Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HxaxAdkfzv4oth1Txr90Kefuu6U.cer
File: HxaxAdkfzv4oth1Txr90Kefuu6U.cer (raw, json)
Hash identifier: jraZuwVB21uYPCjrAG7JbKdoxzd+y4F8sBGoI2kOj64=
Subject key identifier: 1F:16:B1:01:D9:1F:CE:FE:28:B6:1D:53:C6:BF:74:29:E7:EE:BB:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3ED60BC4E4C81B5A91DC3154700E81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/HxaxAdkfzv4oth1Txr90Kefuu6U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.141.0/24
IP: 2a12:d800::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:d6:0b:c4:e4:c8:1b:5a:91:dc:31:54:70:0e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f16b101d91fcefe28b61d53c6bf7429e7eebba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c0:24:d6:d7:b7:b0:6f:ad:0b:70:42:94:3a:
d6:42:12:a0:be:af:b3:fc:d4:4e:21:72:fd:c3:13:
db:16:7c:91:cf:93:7b:d6:25:ae:4a:13:db:4c:db:
60:9c:95:6c:1f:74:2a:c8:0d:84:4c:2a:b6:44:65:
3e:d4:f6:5f:18:e9:b2:07:f2:6e:03:99:bb:d8:99:
38:1a:f1:7c:da:9d:65:1d:f3:78:e7:2f:f5:5f:c6:
6e:55:4c:c6:a1:fd:51:10:da:5e:01:7e:05:ee:b3:
5b:71:52:9f:db:b2:50:80:44:66:22:24:d7:22:7b:
bb:90:7c:08:2e:ae:c1:50:21:0f:8a:aa:e7:44:13:
7d:bc:d9:03:6e:9a:ff:13:86:e5:47:f8:be:f6:5c:
01:0e:0c:58:c4:47:f1:07:e2:cc:f9:47:ca:5a:a2:
d5:80:ea:53:4f:c0:63:fb:34:93:e7:7e:91:5b:79:
3f:09:82:3e:6b:e2:3f:e2:b2:68:88:ee:30:ad:39:
52:4a:a1:ba:90:eb:31:35:91:84:2b:c3:17:8d:05:
99:0b:f7:90:d4:1e:75:c9:d2:fc:f4:d4:61:93:d2:
90:58:06:5a:59:9a:63:69:f5:2f:d7:1c:c8:a8:ae:
ee:11:05:d0:4b:da:13:77:97:2b:7c:4d:2c:59:28:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:B1:01:D9:1F:CE:FE:28:B6:1D:53:C6:BF:74:29:E7:EE:BB:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a02d99-c996-49ee-8c01-b75472910aec/1/HxaxAdkfzv4oth1Txr90Kefuu6U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.141.0/24
IPv6:
2a12:d800::/29
Signature Algorithm: sha256WithRSAEncryption
8f:15:3b:98:0d:dc:c2:9f:f3:c5:35:3a:26:a9:f3:36:3c:dc:
24:6a:0c:44:00:40:c1:c7:2f:60:b4:39:7a:ac:f8:f1:f7:de:
86:8e:c7:7e:d3:21:f8:a0:4b:82:50:b2:42:69:fe:46:f0:19:
14:c8:1c:6f:3f:72:01:91:09:e2:c3:5a:05:57:38:5e:37:7a:
2a:e8:f3:56:79:89:f7:38:a1:7e:ff:68:83:12:4e:a9:87:5a:
14:ad:8c:5d:8b:f3:31:fb:55:8f:f1:6f:31:99:7b:75:b9:6b:
1e:c0:54:1b:f6:48:a4:bf:4a:40:55:9b:e8:e8:6c:58:c5:21:
87:99:66:b5:b7:fd:58:73:1e:f7:8a:9e:a3:3d:1e:23:40:9e:
ac:58:2b:cf:af:21:b6:3d:89:77:c8:78:50:c9:35:6c:49:64:
b9:66:05:1e:1d:d9:3f:e9:8b:ab:06:c8:d6:0c:02:7d:83:4c:
9b:bf:6a:57:d3:11:63:89:dc:73:67:52:51:68:88:cf:f7:35:
68:e3:56:64:46:fd:7b:96:f3:c9:db:0e:ee:df:ce:eb:40:ed:
46:c1:eb:72:14:70:85:ba:91:90:14:cc:af:30:59:14:15:fe:
d4:84:c5:c5:a5:f0:d0:05:a7:0d:95:2d:bf:c4:4a:e4:43:68:
73:50:31:38
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsPtYLxOTIG1qR3DFUcA6BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjE2YjEwMWQ5MWZjZWZlMjhiNjFkNTNjNmJmNzQyOWU3ZWViYmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MAk1te3sG+tC3BClDrWQhKgvq+z
/NROIXL9wxPbFnyRz5N71iWuShPbTNtgnJVsH3QqyA2ETCq2RGU+1PZfGOmyB/Ju
A5m72Jk4GvF82p1lHfN45y/1X8ZuVUzGof1RENpeAX4F7rNbcVKf27JQgERmIiTX
Inu7kHwILq7BUCEPiqrnRBN9vNkDbpr/E4blR/i+9lwBDgxYxEfxB+LM+UfKWqLV
gOpTT8Bj+zST536RW3k/CYI+a+I/4rJoiO4wrTlSSqG6kOsxNZGEK8MXjQWZC/eQ
1B51ydL89NRhk9KQWAZaWZpjafUv1xzIqK7uEQXQS9oTd5crfE0sWSgghQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFB8WsQHZH87+KLYdU8a/dCnn7rulMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3L2EwMmQ5
OS1jOTk2LTQ5ZWUtOGMwMS1iNzU0NzI5MTBhZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvYTAyZDk5
LWM5OTYtNDllZS04YzAxLWI3NTQ3MjkxMGFlYy8xL0h4YXhBZGtmenY0b3RoMVR4
cjkwS2VmdXU2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAw2CNMA0EAgACMAcDBQMqEtgAMA0GCSqGSIb3
DQEBCwUAA4IBAQCPFTuYDdzCn/PFNTomqfM2PNwkagxEAEDBxy9gtDl6rPjx996G
jsd+0yH4oEuCULJCaf5G8BkUyBxvP3IBkQniw1oFVzheN3oq6PNWeYn3OKF+/2iD
Ek6ph1oUrYxdi/Mx+1WP8W8xmXt1uWsewFQb9kikv0pAVZvo6GxYxSGHmWa1t/1Y
cx73ip6jPR4jQJ6sWCvPryG2PYl3yHhQyTVsSWS5ZgUeHdk/6YurBsjWDAJ9g0yb
v2pX0xFjidxzZ1JRaIjP9zVo41ZkRv17lvPJ2w7u387rQO1GwetyFHCFupGQFMyv
MFkUFf7UhMXFpfDQBacNlS2/xErkQ2hzUDE4
-----END CERTIFICATE-----
Generated at Thu Nov 2 16:39:51 2023 by rpki-client on console-fra.rpki-client.org