Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BKrqPvYZN523HUdrO5C74qbv0DY.cer
File: BKrqPvYZN523HUdrO5C74qbv0DY.cer (raw, json)
Hash identifier: U/+6wMXAU9tOiwln7uUYFho5M/ZvT+6BcsLa84wu2vo=
Subject key identifier: 04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D8977C40468F7088CD9FA972B02A657
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 41509
IP: 194.145.156.0/24
Validation: Failed, certificate revoked on Wed 08 Feb 2023 10:56:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:77:c4:04:68:f7:08:8c:d9:fa:97:2b:02:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04aaea3ef619379db71d476b3b90bbe2a6efd036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:c9:81:17:7b:85:df:35:1e:db:a0:de:35:
4a:31:10:89:92:36:1d:8e:81:e2:98:65:4f:8a:bd:
5f:09:e3:41:0f:b5:20:fa:00:c1:25:2d:7c:25:86:
ba:95:c2:e6:66:2e:a8:07:a5:22:62:88:4a:f0:0e:
cf:40:2c:a7:62:9e:46:d1:f0:07:48:36:32:b8:7d:
43:89:f6:8f:fe:f6:8f:08:1f:8a:18:f3:1d:0f:c9:
cc:ec:82:18:33:b5:34:78:a9:a8:c3:90:84:74:fe:
e8:8a:45:27:ca:18:b4:7e:1e:d6:15:64:b5:bd:0f:
e2:d3:ad:7d:96:94:60:3a:7a:3e:43:7e:79:92:6b:
70:73:dd:bd:51:06:1b:67:6b:b5:6b:4e:0e:5e:38:
9f:01:8d:6c:f2:50:22:63:fc:aa:91:59:39:b9:7c:
72:50:9c:9a:eb:71:f7:38:ca:65:f9:59:99:63:3b:
10:05:7b:66:15:57:e5:de:db:35:42:67:43:18:c6:
8a:29:81:3b:0c:d1:31:f1:d0:2a:68:bc:e8:35:ce:
b9:f1:94:ae:1e:25:45:f7:62:e1:12:04:6a:a1:60:
64:62:8e:45:15:6a:4a:c7:46:9d:dd:f6:5f:5e:5e:
dc:b4:5d:e3:c5:4a:46:51:14:fc:87:4a:0f:42:11:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:EA:3E:F6:19:37:9D:B7:1D:47:6B:3B:90:BB:E2:A6:EF:D0:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/894db9-488a-4b14-980e-df8536531711/1/BKrqPvYZN523HUdrO5C74qbv0DY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.156.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41509
Signature Algorithm: sha256WithRSAEncryption
2f:f6:63:42:e0:0f:af:07:14:33:1c:08:94:9e:79:8d:a6:b8:
38:e4:be:04:cb:32:b9:65:0c:42:d0:b3:72:9d:29:48:d0:78:
ac:a8:4c:db:55:4d:b1:b4:f5:97:f8:b3:8b:e9:fe:68:dd:b8:
43:ee:f5:7f:e1:60:fe:00:e0:0e:83:d8:50:d7:76:c5:a1:5b:
fe:78:fb:63:b6:a5:39:b4:fb:64:84:03:2c:e6:d0:38:08:e9:
22:3f:02:77:3b:8b:43:ea:1b:6d:a1:ff:03:73:a5:1e:24:df:
c8:58:bb:20:7b:dd:9e:24:b9:dd:89:98:15:f1:75:b6:f5:74:
a8:74:39:49:4d:b9:b2:58:79:87:f6:90:dd:ac:04:b8:5c:5b:
5e:02:6f:d0:26:ba:89:f7:c6:ad:e7:57:67:89:c7:cb:4d:5e:
46:ca:59:bc:4c:23:f8:da:13:7a:15:45:0f:58:f3:3c:fd:2c:
f5:d6:00:3b:19:8f:26:cb:c2:84:ce:22:6d:ca:60:7b:5a:ff:
5c:f6:80:a5:18:a1:39:c6:b8:60:04:26:40:f0:54:71:4e:62:
e0:3e:91:03:bc:cd:6e:62:c9:0a:6a:af:6a:38:fd:f1:ef:f3:
46:cd:db:73:ff:e1:f8:13:9f:c6:f5:b4:f4:2c:8e:48:9c:44:
da:f1:fa:95
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYVtiXfEBGj3CIzZ+pcrAqZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTMzMzIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGFhZWEzZWY2MTkzNzlkYjcxZDQ3NmIzYjkwYmJlMmE2ZWZkMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqazJgRd7hd81Htug3jVKMRCJkjYd
joHimGVPir1fCeNBD7Ug+gDBJS18JYa6lcLmZi6oB6UiYohK8A7PQCynYp5G0fAH
SDYyuH1DifaP/vaPCB+KGPMdD8nM7IIYM7U0eKmow5CEdP7oikUnyhi0fh7WFWS1
vQ/i0619lpRgOno+Q355kmtwc929UQYbZ2u1a04OXjifAY1s8lAiY/yqkVk5uXxy
UJya63H3OMpl+VmZYzsQBXtmFVfl3ts1QmdDGMaKKYE7DNEx8dAqaLzoNc658ZSu
HiVF92LhEgRqoWBkYo5FFWpKx0ad3fZfXl7ctF3jxUpGURT8h0oPQhGDVQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFASq6j72GTedtx1HazuQu+Km79A2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzg5NGRi
OS00ODhhLTRiMTQtOTgwZS1kZjg1MzY1MzE3MTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvODk0ZGI5
LTQ4OGEtNGIxNC05ODBlLWRmODUzNjUzMTcxMS8xL0JLcnFQdllaTjUyM0hVZHJP
NUM3NHFidjBEWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwpGcMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCiJTANBgkqhkiG9w0BAQsFAAOCAQEAL/ZjQuAPrwcUMxwIlJ55jaa4OOS+BMsy
uWUMQtCzcp0pSNB4rKhM21VNsbT1l/izi+n+aN24Q+71f+Fg/gDgDoPYUNd2xaFb
/nj7Y7alObT7ZIQDLObQOAjpIj8CdzuLQ+obbaH/A3OlHiTfyFi7IHvdniS53YmY
FfF1tvV0qHQ5SU25slh5h/aQ3awEuFxbXgJv0Ca6iffGredXZ4nHy01eRspZvEwj
+NoTehVFD1jzPP0s9dYAOxmPJsvChM4ibcpge1r/XPaApRihOca4YAQmQPBUcU5i
4D6RA7zNbmLJCmqvajj98e/zRs3bc//h+BOfxvW09CyOSJxE2vH6lQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:40 2024 by rpki-client on console-fra.rpki-client.org