1:3b:
a6:ba:b1:db:8f:b2:51:ab:e4:d0:fd:03:83:bc:13:51:ec:0d:
4e:08:0d:44:f3:0e:5f:a0:fc:7c:e0:ec:a4:1c:ab:4e:ab:0f:
cf:d4:51:70:2d:e5:d3:54:e4:44:de:1a:9d:ff:db:44:1e:3a:
9b:7d:1a:e4:7b:fc:c8:ae:7a:82:18:59:85:3d:1c:17:11:2c:
00:2c:05:56:72:6a:12:db:b3:5b:eb:22:90:83:7e:58:60:10:
bb:eb:e6:ac:fc:bc:4e:77:75:ea:38:9b:93:e4:e0:eb:f0:43:
7c:a9:f0:ad:90:65:b9:2a:4c:1f:b4:9f:f9:b9:38:32:14:35:
b2:b6:99:3e:cb:13:96:8a:13:65:59:01:f9:c0:5e:61:2b:be:
72:30:53:1a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVvsKI/ZpttPqaN8ne1IgbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzJiNDVkNDYyNTAzMjFmMmQ2ODAxZTFjY2Q4ODg2MWFmZDZkNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptPO9MbTOPB3K+JAStvIO5vrqUs/
Acr0Ge/5aBpa2MOpND7B85otkld4cwcJjOQBy6CgGmgbrx8Q5LkWO2P7ODcjxgga
QCIA41UQuMcdkRkRbSlutX04zZMNBX7CW2xUlx2ae+GsHb6+l7QPUbpEWzxEiwVl
FMBLqL5dU4O4wUDx/5ua2ARlNNibRM+ThlHjnN8MvCn6F48wK4NZSDQKvcUWakaa
9Z0VDqf5yNs/OeVTYRe3X7f7O3Iy3lG5/u0a50LgBSJeDk4pRjtHvn+y9rymb9E6
qK1qs+6bQGELIvHHvBae8o6//fYxOs5BK8/GUkweWa27W7IOoUyAPUL+5wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAMrRdRiUDIfLWgB4czYiGGv1tUuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzVlMzIw
YS0yZmI2LTRjMWYtYWI4Yy01ODI0NzUyN2ExODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvNWUzMjBh
LTJmYjYtNGMxZi1hYjhjLTU4MjQ3NTI3YTE4MC8xL0F5dEYxR0pRTWg4dGFBSGh6
TmlJWWFfVzFTNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAkhOHMA0GCSqGSIb3DQEBCwUAA4IBAQBA1ZTc
bv6FP81TggNmcaoFkZkDlhE5HZJSqXXy+DHWIbrdtEyF7mEb6Bltjr8Df8IYXwL+
pZbYVDf/GTlsMKKJdkuoTnrNd4+doXB5Y5b7MTwRboSa9f4Daf3LXVefbwQTS+0F
ap+g2Jp30TumurHbj7JRq+TQ/QODvBNR7A1OCA1E8w5foPx84OykHKtOqw/P1FFw
LeXTVORE3hqd/9tEHjqbfRrke/zIrnqCGFmFPRwXESwALAVWcmoS27Nb6yKQg35Y
YBC76+as/LxOd3XqOJuT5ODr8EN8qfCtkGW5KkwftJ/5uTgyFDWytpk+yxOWihNl
WQH5wF5hK75yMFMa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:07 2024 by rpki-client on console-ams.rpki-client.org