Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FB1eMajPT2KIvoL_bQDrP34_BkM.cer
File: FB1eMajPT2KIvoL_bQDrP34_BkM.cer (raw, json)
Hash identifier: 8WutYr5y0CJnrca4caGJD+uVQXwoFLM2V+0R7PiJTp4=
Subject key identifier: 14:1D:5E:31:A8:CF:4F:62:88:BE:82:FF:6D:00:EB:3F:7E:3F:06:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245E0F81A6115A39ED2E86FB930C2DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.235.10.0/24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 09:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:e0:f8:1a:61:15:a3:9e:d2:e8:6f:b9:30:c2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=141d5e31a8cf4f6288be82ff6d00eb3f7e3f0643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:04:eb:e9:a9:49:db:1f:93:0b:e2:9f:63:
9e:e7:e1:08:69:74:e8:78:98:c6:63:c6:f6:7a:c7:
ea:08:62:7c:e3:26:3d:05:6c:4b:26:8e:6e:88:5f:
15:c3:bf:da:f3:eb:69:dd:d4:ab:60:e3:71:fa:ed:
d4:05:d0:46:ab:47:62:db:72:7d:53:10:5e:ef:f0:
ab:ff:f8:36:f4:41:ac:1e:bd:df:90:73:bc:07:d2:
26:55:ff:3e:f7:9e:8f:39:e8:1d:a4:02:13:73:0b:
a0:71:c4:87:14:16:ae:6b:85:d7:77:76:e1:c2:e6:
1e:3b:6b:aa:97:d7:ff:a2:be:18:ce:71:c7:38:b4:
23:52:36:8b:81:84:23:be:d8:99:75:0f:b2:7a:45:
d1:86:8a:fc:26:e4:f6:2e:7c:3f:2e:98:92:f0:1e:
94:99:3d:e1:68:46:13:41:1e:88:b3:5a:90:78:c4:
19:04:38:d0:d4:c0:2d:17:13:82:19:fd:1b:4c:c9:
f5:a3:8e:fe:c8:08:76:b2:4e:a0:c7:c3:73:28:13:
99:a6:85:2c:e4:d8:c3:44:35:d4:b0:68:a1:f0:f0:
eb:84:de:8a:7a:8d:1d:ba:ac:ea:64:28:bc:78:30:
11:b3:15:d8:08:77:7c:55:bf:9d:9f:04:3c:55:1b:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:5E:31:A8:CF:4F:62:88:BE:82:FF:6D:00:EB:3F:7E:3F:06:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c7e8f2-2fc4-4aec-99b0-40325ff79bea/1/FB1eMajPT2KIvoL_bQDrP34_BkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.10.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ec:87:86:c1:54:ac:9f:d4:99:2a:89:cf:ff:15:e6:0c:79:
1d:72:19:db:88:17:ba:2f:ea:1d:38:31:2f:11:fb:d0:b4:0b:
37:98:27:f9:a7:33:ef:e9:32:26:f3:88:df:09:94:c5:6b:49:
23:60:5a:3c:4a:cc:16:fb:30:15:85:18:7c:b5:35:ad:c2:20:
3b:00:33:50:03:2a:b3:ba:a5:a4:1e:26:71:4a:5f:eb:5f:f1:
c0:56:ce:4e:82:89:d8:d9:31:9c:26:ce:db:8c:cc:13:4d:20:
2d:b6:d0:a1:44:3d:e9:00:a9:c0:ec:58:72:eb:9e:55:11:d0:
67:06:36:34:67:57:58:f3:01:08:76:1e:9a:82:03:a7:37:e1:
31:92:d3:d0:e3:52:1a:37:d3:23:9d:a5:89:ae:ef:39:1b:cc:
ea:22:8e:1b:42:b5:6d:6c:73:99:35:f9:2c:62:14:66:f4:db:
5c:f1:64:2b:17:0c:87:40:06:1e:0e:71:53:10:e4:a7:74:8e:
0f:2a:c2:a9:91:b7:ea:8c:d7:1d:e2:ab:58:2d:89:f6:48:f4:
d2:ee:a6:bb:0d:17:cb:0a:32:88:57:65:26:98:95:4c:01:2b:
0d:f0:86:a3:d3:93:10:2a:2c:e7:93:99:58:cb:13:1c:0f:83:
d2:83:e2:a3
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVyReD4GmEVo57S6G+5MMLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDFkNWUzMWE4Y2Y0ZjYyODhiZTgyZmY2ZDAwZWIzZjdlM2YwNjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoME6+mpSdsfkwvin2Oe5+EIaXTo
eJjGY8b2esfqCGJ84yY9BWxLJo5uiF8Vw7/a8+tp3dSrYONx+u3UBdBGq0di23J9
UxBe7/Cr//g29EGsHr3fkHO8B9ImVf8+956POegdpAITcwugccSHFBaua4XXd3bh
wuYeO2uql9f/or4YznHHOLQjUjaLgYQjvtiZdQ+yekXRhor8JuT2Lnw/LpiS8B6U
mT3haEYTQR6Is1qQeMQZBDjQ1MAtFxOCGf0bTMn1o47+yAh2sk6gx8NzKBOZpoUs
5NjDRDXUsGih8PDrhN6Keo0duqzqZCi8eDARsxXYCHd8Vb+dnwQ8VRv/YwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBQdXjGoz09iiL6C/20A6z9+PwZDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2M3ZThm
Mi0yZmM0LTRhZWMtOTliMC00MDMyNWZmNzliZWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYzdlOGYy
LTJmYzQtNGFlYy05OWIwLTQwMzI1ZmY3OWJlYS8xL0ZCMWVNYWpQVDJLSXZvTF9i
UURyUDM0X0JrTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuesKMA0GCSqGSIb3DQEBCwUAA4IBAQAi7IeG
wVSsn9SZKonP/xXmDHkdchnbiBe6L+odODEvEfvQtAs3mCf5pzPv6TIm84jfCZTF
a0kjYFo8SswW+zAVhRh8tTWtwiA7ADNQAyqzuqWkHiZxSl/rX/HAVs5OgonY2TGc
Js7bjMwTTSAtttChRD3pAKnA7Fhy655VEdBnBjY0Z1dY8wEIdh6aggOnN+ExktPQ
41IaN9MjnaWJru85G8zqIo4bQrVtbHOZNfksYhRm9Ntc8WQrFwyHQAYeDnFTEOSn
dI4PKsKpkbfqjNcd4qtYLYn2SPTS7qa7DRfLCjKIV2UmmJVMASsN8Iaj05MQKizn
k5lYyxMcD4PSg+Kj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:33 2024 by rpki-client on console-fra.rpki-client.org