Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPiZA4AXKfwe01NyoHSzXK0YTd8.cer
File: HPiZA4AXKfwe01NyoHSzXK0YTd8.cer (raw, json)
Hash identifier: VpadP5zCob8zvKLXf1VHIv6WuZ2YtONJ7zHK3/HMMJs=
Subject key identifier: 1C:F8:99:03:80:17:29:FC:1E:D3:53:72:A0:74:B3:5C:AD:18:4D:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF7A4C6F19804B49B2B7A0FF6E2AC7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.90.0/24
IP: 2a12:6d00::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:7a:4c:6f:19:80:4b:49:b2:b7:a0:ff:6e:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cf89903801729fc1ed35372a074b35cad184ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:85:8e:d8:e2:ad:01:d7:ce:ab:77:74:9e:
46:61:f8:71:24:a7:bc:af:49:6e:72:51:6e:64:13:
f9:67:0f:46:4a:58:2b:97:4a:f7:21:dd:6b:35:f8:
ec:1d:9d:20:7d:d7:da:6e:56:ce:37:58:2b:1c:e6:
6e:e1:3e:7d:9e:cf:38:2e:cf:9b:52:63:b6:0d:f3:
ee:e1:36:f7:28:85:89:c0:00:4e:d0:87:9d:91:17:
aa:00:ac:36:d4:78:0b:31:76:f3:11:77:2c:fe:7e:
2d:f5:f6:2c:96:83:c5:9e:9b:47:7f:06:4f:34:db:
3c:27:2a:78:71:ae:19:a7:fc:09:aa:31:03:e8:01:
84:34:f3:f1:22:1a:51:06:cb:a8:78:98:5c:b0:4b:
00:e0:b3:c1:96:4c:55:6e:98:14:30:59:5d:ae:e4:
6c:73:63:32:b9:04:d6:4b:9e:0b:6e:14:9f:d6:ca:
b1:84:2c:a6:60:ee:f9:d6:03:a3:7b:f1:15:3e:54:
11:bc:96:00:a4:57:8c:9e:67:db:18:a8:ca:76:97:
4e:21:06:37:36:95:e2:aa:ca:99:2e:57:3d:ab:16:
3a:78:a7:01:75:40:e4:46:44:90:e0:1b:45:d7:4d:
c1:f3:2e:4b:d7:e8:e8:8c:6d:27:24:97:ff:64:6c:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:99:03:80:17:29:FC:1E:D3:53:72:A0:74:B3:5C:AD:18:4D:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/4d5b77-bd89-4600-979c-03c80956268c/1/HPiZA4AXKfwe01NyoHSzXK0YTd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.90.0/24
IPv6:
2a12:6d00::/29
Signature Algorithm: sha256WithRSAEncryption
60:44:ff:90:cd:79:53:3b:e5:40:da:38:b8:57:60:ae:a7:88:
83:e2:3a:96:ed:da:b7:8f:c7:e2:92:6f:b2:1a:ed:7a:f5:02:
50:70:1a:90:69:d7:6e:e3:19:5e:8c:8a:1c:71:a8:78:dd:07:
0b:3b:29:0a:ad:38:51:8d:93:a5:aa:c7:bf:6f:bd:c4:13:16:
f4:b0:01:58:39:27:03:10:12:31:da:ca:2f:84:da:95:44:ac:
71:66:6f:f1:8f:c6:fd:f6:f6:b6:28:bf:b8:fd:b7:3b:b7:b6:
2b:a3:1f:48:94:da:53:39:f8:60:95:c0:e4:9f:14:20:39:12:
05:f0:db:44:f1:6c:8a:43:64:e1:45:d1:c2:99:e6:c9:3a:b8:
0f:74:4f:03:1a:5c:19:e8:e9:13:37:0f:1f:c0:9d:44:cf:7a:
3a:64:90:77:c2:91:45:33:4a:9f:3c:2c:31:70:cb:67:e2:3b:
f4:40:8e:e8:0b:16:d2:1f:25:12:17:b5:6a:be:36:24:eb:f0:
fc:b6:e0:52:0d:5b:da:e0:68:63:88:4f:6d:a6:9d:dd:7d:ba:
28:3b:ff:b6:a9:ee:bc:28:25:d3:b7:de:66:85:d3:3b:98:16:
1a:c0:7d:d6:87:8e:64:ca:22:dd:b5:8b:df:da:53:95:bd:2f:
ec:11:92:c3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvr3pMbxmAS0myt6D/birHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2Y4OTkwMzgwMTcyOWZjMWVkMzUzNzJhMDc0YjM1Y2FkMTg0ZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NuFjtjirQHXzqt3dJ5GYfhxJKe8
r0luclFuZBP5Zw9GSlgrl0r3Id1rNfjsHZ0gfdfablbON1grHOZu4T59ns84Ls+b
UmO2DfPu4Tb3KIWJwABO0IedkReqAKw21HgLMXbzEXcs/n4t9fYsloPFnptHfwZP
NNs8Jyp4ca4Zp/wJqjED6AGENPPxIhpRBsuoeJhcsEsA4LPBlkxVbpgUMFldruRs
c2MyuQTWS54LbhSf1sqxhCymYO751gOje/EVPlQRvJYApFeMnmfbGKjKdpdOIQY3
NpXiqsqZLlc9qxY6eKcBdUDkRkSQ4BtF103B8y5L1+jojG0nJJf/ZGwbEQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBz4mQOAFyn8HtNTcqB0s1ytGE3fMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhLzRkNWI3
Ny1iZDg5LTQ2MDAtOTc5Yy0wM2M4MDk1NjI2OGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvNGQ1Yjc3
LWJkODktNDYwMC05NzljLTAzYzgwOTU2MjY4Yy8xL0hQaVpBNEFYS2Z3ZTAxTnlv
SFN6WEswWVRkOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhNaMA0EAgACMAcDBQMqEm0AMA0GCSqGSIb3
DQEBCwUAA4IBAQBgRP+QzXlTO+VA2ji4V2Cup4iD4jqW7dq3j8fikm+yGu169QJQ
cBqQaddu4xlejIoccah43QcLOykKrThRjZOlqse/b73EExb0sAFYOScDEBIx2sov
hNqVRKxxZm/xj8b99va2KL+4/bc7t7Yrox9IlNpTOfhglcDknxQgORIF8NtE8WyK
Q2ThRdHCmebJOrgPdE8DGlwZ6OkTNw8fwJ1Ez3o6ZJB3wpFFM0qfPCwxcMtn4jv0
QI7oCxbSHyUSF7VqvjYk6/D8tuBSDVva4GhjiE9tpp3dfbooO/+2qe68KCXTt95m
hdM7mBYawH3Wh45kyiLdtYvf2lOVvS/sEZLD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-fra.rpki-client.org