Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BDBt7gKdidTTh8gNgYi7BMgvEsU.cer
File: BDBt7gKdidTTh8gNgYi7BMgvEsU.cer (raw, json)
Hash identifier: 4cU388arqvc/6Ny0m1u349PSFWK6rmvj5yq36QIDljc=
Subject key identifier: 04:30:6D:EE:02:9D:89:D4:D3:87:C8:0D:81:88:BB:04:C8:2F:12:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56E318344517F0E8908BA2C9FBE39D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:29:42 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 38984
IP: 185.23.228.0/22
IP: 188.65.232.0/21
IP: 195.135.236.0/22
IP: 2a03:7f00::/32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:59:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:31:83:44:51:7f:0e:89:08:ba:2c:9f:be:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04306dee029d89d4d387c80d8188bb04c82f12c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:0c:5b:ea:2b:21:ad:4b:57:d5:fb:5c:81:
5e:69:e6:e0:9d:78:8b:86:b7:f5:ed:d9:15:48:fd:
e7:2d:04:73:c5:48:4e:08:bf:1e:af:ed:9b:0f:92:
12:cf:c5:16:a9:bc:35:02:ad:17:36:0d:cd:86:e2:
41:87:a6:f2:73:f5:3a:c3:14:0b:da:66:8e:db:7f:
d1:10:e9:e2:47:02:e5:ed:12:a1:7d:50:94:14:05:
16:66:35:42:e9:c7:09:47:15:33:26:84:60:49:28:
e3:12:aa:f6:3d:55:1e:9a:2c:81:bc:c7:dd:7e:6b:
43:ef:ff:59:6b:17:54:08:a0:1d:80:29:97:20:1a:
4f:16:60:82:73:d6:f2:50:1f:da:f7:b2:be:78:38:
15:25:31:de:3e:31:61:dc:fd:2e:6c:41:ae:b8:da:
bf:6c:26:54:33:24:3d:0b:3c:e7:e3:60:ed:2e:eb:
a7:d4:43:0f:05:3a:97:9b:e8:0d:e5:f1:a4:64:2a:
2f:ce:2b:1c:4a:bc:c7:4c:84:c3:47:eb:70:26:01:
e6:37:6a:de:29:fa:4e:f9:7f:73:44:73:79:c3:41:
1f:09:bd:8b:93:39:5d:27:dd:ba:22:c8:22:70:3b:
de:b8:b6:d2:aa:51:32:62:47:13:0f:b6:47:38:0a:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:30:6D:EE:02:9D:89:D4:D3:87:C8:0D:81:88:BB:04:C8:2F:12:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ac7b15-c695-4bf3-bdc8-63a68e9473e1/1/BDBt7gKdidTTh8gNgYi7BMgvEsU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.228.0/22
188.65.232.0/21
195.135.236.0/22
IPv6:
2a03:7f00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38984
Signature Algorithm: sha256WithRSAEncryption
2d:f9:9e:05:6b:a9:d7:0f:f5:d9:9b:5e:b2:d0:fc:1f:41:af:
2d:36:51:21:c6:f2:ef:9e:3d:e4:20:f3:65:a9:41:a3:bc:35:
cc:f9:a2:c2:cc:87:a1:3d:d4:cb:a0:df:bc:4f:17:26:c9:5d:
4e:44:62:8a:55:3d:de:7d:6a:45:61:c6:fe:82:a6:db:1d:da:
33:2e:ae:39:af:4a:ac:93:db:03:e2:8a:9b:00:34:be:9b:0d:
57:1a:15:24:cf:f0:00:70:0d:26:9e:a4:fd:ab:63:ea:bb:9c:
47:24:bc:c9:90:c3:a8:08:08:e6:2a:37:6e:f6:55:16:38:2e:
75:49:5f:f0:72:9a:83:83:c8:a0:11:c3:c8:77:59:7c:5e:c7:
67:c5:52:37:64:04:11:be:35:4e:3b:e6:b0:a5:a2:d2:5c:cc:
28:c1:88:4e:08:ba:7e:ba:1f:04:7a:f0:1f:ef:0a:74:e3:60:
5e:07:f5:69:c0:14:50:36:76:24:55:d4:0d:79:db:d3:91:09:
4f:b7:3b:61:c2:b6:25:fb:26:73:cf:fc:db:1a:12:09:a2:a4:
d9:71:ca:0d:b3:b1:b7:f6:96:ef:6b:15:51:44:a7:c9:22:1c:
ac:7a:50:a6:5e:c1:e6:3b:71:5d:86:18:63:4f:bd:85:2c:29:
3f:17:10:f6
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYzFbjGDRFF/DokIuiyfvjnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDMwNmRlZTAyOWQ4OWQ0ZDM4N2M4MGQ4MTg4YmIwNGM4MmYxMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpYMW+orIa1LV9X7XIFeaebgnXiL
hrf17dkVSP3nLQRzxUhOCL8er+2bD5ISz8UWqbw1Aq0XNg3NhuJBh6byc/U6wxQL
2maO23/REOniRwLl7RKhfVCUFAUWZjVC6ccJRxUzJoRgSSjjEqr2PVUemiyBvMfd
fmtD7/9ZaxdUCKAdgCmXIBpPFmCCc9byUB/a97K+eDgVJTHePjFh3P0ubEGuuNq/
bCZUMyQ9Czzn42DtLuun1EMPBTqXm+gN5fGkZCovziscSrzHTITDR+twJgHmN2re
KfpO+X9zRHN5w0EfCb2LkzldJ926IsgicDveuLbSqlEyYkcTD7ZHOApqSwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFAQwbe4CnYnU04fIDYGIuwTILxLFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FjN2Ix
NS1jNjk1LTRiZjMtYmRjOC02M2E2OGU5NDczZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWM3YjE1
LWM2OTUtNGJmMy1iZGM4LTYzYTY4ZTk0NzNlMS8xL0JEQnQ3Z0tkaWRUVGg4Z05n
WWk3Qk1ndkVzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCuRfkAwQDvEHoAwQCw4fsMA0EAgACMAcDBQAq
A38AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCYSDANBgkqhkiG9w0BAQsFAAOC
AQEALfmeBWup1w/12ZtestD8H0GvLTZRIcby75495CDzZalBo7w1zPmiwsyHoT3U
y6DfvE8XJsldTkRiilU93n1qRWHG/oKm2x3aMy6uOa9KrJPbA+KKmwA0vpsNVxoV
JM/wAHANJp6k/atj6rucRyS8yZDDqAgI5io3bvZVFjgudUlf8HKag4PIoBHDyHdZ
fF7HZ8VSN2QEEb41TjvmsKWi0lzMKMGITgi6frofBHrwH+8KdONgXgf1acAUUDZ2
JFXUDXnb05EJT7c7YcK2Jfsmc8/82xoSCaKk2XHKDbOxt/aW72sVUUSnySIcrHpQ
pl7B5jtxXYYYY0+9hSwpPxcQ9g==
-----END CERTIFICATE-----
Generated at Tue Jan 9 18:34:35 2024 by rpki-client on console-fra.rpki-client.org