Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J2wa8RnjFHr00bTpmSTZxuSglVM.cer
File: J2wa8RnjFHr00bTpmSTZxuSglVM.cer (raw, json)
Hash identifier: PJzQp1Dal4IJ6KLFyULGwb/BHF4BSeBTLC7a4bofQqc=
Subject key identifier: 27:6C:1A:F1:19:E3:14:7A:F4:D1:B4:E9:99:24:D9:C6:E4:A0:95:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAEDF9F3182525C49D2B9380738155
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/J2wa8RnjFHr00bTpmSTZxuSglVM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.71.151.0/24
IP: 2a11:3cc0::/29
Validation: Failed, certificate revoked on Mon 02 Oct 2023 06:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:ed:f9:f3:18:25:25:c4:9d:2b:93:80:73:81:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=276c1af119e3147af4d1b4e99924d9c6e4a09553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:e3:ef:77:dc:11:ac:da:91:2f:21:f6:5c:
c5:5d:85:a1:b5:23:a9:d4:08:a7:d8:fe:43:d7:e2:
53:27:c1:f6:bc:cd:d4:27:1e:3b:9f:8f:2f:32:63:
18:93:e9:bd:19:1c:65:ff:67:6e:fe:5f:8a:f1:ed:
b8:b5:66:71:f3:13:dc:6c:e8:7b:7c:45:01:93:b6:
10:a1:87:49:d3:8b:da:3a:07:3d:cb:35:de:f0:63:
87:4c:ec:3e:19:74:90:63:7a:19:13:a7:4a:7c:a8:
d6:97:46:8e:40:65:3b:a7:0c:f2:cc:b9:18:d8:6b:
39:e7:6a:ba:97:df:39:b3:e0:66:b0:06:d6:17:78:
07:c1:ec:b5:54:0c:4a:24:6d:7c:43:67:ac:5e:7f:
73:9b:ea:3b:2c:9f:94:10:b7:3b:b2:88:09:9e:e5:
4b:bb:c4:19:e9:61:16:05:ff:79:4c:c9:8c:5f:41:
58:f7:87:81:88:ea:dc:42:41:1a:64:4c:89:4f:b5:
76:cd:c2:45:31:af:ba:62:37:b6:93:e6:d6:a0:5b:
01:ae:62:e1:b6:90:99:75:bd:0a:c7:38:28:80:be:
1d:f7:f7:46:89:2e:21:ed:bb:8b:d7:24:c6:9b:c7:
73:f7:bb:9a:7c:e1:4f:91:7c:f2:95:83:4f:48:26:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:1A:F1:19:E3:14:7A:F4:D1:B4:E9:99:24:D9:C6:E4:A0:95:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b96776-a7d6-4de3-a4e0-23769c32ccad/1/J2wa8RnjFHr00bTpmSTZxuSglVM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.151.0/24
IPv6:
2a11:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:16:55:0d:01:41:8d:80:3b:75:6e:55:c2:84:23:59:5e:77:
6f:c2:99:eb:47:ce:b5:6f:38:5a:69:ff:39:e8:d9:95:64:b0:
2c:02:f7:b3:b5:d3:cf:60:95:cc:aa:01:ff:cc:55:01:95:89:
aa:a1:a3:b7:e7:d0:be:90:0f:21:2c:61:7f:35:be:e9:47:f8:
5d:98:e6:15:80:49:3d:a6:9c:43:47:45:9b:66:1a:68:ff:7f:
ed:ca:30:c2:33:65:e3:01:1c:ed:58:b3:d7:0b:03:f4:c9:3c:
6a:18:34:41:23:a3:27:99:59:b5:3c:c7:44:0b:0e:f1:ef:04:
66:d1:09:3e:0d:c8:5f:fb:8c:e5:2d:5a:fc:44:11:82:b0:51:
9e:bb:0a:d1:27:45:76:e9:a7:b7:1c:e8:cc:dd:3f:44:c0:e5:
c8:3e:1e:ea:e3:4c:79:ad:63:29:5f:a9:1d:60:a5:7c:2c:c6:
44:ac:1a:fc:f5:ae:6a:fe:a8:35:d8:6e:6d:9c:6c:69:fa:33:
25:31:0f:c6:bb:13:9b:83:b9:19:98:6b:64:68:7f:0d:19:e2:
e3:56:51:a7:81:47:f4:d2:7d:17:f6:46:4a:38:d4:ab:0f:d6:
14:bb:8f:28:80:de:15:7c:33:67:8f:35:d6:e1:83:82:9c:5c:
0a:02:15:60
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVw+u358xglJcSdK5OAc4FVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzZjMWFmMTE5ZTMxNDdhZjRkMWI0ZTk5OTI0ZDljNmU0YTA5NTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUDj73fcEazakS8h9lzFXYWhtSOp
1Ain2P5D1+JTJ8H2vM3UJx47n48vMmMYk+m9GRxl/2du/l+K8e24tWZx8xPcbOh7
fEUBk7YQoYdJ04vaOgc9yzXe8GOHTOw+GXSQY3oZE6dKfKjWl0aOQGU7pwzyzLkY
2Gs552q6l985s+BmsAbWF3gHwey1VAxKJG18Q2esXn9zm+o7LJ+UELc7sogJnuVL
u8QZ6WEWBf95TMmMX0FY94eBiOrcQkEaZEyJT7V2zcJFMa+6Yje2k+bWoFsBrmLh
tpCZdb0KxzgogL4d9/dGiS4h7buL1yTGm8dz97uafOFPkXzylYNPSCZzrQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCdsGvEZ4xR69NG06Zkk2cbkoJVTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhL2I5Njc3
Ni1hN2Q2LTRkZTMtYTRlMC0yMzc2OWMzMmNjYWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvYjk2Nzc2
LWE3ZDYtNGRlMy1hNGUwLTIzNzY5YzMyY2NhZC8xL0oyd2E4Um5qRkhyMDBiVHBt
U1RaeHVTZ2xWTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUEeXMA0EAgACMAcDBQMqETzAMA0GCSqGSIb3
DQEBCwUAA4IBAQCrFlUNAUGNgDt1blXChCNZXndvwpnrR861bzhaaf856NmVZLAs
AveztdPPYJXMqgH/zFUBlYmqoaO359C+kA8hLGF/Nb7pR/hdmOYVgEk9ppxDR0Wb
Zhpo/3/tyjDCM2XjARztWLPXCwP0yTxqGDRBI6MnmVm1PMdECw7x7wRm0Qk+Dchf
+4zlLVr8RBGCsFGeuwrRJ0V26ae3HOjM3T9EwOXIPh7q40x5rWMpX6kdYKV8LMZE
rBr89a5q/qg12G5tnGxp+jMlMQ/GuxObg7kZmGtkaH8NGeLjVlGngUf00n0X9kZK
ONSrD9YUu48ogN4VfDNnjzXW4YOCnFwKAhVg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:29 2024 by rpki-client on console-fra.rpki-client.org