Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BVfX0Si5O47wZUqGUYqhwQUEqlA.cer
File: BVfX0Si5O47wZUqGUYqhwQUEqlA.cer (raw, json)
Hash identifier: e5Fxni/5YO3L6DuruaxS824Eo4ofB2s6zs45wRmbF7A=
Subject key identifier: 05:57:D7:D1:28:B9:3B:8E:F0:65:4A:86:51:8A:A1:C1:05:04:AA:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AFA259744F8F9F5BF1B4F3F672ACBE622
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/BVfX0Si5O47wZUqGUYqhwQUEqlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Oct 2023 10:04:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 216219
IP: 2a13:f740::/29
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:25:97:44:f8:f9:f5:bf:1b:4f:3f:67:2a:cb:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 4 10:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0557d7d128b93b8ef0654a86518aa1c10504aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:bf:6a:74:d1:cc:b0:12:90:32:42:78:65:
d1:3f:bb:07:c7:16:76:f1:9d:f3:78:71:e6:2d:9d:
a4:ad:6e:92:a4:10:a9:9a:a4:f0:35:92:3d:d9:e8:
79:49:03:13:8f:b7:f2:31:16:a2:29:04:85:74:8e:
3e:a7:0d:05:11:db:16:a1:f2:47:70:c8:16:14:08:
03:7a:b7:fa:52:b9:1d:f9:f0:e0:ff:df:40:27:a2:
59:54:7c:01:88:28:94:6c:2e:83:8f:ff:f3:b2:c1:
43:82:62:fd:8f:ac:47:7f:32:d7:c8:d1:ef:e9:30:
d0:08:70:3f:63:45:30:b6:ad:b7:62:86:f7:70:cd:
90:0c:c3:af:7b:6e:d8:39:c4:b3:eb:bb:ff:49:d2:
06:6b:79:f9:21:c1:58:51:41:59:46:59:90:6d:8d:
de:c4:78:aa:9f:1b:a3:c6:27:ba:33:bd:bc:27:47:
fb:97:98:15:c7:20:c8:df:2c:06:7a:bb:02:0a:2d:
52:55:0e:dd:30:80:f9:fb:74:32:ef:51:ea:60:81:
ed:70:3a:52:31:42:c7:70:71:d2:35:db:a2:c7:23:
af:cf:4f:cf:d5:96:8b:a1:af:e4:ea:5b:38:9e:4d:
37:f3:75:37:b7:da:dd:b4:2d:e7:32:d3:48:18:65:
de:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:57:D7:D1:28:B9:3B:8E:F0:65:4A:86:51:8A:A1:C1:05:04:AA:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/f504ca-74e3-491c-ac88-a5dd438daf8c/1/BVfX0Si5O47wZUqGUYqhwQUEqlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216219
Signature Algorithm: sha256WithRSAEncryption
78:54:2e:14:20:c3:79:51:f6:d6:ba:88:10:fd:f7:9d:42:c4:
14:69:d6:5e:38:76:e0:12:70:b6:40:c2:5d:88:3b:b1:de:03:
8a:35:e0:46:6b:71:ba:66:f2:61:7e:d6:01:7d:47:55:6e:9a:
3a:48:76:b1:2e:b2:81:50:b2:b3:bf:b2:1a:cb:62:5a:67:bb:
c9:ae:77:87:81:73:64:36:e9:2d:eb:9b:d1:b3:d1:e2:31:f8:
1a:b8:09:16:c1:75:34:11:58:b3:d5:67:e3:e1:d2:87:d5:23:
f1:ca:02:5a:37:7a:1e:d3:d0:b3:9a:b5:3c:6b:9e:70:36:7a:
ef:72:7d:c1:3e:56:2c:8c:bb:a0:c7:cd:38:15:47:66:58:85:
6d:08:96:c5:e1:f6:73:a9:eb:0a:f4:e2:65:c8:db:45:70:84:
50:b9:b7:ec:64:11:36:50:9a:ce:5a:bd:5e:a2:0c:b5:48:53:
37:7d:22:79:8a:fb:2b:91:9e:ab:d3:0c:59:c4:12:28:ad:8c:
3b:9d:76:80:14:77:08:74:97:a8:bf:fd:cb:3c:1a:cd:f0:6e:
20:be:fd:5b:39:c3:41:bf:a1:e4:95:35:a9:ad:ec:f6:fd:d6:
57:59:30:8b:f1:30:cb:8e:95:06:96:08:0c:5e:a9:78:f8:82:
51:a0:76:1b
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYr6JZdE+Pn1vxtPP2cqy+YiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDA0MTAwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTU3ZDdkMTI4YjkzYjhlZjA2NTRhODY1MThhYTFjMTA1MDRhYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28m/anTRzLASkDJCeGXRP7sHxxZ2
8Z3zeHHmLZ2krW6SpBCpmqTwNZI92eh5SQMTj7fyMRaiKQSFdI4+pw0FEdsWofJH
cMgWFAgDerf6Urkd+fDg/99AJ6JZVHwBiCiUbC6Dj//zssFDgmL9j6xHfzLXyNHv
6TDQCHA/Y0Uwtq23Yob3cM2QDMOve27YOcSz67v/SdIGa3n5IcFYUUFZRlmQbY3e
xHiqnxujxie6M728J0f7l5gVxyDI3ywGersCCi1SVQ7dMID5+3Qy71HqYIHtcDpS
MULHcHHSNduixyOvz0/P1ZaLoa/k6ls4nk0383U3t9rdtC3nMtNIGGXeJQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFAVX19EouTuO8GVKhlGKocEFBKpQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2Y1MDRj
YS03NGUzLTQ5MWMtYWM4OC1hNWRkNDM4ZGFmOGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZjUwNGNh
LTc0ZTMtNDkxYy1hYzg4LWE1ZGQ0MzhkYWY4Yy8xL0JWZlgwU2k1TzQ3d1pVcUdV
WXFod1FVRXFsQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhP3QDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMDTJswDQYJKoZIhvcNAQELBQADggEBAHhULhQgw3lR9ta6iBD9951CxBRp1l44
duAScLZAwl2IO7HeA4o14EZrcbpm8mF+1gF9R1VumjpIdrEusoFQsrO/shrLYlpn
u8mud4eBc2Q26S3rm9Gz0eIx+Bq4CRbBdTQRWLPVZ+Ph0ofVI/HKAlo3eh7T0LOa
tTxrnnA2eu9yfcE+ViyMu6DHzTgVR2ZYhW0IlsXh9nOp6wr04mXI20VwhFC5t+xk
ETZQms5avV6iDLVIUzd9InmK+yuRnqvTDFnEEiitjDuddoAUdwh0l6i//cs8Gs3w
biC+/Vs5w0G/oeSVNamt7Pb91ldZMIvxMMuOlQaWCAxeqXj4glGgdhs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:42 2024 by rpki-client on console-fra.rpki-client.org