Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-Ao92x5plHfcKmT896wUtWQT3s.cer
File: B-Ao92x5plHfcKmT896wUtWQT3s.cer (raw, json)
Hash identifier: PYFKa4Vml/7iH6oplNh3Aa8gN5i3htOHgtoa/1KJKMs=
Subject key identifier: 07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185B9DB12AE845A48049C6430F5C6A89313
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Jan 2023 09:13:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 210315
IP: 91.231.200.0/22
IP: 195.88.254.0/23
IP: 2a09:f840::/29
Validation: Failed, certificate revoked on Thu 21 Dec 2023 10:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:db:12:ae:84:5a:48:04:9c:64:30:f5:c6:a8:93:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 16 09:13:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07e028f76c79a651df70a993f3deb052d5904f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:bb:78:72:76:e6:75:0d:96:ae:a7:97:25:
40:5c:15:90:58:ff:dc:7b:d1:2e:68:e8:1d:39:58:
34:67:0e:a2:f0:17:5b:9b:e5:8c:76:93:6b:62:ee:
25:4e:c8:29:33:d1:e4:56:fb:24:58:e8:53:ff:bc:
ea:d2:b8:51:fd:cc:05:26:71:0b:72:d2:8a:bf:5b:
b0:fb:e7:e6:9a:e2:7e:38:a6:89:2b:65:de:e8:3c:
7e:83:17:e2:a9:33:ee:95:8c:8a:08:5e:c8:8b:9b:
c0:76:d0:46:cc:5e:d5:07:7d:b3:6b:a3:eb:38:ce:
10:22:75:f9:5d:71:58:df:66:4e:32:ff:fa:13:91:
4e:0d:48:f7:66:f6:eb:e5:56:d1:ed:e1:29:58:dd:
d6:9f:34:5a:b0:87:0b:79:94:c8:37:38:23:35:7d:
e2:b4:4e:7d:f8:f5:31:d8:5b:26:99:d6:9c:a3:9c:
43:07:bf:97:04:3a:73:42:11:eb:e9:75:72:c0:7a:
08:d0:a1:71:ad:67:5b:80:b4:20:22:02:1d:16:e6:
0f:d4:82:da:19:7d:a4:5b:c8:ff:a4:d5:00:f0:7b:
20:41:45:6b:1b:8d:7c:f4:e1:1a:a6:e3:5e:fc:0c:
9e:f6:1e:19:7e:3b:b3:0e:66:aa:da:d1:5c:14:5c:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:28:F7:6C:79:A6:51:DF:70:A9:93:F3:DE:B0:52:D5:90:4F:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3cc62-c044-4eaa-a8c4-71d66a8c7fe4/1/B-Ao92x5plHfcKmT896wUtWQT3s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.200.0/22
195.88.254.0/23
IPv6:
2a09:f840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210315
Signature Algorithm: sha256WithRSAEncryption
6c:42:70:f7:25:67:07:fd:ee:41:12:f3:bf:e6:d2:eb:95:a3:
c7:cf:f4:82:92:36:1d:f0:56:be:7c:18:2e:f0:e6:d6:0b:74:
5d:fc:85:70:f3:2b:42:d4:93:25:0c:ed:86:5b:31:05:5d:d7:
3a:eb:c9:b5:20:18:16:7a:ce:27:24:7c:8c:09:61:20:bd:e2:
7e:e2:5e:91:38:22:ff:60:ce:f4:63:d7:ca:21:ba:31:4e:e0:
51:65:1d:0d:bd:de:b0:4b:1b:3e:48:fc:b8:66:42:9f:ac:b9:
af:9c:1c:8d:e6:27:7e:af:37:7c:1b:eb:68:a9:6f:73:65:48:
fa:c6:0d:74:0c:d7:51:67:f9:4f:66:3f:29:f7:b0:8d:85:39:
13:af:64:a0:08:dc:81:d3:97:8f:77:31:5c:a9:98:48:6b:74:
da:d9:6a:26:c6:81:ca:a5:f2:aa:d3:c3:f2:0b:db:02:71:e3:
25:16:1b:41:28:fc:d8:98:a1:7c:7f:d8:70:a2:f3:83:08:7e:
c1:c4:3b:39:a0:74:b7:ef:35:24:01:8b:f5:6b:43:13:9f:d4:
fe:fb:71:94:48:32:35:07:f9:dd:ee:88:fd:13:1c:5a:34:01:
74:1a:45:2b:37:49:5c:61:25:26:2f:d6:7d:72:9f:a3:f1:26:
e5:97:5a:d6
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYW52xKuhFpIBJxkMPXGqJMTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTE2MDkxMzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2UwMjhmNzZjNzlhNjUxZGY3MGE5OTNmM2RlYjA1MmQ1OTA0ZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznK7eHJ25nUNlq6nlyVAXBWQWP/c
e9EuaOgdOVg0Zw6i8Bdbm+WMdpNrYu4lTsgpM9HkVvskWOhT/7zq0rhR/cwFJnEL
ctKKv1uw++fmmuJ+OKaJK2Xe6Dx+gxfiqTPulYyKCF7Ii5vAdtBGzF7VB32za6Pr
OM4QInX5XXFY32ZOMv/6E5FODUj3Zvbr5VbR7eEpWN3WnzRasIcLeZTINzgjNX3i
tE59+PUx2Fsmmdaco5xDB7+XBDpzQhHr6XVywHoI0KFxrWdbgLQgIgIdFuYP1ILa
GX2kW8j/pNUA8HsgQUVrG4189OEapuNe/Aye9h4ZfjuzDmaq2tFcFFwfVwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFAfgKPdseaZR33Cpk/PesFLVkE97MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2EzY2M2
Mi1jMDQ0LTRlYWEtYThjNC03MWQ2NmE4YzdmZTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvYTNjYzYy
LWMwNDQtNGVhYS1hOGM0LTcxZDY2YThjN2ZlNC8xL0ItQW85Mng1cGxIZmNLbVQ4
OTZ3VXRXUVQzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCW+fIAwQBw1j+MA0EAgACMAcDBQMqCfhAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM1izANBgkqhkiG9w0BAQsFAAOCAQEAbEJw
9yVnB/3uQRLzv+bS65Wjx8/0gpI2HfBWvnwYLvDm1gt0XfyFcPMrQtSTJQzthlsx
BV3XOuvJtSAYFnrOJyR8jAlhIL3ifuJekTgi/2DO9GPXyiG6MU7gUWUdDb3esEsb
Pkj8uGZCn6y5r5wcjeYnfq83fBvraKlvc2VI+sYNdAzXUWf5T2Y/KfewjYU5E69k
oAjcgdOXj3cxXKmYSGt02tlqJsaByqXyqtPD8gvbAnHjJRYbQSj82JihfH/YcKLz
gwh+wcQ7OaB0t+81JAGL9WtDE5/U/vtxlEgyNQf53e6I/RMcWjQBdBpFKzdJXGEl
Ji/WfXKfo/Em5Zda1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:08 2024 by rpki-client on console-ams.rpki-client.org