Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.cer
File: ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.cer (raw, json)
Hash identifier: tctBNisGkQHR5gVCOfeE7QVuj7FIvz/InwuSpCdYPs8=
Subject key identifier: 10:B2:51:6E:39:FF:63:A9:06:8C:D8:75:22:CB:77:25:6F:B1:D4:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6306A94DE67BB7B0011FA9ABE7DC92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.3.180.0/24
IP: 2a12:c000::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:06:a9:4d:e6:7b:b7:b0:01:1f:a9:ab:e7:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10b2516e39ff63a9068cd87522cb77256fb1d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:d0:bb:65:ab:e5:fa:99:4d:75:34:85:7b:
72:fd:5b:1c:a8:4e:7f:09:9c:6d:7b:7c:fa:38:b4:
6a:eb:6d:7b:5e:96:b4:17:5b:b8:42:55:2f:07:52:
c2:6c:aa:b9:4a:6d:b9:8b:e1:99:2e:1b:46:ee:1e:
2e:10:a9:e4:c9:ec:98:c1:f3:eb:21:39:8d:05:82:
02:1f:4b:d3:8d:2a:eb:66:b8:63:e7:d2:14:68:31:
07:ab:7b:9e:3d:c9:13:6d:45:bc:11:3d:49:07:53:
99:2e:d6:8d:f5:7f:f2:9d:4d:66:80:66:13:62:88:
a7:c3:12:a3:65:ed:11:05:b1:23:63:25:f7:8d:ca:
20:2b:ee:65:91:cb:f7:0e:71:e8:cc:74:25:f1:00:
c4:71:37:75:dc:6c:1b:78:16:1f:79:6d:fb:a3:18:
43:e1:cd:a0:ac:97:83:7e:17:c9:a8:21:17:f6:69:
39:b7:7c:bd:62:dd:74:8a:c5:59:c1:ab:b6:a8:bb:
4a:df:84:69:13:60:83:54:47:ea:55:c1:2d:5a:e9:
1a:e1:28:f8:70:9e:a6:b5:dd:a5:9a:56:a7:31:81:
82:a6:31:ac:51:62:ca:99:4e:a6:0d:9a:28:ac:d9:
56:43:15:fc:71:e5:38:0f:b2:b2:fa:70:cf:ce:3e:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:51:6E:39:FF:63:A9:06:8C:D8:75:22:CB:77:25:6F:B1:D4:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/23c9fa-7f98-479a-aa6f-636f7a33bc33/1/ELJRbjn_Y6kGjNh1Ist3JW-x1Pc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.180.0/24
IPv6:
2a12:c000::/29
Signature Algorithm: sha256WithRSAEncryption
5d:ba:8c:0f:bc:d1:e1:bb:23:e2:77:ae:5b:3b:6e:f4:de:be:
78:6a:88:cf:3d:ea:1e:41:68:0f:c6:90:99:52:52:83:61:3b:
5c:89:68:fd:1b:da:d6:af:0f:95:aa:ed:18:d1:0b:a0:94:0a:
37:a6:e5:27:31:d0:9f:c0:bb:28:fd:0f:e5:95:9f:1c:42:49:
af:e8:70:f8:b2:35:ae:6d:fb:80:2a:c0:d2:85:50:1c:d8:43:
62:27:ac:af:d1:d1:62:27:fb:1c:13:9d:5f:eb:f7:66:ac:fc:
3e:59:ef:ea:1c:22:52:2b:05:04:e7:e9:13:f3:05:24:a1:57:
99:58:1d:72:91:61:a8:76:67:b8:dc:a3:34:b0:92:d5:fc:a1:
b7:2b:72:c4:4e:0f:61:48:43:7c:ae:6a:c4:3b:79:27:1d:db:
17:97:94:5c:bb:d9:0a:d5:2d:c7:12:c0:a8:a6:a2:5e:71:60:
3c:2f:07:fc:44:da:7e:11:b3:ee:a1:c3:c6:09:03:fc:7d:9f:
59:14:fc:60:dc:95:a3:63:af:de:27:7a:79:f9:43:94:af:6a:
6e:e3:53:e3:9a:ff:df:d7:a9:95:0e:38:f6:9e:47:75:e8:e1:
07:cb:65:39:b4:82:27:e3:99:c3:73:00:22:8c:bb:38:bf:82:
42:8c:f9:53
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVrYwapTeZ7t7ABH6mr59ySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGIyNTE2ZTM5ZmY2M2E5MDY4Y2Q4NzUyMmNiNzcyNTZmYjFkNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQLQu2Wr5fqZTXU0hXty/VscqE5/
CZxte3z6OLRq6217Xpa0F1u4QlUvB1LCbKq5Sm25i+GZLhtG7h4uEKnkyeyYwfPr
ITmNBYICH0vTjSrrZrhj59IUaDEHq3uePckTbUW8ET1JB1OZLtaN9X/ynU1mgGYT
YoinwxKjZe0RBbEjYyX3jcogK+5lkcv3DnHozHQl8QDEcTd13GwbeBYfeW37oxhD
4c2grJeDfhfJqCEX9mk5t3y9Yt10isVZwau2qLtK34RpE2CDVEfqVcEtWuka4Sj4
cJ6mtd2lmlanMYGCpjGsUWLKmU6mDZoorNlWQxX8ceU4D7Ky+nDPzj72JwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBCyUW45/2OpBozYdSLLdyVvsdT3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E4LzIzYzlm
YS03Zjk4LTQ3OWEtYWE2Zi02MzZmN2EzM2JjMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTgvMjNjOWZh
LTdmOTgtNDc5YS1hYTZmLTYzNmY3YTMzYmMzMy8xL0VMSlJiam5fWTZrR2pOaDFJ
c3QzSlcteDFQYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwQO0MA0EAgACMAcDBQMqEsAAMA0GCSqGSIb3
DQEBCwUAA4IBAQBduowPvNHhuyPid65bO2703r54aojPPeoeQWgPxpCZUlKDYTtc
iWj9G9rWrw+Vqu0Y0QuglAo3puUnMdCfwLso/Q/llZ8cQkmv6HD4sjWubfuAKsDS
hVAc2ENiJ6yv0dFiJ/scE51f6/dmrPw+We/qHCJSKwUE5+kT8wUkoVeZWB1ykWGo
dme43KM0sJLV/KG3K3LETg9hSEN8rmrEO3knHdsXl5Rcu9kK1S3HEsCopqJecWA8
Lwf8RNp+EbPuocPGCQP8fZ9ZFPxg3JWjY6/eJ3p5+UOUr2pu41Pjmv/f16mVDjj2
nkd16OEHy2U5tIIn45nDcwAijLs4v4JCjPlT
-----END CERTIFICATE-----
Generated at Thu Nov 2 13:17:20 2023 by rpki-client on console-fra.rpki-client.org