Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jc9QaGbXuF9-9oir2DBsJJac_s4.cer
File: Jc9QaGbXuF9-9oir2DBsJJac_s4.cer (raw, json)
Hash identifier: Ulf6xFgEEOOfteOf/sgJIOETWKc7zBZQDGSy/izXocA=
Subject key identifier: 25:CF:50:68:66:D7:B8:5F:7E:F6:88:AB:D8:30:6C:24:96:9C:FE:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018825386052239F0D8D880A34AA2821A6EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/Jc9QaGbXuF9-9oir2DBsJJac_s4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 16 May 2023 15:40:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.9.0/24
IP: 2a11:e540::/29
Validation: Failed, certificate revoked on Thu 26 Oct 2023 07:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:38:60:52:23:9f:0d:8d:88:0a:34:aa:28:21:a6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 15:40:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25cf506866d7b85f7ef688abd8306c24969cfece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:08:51:60:0f:66:20:73:37:88:66:96:5d:
6b:ca:d7:47:de:0e:a2:b5:b5:f8:46:d9:87:84:1f:
bb:04:47:35:6b:9d:dc:aa:5b:be:72:96:b1:52:a0:
f5:58:64:d6:d3:95:3a:f3:bf:a3:7d:c6:5e:b4:5f:
e3:79:81:61:9e:76:7d:3d:9b:e9:14:d3:d1:1b:00:
5c:ce:1a:f1:05:ae:59:ea:1e:42:d9:98:b1:b2:d8:
7f:25:47:75:ff:1a:39:ac:fe:8b:27:5a:09:26:ed:
22:be:90:82:59:71:82:a6:a3:c1:90:aa:0c:cd:14:
c2:d6:eb:9a:b3:aa:9f:6f:c6:9c:41:47:d7:12:9a:
59:b9:2d:45:b0:82:ef:38:52:59:72:54:34:66:9c:
56:40:2f:ea:4a:04:87:a6:34:12:5e:a8:bb:20:b8:
05:83:06:a6:94:1b:3a:57:41:71:6c:e7:00:2e:68:
fc:95:5e:75:8a:3b:db:e5:4f:ea:20:35:5f:cc:4b:
bf:e2:40:c0:60:cc:51:fe:3a:49:5a:d6:42:7d:a2:
48:45:b1:6a:7f:09:14:d1:e4:24:3b:b5:c1:88:28:
a2:80:4e:4f:71:6a:e4:cc:e1:60:06:cb:c0:85:e1:
03:98:02:b1:b4:24:22:39:91:5b:e3:7c:6c:ec:2e:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:50:68:66:D7:B8:5F:7E:F6:88:AB:D8:30:6C:24:96:9C:FE:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a6eadd-1cdf-45c4-9832-10e64824bbb7/1/Jc9QaGbXuF9-9oir2DBsJJac_s4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.9.0/24
IPv6:
2a11:e540::/29
Signature Algorithm: sha256WithRSAEncryption
1f:40:67:2f:9f:70:a2:9b:f6:85:c6:00:d0:9e:14:84:4c:fc:
23:d4:1e:93:07:7a:94:4d:5a:97:be:bd:30:8d:f4:1f:4c:af:
ca:47:77:d9:ab:34:2c:b0:d8:c7:19:94:fe:02:c8:60:d9:a0:
72:58:55:76:a0:6a:87:eb:cd:11:e5:f4:48:e2:70:44:6d:90:
2a:17:55:eb:71:a8:ad:a3:12:99:54:57:5f:8c:f6:55:0b:4f:
88:0c:20:00:b6:53:60:b8:e6:f3:16:c9:01:06:e8:39:88:df:
bc:52:24:b3:65:63:23:6e:a2:63:c2:17:86:52:dc:75:79:80:
6c:d3:6b:e1:42:e7:54:1c:18:c6:68:18:3b:8a:d3:65:6b:b8:
b3:01:eb:29:91:53:7e:d7:e3:f4:98:86:4b:2e:30:08:41:65:
da:58:20:be:e8:12:64:70:77:ff:8f:33:52:d7:45:a5:b2:5b:
22:ea:fb:6b:fa:4f:5c:75:53:47:ed:f1:d0:c8:21:f8:48:4d:
93:59:d8:ab:d2:60:24:49:fe:b7:15:52:06:ab:47:87:9a:49:
c5:5e:30:26:a8:06:91:8b:b8:b0:54:a8:61:97:12:ab:8f:3e:
6a:fb:49:9b:cb:49:32:db:ca:5d:b8:f4:fd:1f:91:e5:4b:89:
16:f0:42:4d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYglOGBSI58NjYgKNKooIabrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTE2MTU0MDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNmNTA2ODY2ZDdiODVmN2VmNjg4YWJkODMwNmMyNDk2OWNmZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TEIUWAPZiBzN4hmll1rytdH3g6i
tbX4RtmHhB+7BEc1a53cqlu+cpaxUqD1WGTW05U687+jfcZetF/jeYFhnnZ9PZvp
FNPRGwBczhrxBa5Z6h5C2Zixsth/JUd1/xo5rP6LJ1oJJu0ivpCCWXGCpqPBkKoM
zRTC1uuas6qfb8acQUfXEppZuS1FsILvOFJZclQ0ZpxWQC/qSgSHpjQSXqi7ILgF
gwamlBs6V0FxbOcALmj8lV51ijvb5U/qIDVfzEu/4kDAYMxR/jpJWtZCfaJIRbFq
fwkU0eQkO7XBiCiigE5PcWrkzOFgBsvAheEDmAKxtCQiOZFb43xs7C7pjQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCXPUGhm17hffvaIq9gwbCSWnP7OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4L2E2ZWFk
ZC0xY2RmLTQ1YzQtOTgzMi0xMGU2NDgyNGJiYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvYTZlYWRk
LTFjZGYtNDVjNC05ODMyLTEwZTY0ODI0YmJiNy8xL0pjOVFhR2JYdUY5LTlvaXIy
REJzSkphY19zNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQJMA0EAgACMAcDBQMqEeVAMA0GCSqGSIb3
DQEBCwUAA4IBAQAfQGcvn3Cim/aFxgDQnhSETPwj1B6TB3qUTVqXvr0wjfQfTK/K
R3fZqzQssNjHGZT+Ashg2aByWFV2oGqH680R5fRI4nBEbZAqF1XrcaitoxKZVFdf
jPZVC0+IDCAAtlNguObzFskBBug5iN+8UiSzZWMjbqJjwheGUtx1eYBs02vhQudU
HBjGaBg7itNla7izAespkVN+1+P0mIZLLjAIQWXaWCC+6BJkcHf/jzNS10Wlslsi
6vtr+k9cdVNH7fHQyCH4SE2TWdir0mAkSf63FVIGq0eHmknFXjAmqAaRi7iwVKhh
lxKrjz5q+0mby0ky28pduPT9H5HlS4kW8EJN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:01 2024 by rpki-client on console-ams.rpki-client.org