Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LrTa0HGmYJSJRcv22Nz9LNvVLoI.cer
File: LrTa0HGmYJSJRcv22Nz9LNvVLoI.cer (raw, json)
Hash identifier: 6hDoahw7/3uikBCMFmJ+g7smub5TiWpTr9cIuxxw6UQ=
Subject key identifier: 2E:B4:DA:D0:71:A6:60:94:89:45:CB:F6:D8:DC:FD:2C:DB:D5:2E:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBDCA6463B472DB4A1E17EA4FF53F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/262638-e859-41ce-8eb0-aea8e66bc349/1/LrTa0HGmYJSJRcv22Nz9LNvVLoI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/262638-e859-41ce-8eb0-aea8e66bc349/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.140.216.0/24
IP: 2a11:7500::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 10:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:dc:a6:46:3b:47:2d:b4:a1:e1:7e:a4:ff:53:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eb4dad071a660948945cbf6d8dcfd2cdbd52e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:77:06:53:7c:c6:19:c6:6b:f8:f5:5e:c9:
5f:d4:16:2c:9d:f3:85:a5:b1:28:50:bf:a2:87:6c:
f9:8b:e5:06:7c:71:b4:78:9c:18:c1:81:bb:65:54:
8a:1b:1d:29:97:41:ce:5c:36:4f:b5:7f:9c:b8:bd:
c4:90:bb:8a:5a:0e:9a:fe:12:3b:fb:ba:fc:8e:25:
12:ec:0f:5a:de:43:29:8b:e1:71:40:f1:8d:44:3f:
37:cb:22:80:2d:44:7d:34:2f:af:c0:4b:09:41:d8:
e4:ca:87:f3:cb:17:54:a7:cc:df:16:9e:17:90:4a:
9a:33:ca:97:74:15:2a:65:da:38:41:bc:0e:9f:3b:
8e:49:06:44:93:44:82:ae:67:12:1c:4c:ec:46:d6:
8e:79:14:75:f8:11:5d:ff:73:22:1a:5a:cf:26:8c:
89:a4:c3:5d:75:55:cb:14:b9:ba:68:41:dd:58:f0:
dc:99:a2:04:88:ab:da:b1:ab:76:87:23:96:32:23:
68:50:f2:e3:40:70:5a:fe:24:cf:dc:5a:3e:26:a9:
54:d9:32:a3:40:6d:2c:9d:b2:78:ab:8c:a6:9a:2f:
55:63:09:41:ce:51:47:3c:32:58:8d:48:ba:b6:6d:
43:7f:de:77:42:26:46:97:e0:69:c0:d0:46:51:27:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:DA:D0:71:A6:60:94:89:45:CB:F6:D8:DC:FD:2C:DB:D5:2E:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/262638-e859-41ce-8eb0-aea8e66bc349/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/262638-e859-41ce-8eb0-aea8e66bc349/1/LrTa0HGmYJSJRcv22Nz9LNvVLoI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.216.0/24
IPv6:
2a11:7500::/29
Signature Algorithm: sha256WithRSAEncryption
1a:d1:01:41:60:a7:43:9e:24:2d:3e:db:56:e4:5c:cd:5a:4a:
a4:28:1c:83:17:23:e1:c5:cf:9f:3b:4e:c4:b4:d3:46:3c:6e:
18:c0:95:9e:9a:bf:2b:8e:e1:9a:e7:38:5c:32:b0:cd:ab:0e:
bd:dd:4c:a7:ae:df:aa:58:22:06:02:82:6e:fe:c1:3f:55:de:
05:78:b6:86:ee:f9:cf:b3:3f:5a:d4:31:84:16:79:43:4a:78:
a4:25:e5:3c:cb:f5:aa:88:15:d0:c1:b5:6a:a6:b9:ca:63:ef:
15:e3:12:47:3c:04:ae:a8:a9:d9:97:6a:f4:0d:09:55:fc:ec:
b7:57:46:51:bf:6b:c2:82:2c:c8:e6:d6:e2:96:e1:3c:66:3a:
14:62:e8:c9:41:24:26:cd:ea:f5:89:ac:4d:b8:71:2b:47:3d:
87:ab:02:61:bf:24:2b:29:1d:e4:74:48:9d:33:a7:bb:1b:0a:
46:37:dd:a9:a0:26:8c:08:a6:e6:e7:53:e7:62:f3:d0:f2:33:
36:b7:3d:96:db:b1:7a:53:b0:10:5a:eb:75:30:73:bc:56:6c:
ed:d5:9a:42:f1:9b:91:64:ff:56:54:f9:16:12:f2:f1:b8:a2:
93:ea:9b:f5:f0:36:39:f1:1f:3f:e4:47:54:71:a5:77:fe:ce:
4b:4f:08:a3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu+9ymRjtHLbSh4X6k/1P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWI0ZGFkMDcxYTY2MDk0ODk0NWNiZjZkOGRjZmQyY2RiZDUyZTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdV3BlN8xhnGa/j1Xslf1BYsnfOF
pbEoUL+ih2z5i+UGfHG0eJwYwYG7ZVSKGx0pl0HOXDZPtX+cuL3EkLuKWg6a/hI7
+7r8jiUS7A9a3kMpi+FxQPGNRD83yyKALUR9NC+vwEsJQdjkyofzyxdUp8zfFp4X
kEqaM8qXdBUqZdo4QbwOnzuOSQZEk0SCrmcSHEzsRtaOeRR1+BFd/3MiGlrPJoyJ
pMNddVXLFLm6aEHdWPDcmaIEiKvasat2hyOWMiNoUPLjQHBa/iTP3Fo+JqlU2TKj
QG0snbJ4q4ymmi9VYwlBzlFHPDJYjUi6tm1Df953QiZGl+BpwNBGUSeLdwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFC602tBxpmCUiUXL9tjc/Szb1S6CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzI2MjYz
OC1lODU5LTQxY2UtOGViMC1hZWE4ZTY2YmMzNDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMjYyNjM4
LWU4NTktNDFjZS04ZWIwLWFlYThlNjZiYzM0OS8xL0xyVGEwSEdtWUpTSlJjdjIy
Tno5TE52VkxvSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAJYzYMA0EAgACMAcDBQMqEXUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAa0QFBYKdDniQtPttW5FzNWkqkKByDFyPhxc+fO07EtNNGPG4Y
wJWemr8rjuGa5zhcMrDNqw693Uynrt+qWCIGAoJu/sE/Vd4FeLaG7vnPsz9a1DGE
FnlDSnikJeU8y/WqiBXQwbVqprnKY+8V4xJHPASuqKnZl2r0DQlV/Oy3V0ZRv2vC
gizI5tbiluE8ZjoUYujJQSQmzer1iaxNuHErRz2HqwJhvyQrKR3kdEidM6e7GwpG
N92poCaMCKbm51PnYvPQ8jM2tz2W27F6U7AQWut1MHO8Vmzt1ZpC8ZuRZP9WVPkW
EvLxuKKT6pv18DY58R8/5EdUcaV3/s5LTwij
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:07 2024 by rpki-client on console-fra.rpki-client.org