Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DsujLtrQOblGraUQgNR4-3XaLLU.cer
File: DsujLtrQOblGraUQgNR4-3XaLLU.cer (raw, json)
Hash identifier: iDRVxd7GINNkIE1FY4X/850ZEr4nBwxFHh6GwbdysVU=
Subject key identifier: 0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348E9315CB0914A6B959B9CC4032196
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 212.23.204.0/24
IP: 2a14:4980::/29
Validation: Failed, certificate revoked on Wed 10 Jan 2024 22:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e9:31:5c:b0:91:4a:6b:95:9b:9c:c4:03:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ecba32edad039b946ada51080d478fb75da2cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:8b:9e:dc:e1:ad:a9:42:27:19:c9:ca:8c:
60:d4:9f:a9:35:1e:3c:82:a2:37:64:e5:89:00:15:
13:0e:22:42:7c:80:11:44:11:db:a6:7c:40:84:7d:
9c:2f:00:9a:1a:96:b7:63:2f:f4:12:1a:ab:ac:c7:
fe:5d:be:f6:55:df:ab:f7:ca:74:60:45:45:be:e8:
48:b8:3c:4c:d1:3c:c3:59:bc:36:32:c5:6f:69:5c:
4e:09:89:89:ec:45:a9:90:51:ec:ee:83:11:d8:e2:
4b:a7:3e:bb:ae:b3:fd:59:a1:1e:45:fb:93:ef:c1:
d5:18:35:76:93:5f:7a:ef:54:55:d5:b1:c6:a1:29:
71:ff:03:eb:c9:52:85:cc:38:ed:6e:54:00:e5:11:
70:d9:29:47:7e:e2:a3:57:e6:c7:d8:9b:0f:f0:37:
d9:9b:a3:0c:e7:26:2e:30:1b:5f:a6:3b:f6:1b:4b:
ae:ab:81:ae:85:f0:b9:a1:1e:33:7b:eb:02:7b:fa:
6c:2d:01:05:4d:45:4d:24:50:df:8c:e3:18:f4:3c:
39:f0:45:07:32:4c:fd:62:27:8a:74:fc:06:1f:7e:
34:a1:b4:49:20:ad:15:29:d3:37:16:35:9b:e5:82:
9e:09:6d:0b:38:ed:86:f9:a4:c2:63:1a:5a:f7:b2:
e2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CB:A3:2E:DA:D0:39:B9:46:AD:A5:10:80:D4:78:FB:75:DA:2C:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/2/0ECBA32EDAD039B946ADA51080D478FB75DA2CB5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.204.0/24
IPv6:
2a14:4980::/29
Signature Algorithm: sha256WithRSAEncryption
21:e7:b5:c7:c6:a9:b3:57:6a:ab:fa:8e:d3:67:df:fe:8f:6c:
b3:3e:5c:b6:ac:d4:ed:16:c1:5a:6f:64:bf:a8:b8:b5:c8:3a:
12:2f:71:c9:0e:c3:3e:e3:78:95:80:21:ca:cc:e0:e5:82:29:
28:a0:c2:70:37:02:5b:45:cd:51:7a:84:37:57:7e:4b:91:17:
21:c6:2c:9f:77:3d:5e:f6:ab:56:27:39:66:78:5e:46:77:61:
30:09:98:21:c8:ff:0c:00:9b:be:e0:e5:86:8a:90:25:4c:ee:
c1:61:75:35:f0:33:9e:0d:76:6f:c2:b5:4e:0e:d5:9c:cd:37:
5d:1a:45:ec:4a:9e:63:68:85:72:cf:52:92:d6:42:9c:cb:54:
38:5a:5f:52:80:c5:85:34:bf:23:94:13:6c:2f:c3:f3:4c:b1:
99:05:25:a0:7e:55:c3:ca:2b:73:35:e7:41:40:19:2a:b0:b3:
38:83:e3:ac:b3:f6:b8:d4:a0:ac:67:fe:12:f2:bc:56:f9:85:
82:22:30:28:3d:ff:7b:6b:49:ec:72:d6:29:b6:42:e5:fc:a9:
90:fd:a6:be:9f:b6:70:e9:19:00:ea:d1:3c:6c:41:4d:2a:43:
aa:eb:b8:69:d8:14:05:16:e6:3c:31:e5:c3:e7:83:cd:c0:84:
c2:c2:4e:1e
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYzDSOkxXLCRSmuVm5zEAyGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWNiYTMyZWRhZDAzOWI5NDZhZGE1MTA4MGQ0NzhmYjc1ZGEyY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgqLntzhralCJxnJyoxg1J+pNR48
gqI3ZOWJABUTDiJCfIARRBHbpnxAhH2cLwCaGpa3Yy/0EhqrrMf+Xb72Vd+r98p0
YEVFvuhIuDxM0TzDWbw2MsVvaVxOCYmJ7EWpkFHs7oMR2OJLpz67rrP9WaEeRfuT
78HVGDV2k19671RV1bHGoSlx/wPryVKFzDjtblQA5RFw2SlHfuKjV+bH2JsP8DfZ
m6MM5yYuMBtfpjv2G0uuq4GuhfC5oR4ze+sCe/psLQEFTUVNJFDfjOMY9Dw58EUH
Mkz9YieKdPwGH340obRJIK0VKdM3FjWb5YKeCW0LOO2G+aTCYxpa97LiwQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFA7Loy7a0Dm5Rq2lEIDUePt12iy1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE+BggrBgEFBQcBCwSCATAwggEsMF4GCCsGAQUFBzAFhlJy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y5MjM1
MDU1LTE5MDQtNDRiNC05OThiLWZmMWM5ZTMxMWM0OS8yMIGLBggrBgEFBQcwCoZ/
cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOTIz
NTA1NS0xOTA0LTQ0YjQtOTk4Yi1mZjFjOWUzMTFjNDkvMi8wRUNCQTMyRURBRDAz
OUI5NDZBREE1MTA4MEQ0NzhGQjc1REEyQ0I1Lm1mdDA8BggrBgEFBQcwDYYwaHR0
cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMFkG
A1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA
1BfMMA0EAgACMAcDBQMqFEmAMA0GCSqGSIb3DQEBCwUAA4IBAQAh57XHxqmzV2qr
+o7TZ9/+j2yzPly2rNTtFsFab2S/qLi1yDoSL3HJDsM+43iVgCHKzODlgikooMJw
NwJbRc1ReoQ3V35LkRchxiyfdz1e9qtWJzlmeF5Gd2EwCZghyP8MAJu+4OWGipAl
TO7BYXU18DOeDXZvwrVODtWczTddGkXsSp5jaIVyz1KS1kKcy1Q4Wl9SgMWFNL8j
lBNsL8PzTLGZBSWgflXDyitzNedBQBkqsLM4g+Oss/a41KCsZ/4S8rxW+YWCIjAo
Pf97a0nsctYptkLl/KmQ/aa+n7Zw6RkA6tE8bEFNKkOq67hp2BQFFuY8MeXD54PN
wITCwk4e
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-fra.rpki-client.org