Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JchZYqHCaM6p_jKeT04uRFTSwIw.cer
File: JchZYqHCaM6p_jKeT04uRFTSwIw.cer (raw, json)
Hash identifier: uTL/VcxTy8HwhHStm9o4abLkXJBUevcs4tRDQUhX32A=
Subject key identifier: 25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF505C95C55A754D7FF41F1E84539E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.41.0/24
IP: 2a12:4b00::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 14:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:05:c9:5c:55:a7:54:d7:ff:41:f1:e8:45:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c85962a1c268cea9fe329e4f4e2e4454d2c08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1a:51:d2:fb:1c:3e:be:ab:a3:1d:07:4d:a1:
f7:64:ad:0b:b2:74:84:29:b1:f9:8e:87:1e:60:2f:
ec:02:cf:96:a2:7c:bb:5b:93:d6:78:64:26:68:4c:
da:55:6f:80:0e:54:c6:d5:62:e5:a2:ff:e3:8d:22:
ae:21:7c:94:d2:c7:28:d9:9c:d4:c1:b1:2a:ca:a6:
bb:99:35:f9:27:05:a9:bf:f4:e4:06:f9:4c:32:70:
3a:e3:1a:2b:58:4f:6a:e2:93:80:63:97:64:3c:33:
a4:44:f8:c5:a0:a6:97:10:01:65:e4:d5:75:8d:27:
f2:0b:76:63:0f:81:69:1a:78:db:2c:0d:5a:03:08:
57:99:3b:aa:de:4c:c9:6e:eb:38:3c:d2:54:ce:14:
f4:70:15:aa:4c:39:9f:9f:31:c2:b6:d0:38:ff:cd:
6c:32:d8:d8:7f:ff:68:e4:f8:a7:ce:32:04:97:cd:
3c:da:62:76:c0:89:89:7e:88:32:7e:79:b9:8e:cc:
f7:b8:b8:18:3f:d5:45:e2:23:63:2a:f5:37:04:63:
69:00:39:4f:d7:65:4f:a8:e2:95:17:82:d9:6f:ed:
9b:22:7f:2e:fd:eb:7d:65:a7:51:6c:8d:a2:97:00:
b3:99:4a:d8:64:61:8f:ec:41:96:3a:88:80:c3:7c:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:59:62:A1:C2:68:CE:A9:FE:32:9E:4F:4E:2E:44:54:D2:C0:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/450963-ad15-4060-8b7b-64f1a723a6c6/1/JchZYqHCaM6p_jKeT04uRFTSwIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.41.0/24
IPv6:
2a12:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
50:b8:d5:96:2d:f7:20:0b:e0:8f:2a:e2:91:8e:97:d9:1c:52:
f8:55:05:99:25:8a:4d:81:f9:c6:4e:1f:da:8e:9f:5e:92:bf:
12:96:20:dd:23:c2:cb:df:3b:66:15:7b:d4:49:04:9b:a3:63:
ce:f7:c1:0c:2f:c1:82:bf:62:c0:0b:8b:93:21:e4:47:60:82:
0e:a2:9c:3f:a3:a2:4d:f7:69:b9:5c:41:e3:db:0e:a7:d0:58:
a0:bd:49:19:d6:7c:54:0e:48:bf:cc:00:92:60:0c:00:ba:73:
16:2b:3c:02:1d:14:10:41:e7:a9:d3:eb:0c:05:8b:df:80:69:
3f:b8:0d:1a:a3:08:c6:a7:dd:d9:23:30:65:af:5a:78:f2:fb:
df:a9:14:ac:23:fe:a3:b5:15:4f:83:ba:68:71:f9:4e:5c:e3:
31:03:0e:a5:24:45:77:ff:1b:55:87:16:0f:cc:7a:22:1d:29:
e9:a8:88:0b:fc:b1:93:4f:11:7b:f6:97:5f:42:85:bb:07:b3:
f9:2e:e5:cd:b3:2d:94:ab:a2:bd:96:40:6f:85:21:6c:c9:82:
c0:16:c0:47:bf:86:25:e4:b3:05:f0:3c:2f:09:dc:fe:f1:fe:
a1:46:c5:bc:46:f7:56:6a:b2:11:2a:ae:e4:aa:be:75:07:56:
eb:f9:3f:1b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9QXJXFWnVNf/QfHoRTngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWM4NTk2MmExYzI2OGNlYTlmZTMyOWU0ZjRlMmU0NDU0ZDJjMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RpR0vscPr6rox0HTaH3ZK0LsnSE
KbH5joceYC/sAs+Wony7W5PWeGQmaEzaVW+ADlTG1WLlov/jjSKuIXyU0sco2ZzU
wbEqyqa7mTX5JwWpv/TkBvlMMnA64xorWE9q4pOAY5dkPDOkRPjFoKaXEAFl5NV1
jSfyC3ZjD4FpGnjbLA1aAwhXmTuq3kzJbus4PNJUzhT0cBWqTDmfnzHCttA4/81s
MtjYf/9o5PinzjIEl8082mJ2wImJfogyfnm5jsz3uLgYP9VF4iNjKvU3BGNpADlP
12VPqOKVF4LZb+2bIn8u/et9ZadRbI2ilwCzmUrYZGGP7EGWOoiAw3xJBwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFCXIWWKhwmjOqf4ynk9OLkRU0sCMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwLzQ1MDk2
My1hZDE1LTQwNjAtOGI3Yi02NGYxYTcyM2E2YzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvNDUwOTYz
LWFkMTUtNDA2MC04YjdiLTY0ZjFhNzIzYTZjNi8xL0pjaFpZcUhDYU02cF9qS2VU
MDR1UkZUU3dJdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhMpMA0EAgACMAcDBQMqEksAMA0GCSqGSIb3
DQEBCwUAA4IBAQBQuNWWLfcgC+CPKuKRjpfZHFL4VQWZJYpNgfnGTh/ajp9ekr8S
liDdI8LL3ztmFXvUSQSbo2PO98EML8GCv2LAC4uTIeRHYIIOopw/o6JN92m5XEHj
2w6n0FigvUkZ1nxUDki/zACSYAwAunMWKzwCHRQQQeep0+sMBYvfgGk/uA0aowjG
p93ZIzBlr1p48vvfqRSsI/6jtRVPg7pocflOXOMxAw6lJEV3/xtVhxYPzHoiHSnp
qIgL/LGTTxF79pdfQoW7B7P5LuXNsy2Uq6K9lkBvhSFsyYLAFsBHv4Yl5LMF8Dwv
Cdz+8f6hRsW8RvdWarIRKq7kqr51B1br+T8b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:02 2024 by rpki-client on console-ams.rpki-client.org