Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MDel92eXR4OanF10DhCpQRkXV3I.cer
File: MDel92eXR4OanF10DhCpQRkXV3I.cer (raw, json)
Hash identifier: UjuKy0auOKNoAHsAfYl12OQMeHlUKgsgTZ52IRzmuHI=
Subject key identifier: 30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3E5B7CFE009EC9F2BE9A6EFAF570E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/MDel92eXR4OanF10DhCpQRkXV3I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:31:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.150.76.0/24
IP: 2a11:9200::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:5b:7c:fe:00:9e:c9:f2:be:9a:6e:fa:f5:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3037a5f7679747839a9c5d740e10a94119175772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:84:b6:56:af:89:3b:54:a7:d8:9a:ef:65:
87:26:5b:59:99:e0:d4:f4:48:08:f1:4e:5d:25:86:
40:73:e7:7d:e3:94:ac:52:a2:d9:51:0d:8b:b9:a2:
f3:c7:c3:8b:53:f1:12:11:1a:4f:cc:c7:9a:8f:c7:
07:6a:0f:24:e5:c6:61:72:2f:1a:9c:90:95:4f:e1:
9e:bd:d2:87:5f:f5:95:cb:86:10:50:92:b8:b0:b8:
45:f8:d1:d8:e2:50:bf:b8:51:80:ac:61:a8:47:23:
a7:fe:06:54:03:58:8e:97:8f:96:be:6c:9c:f4:6d:
ba:6d:7d:ae:7c:ef:fb:41:3b:c2:90:f0:b7:03:24:
4e:b6:23:6d:0c:0a:3a:bb:3f:e8:e9:10:89:4b:e3:
0b:71:18:d6:64:90:fc:b9:3d:2d:b7:7f:31:4d:0c:
01:f2:cc:85:e2:7d:d2:9d:f8:9d:84:b8:8e:5e:70:
3b:09:15:82:7b:f6:5a:64:f4:e4:a0:bb:8f:a7:26:
f1:70:ed:bc:de:dd:6a:48:ba:86:b3:7a:51:ab:44:
95:98:cb:df:73:d0:1e:e1:29:d2:2a:f5:98:40:c6:
05:16:01:6f:0d:cc:97:db:09:c1:cd:15:31:ba:17:
5a:8a:b9:5d:de:92:1d:5c:84:2d:95:51:22:1d:40:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:37:A5:F7:67:97:47:83:9A:9C:5D:74:0E:10:A9:41:19:17:57:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/70337f-65ee-4242-bb29-22f4b9cf8f9f/1/MDel92eXR4OanF10DhCpQRkXV3I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.76.0/24
IPv6:
2a11:9200::/29
Signature Algorithm: sha256WithRSAEncryption
46:90:9a:0a:b0:24:0f:45:41:82:9b:b0:e5:4c:1c:3f:57:ba:
45:34:a2:0a:b6:bc:66:6d:fa:c3:27:03:1e:93:4c:d0:b8:e8:
f6:ba:db:94:f0:ba:b7:15:c3:bf:a5:15:0f:c6:8f:73:e3:bb:
9e:ff:2f:02:f5:1e:95:85:37:ed:34:1f:ed:0b:2c:af:4f:17:
28:b8:88:e1:e4:60:02:01:e6:14:3e:66:40:ba:93:19:8a:a1:
a4:e1:b9:bd:f4:3d:4f:22:1f:29:39:d3:70:42:bc:6b:51:1d:
3a:f5:5a:5e:12:ba:11:15:9f:07:63:6b:66:ec:25:fd:a9:50:
a3:75:db:00:8d:76:e2:f7:30:bf:d3:0b:5d:ab:b4:fe:eb:2f:
67:a5:bf:e0:1f:c0:a8:ff:37:96:a7:cf:56:74:25:dc:d0:72:
92:dd:66:36:1d:90:85:5e:86:05:74:30:3d:86:25:8c:5c:93:
87:bd:9e:bd:f5:c5:86:c6:29:8e:7f:f2:1a:0e:23:7b:b3:4c:
35:61:07:80:7e:d5:31:52:50:09:c9:89:67:29:6d:ed:79:e3:
55:5b:4c:e2:0b:06:32:ce:e0:cf:6e:84:90:5f:98:92:6d:07:
83:56:8e:ab:04:88:2c:13:90:8f:27:dd:69:f4:37:ba:80:4b:
ee:92:de:29
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsPlt8/gCeyfK+mm769XDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDczMTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDM3YTVmNzY3OTc0NzgzOWE5YzVkNzQwZTEwYTk0MTE5MTc1NzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2WEtlaviTtUp9ia72WHJltZmeDU
9EgI8U5dJYZAc+d945SsUqLZUQ2LuaLzx8OLU/ESERpPzMeaj8cHag8k5cZhci8a
nJCVT+GevdKHX/WVy4YQUJK4sLhF+NHY4lC/uFGArGGoRyOn/gZUA1iOl4+Wvmyc
9G26bX2ufO/7QTvCkPC3AyROtiNtDAo6uz/o6RCJS+MLcRjWZJD8uT0tt38xTQwB
8syF4n3SnfidhLiOXnA7CRWCe/ZaZPTkoLuPpybxcO283t1qSLqGs3pRq0SVmMvf
c9Ae4SnSKvWYQMYFFgFvDcyX2wnBzRUxuhdairld3pIdXIQtlVEiHUD1qwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDA3pfdnl0eDmpxddA4QqUEZF1dyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzcwMzM3
Zi02NWVlLTQyNDItYmIyOS0yMmY0YjljZjhmOWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvNzAzMzdm
LTY1ZWUtNDI0Mi1iYjI5LTIyZjRiOWNmOGY5Zi8xL01EZWw5MmVYUjRPYW5GMTBE
aENwUVJrWFYzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwpZMMA0EAgACMAcDBQMqEZIAMA0GCSqGSIb3
DQEBCwUAA4IBAQBGkJoKsCQPRUGCm7DlTBw/V7pFNKIKtrxmbfrDJwMek0zQuOj2
utuU8Lq3FcO/pRUPxo9z47ue/y8C9R6VhTftNB/tCyyvTxcouIjh5GACAeYUPmZA
upMZiqGk4bm99D1PIh8pOdNwQrxrUR069VpeEroRFZ8HY2tm7CX9qVCjddsAjXbi
9zC/0wtdq7T+6y9npb/gH8Co/zeWp89WdCXc0HKS3WY2HZCFXoYFdDA9hiWMXJOH
vZ699cWGximOf/IaDiN7s0w1YQeAftUxUlAJyYlnKW3teeNVW0ziCwYyzuDPboSQ
X5iSbQeDVo6rBIgsE5CPJ91p9De6gEvukt4p
-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org