Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mo0rQvCap5PRbs7CCFgN2l8KQCs.cer
File: Mo0rQvCap5PRbs7CCFgN2l8KQCs.cer (raw, json)
Hash identifier: H3GzvS9okJBmxMt7QBSAK1bXinHmKA4DUJg9pbjYxuo=
Subject key identifier: 32:8D:2B:42:F0:9A:A7:93:D1:6E:CE:C2:08:58:0D:DA:5F:0A:40:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701E6FF9B93CCFCC601CFAF3B29558AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/Mo0rQvCap5PRbs7CCFgN2l8KQCs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:35:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 20526
IP: 194.242.36.0/24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 10:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:6f:f9:b9:3c:cf:cc:60:1c:fa:f3:b2:95:58:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=328d2b42f09aa793d16ecec208580dda5f0a402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:d1:b5:8b:ef:44:32:1e:40:65:87:85:58:
a9:68:33:b7:3a:78:5f:1a:4e:ed:fe:fa:87:98:61:
b7:1b:35:75:b1:7a:12:f0:79:91:7b:8b:35:5c:d7:
c7:71:f8:79:bb:a7:aa:8d:81:ca:77:4c:a7:92:e3:
60:5e:6d:d4:4c:21:f3:74:b0:fc:42:97:d4:df:56:
67:ae:33:46:aa:ad:1a:2a:6c:d4:55:8a:06:3a:35:
e5:8c:b6:75:a0:05:bc:49:29:9a:50:68:94:b2:60:
49:44:c2:c3:d5:ac:8e:c3:d0:63:e7:aa:95:b6:fc:
4d:ba:89:e3:a9:4f:b4:d4:ab:5e:10:07:7d:02:9d:
1b:bb:2c:c7:75:b9:55:bb:b7:ed:d1:f0:d4:c4:f6:
55:a3:0e:ac:98:28:45:b0:d1:02:c8:c1:36:0e:69:
aa:2b:b5:74:fe:2f:6b:09:b8:30:f0:9b:1e:94:99:
cf:a2:f9:dd:7a:2f:78:f1:37:bc:36:6d:16:4f:fb:
56:a9:5a:c4:55:9a:ad:9f:82:ab:92:1b:c0:3f:97:
eb:0a:ce:1b:70:0f:57:ef:97:9a:86:39:df:40:21:
ce:9e:b0:f5:fc:bd:47:a6:53:fb:a3:d8:c8:8c:09:
9f:93:aa:eb:f3:e1:7b:c6:52:79:ad:af:a2:c8:cf:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8D:2B:42:F0:9A:A7:93:D1:6E:CE:C2:08:58:0D:DA:5F:0A:40:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a5fa7f-0ff3-4d80-b8b2-b08f3d745cc6/1/Mo0rQvCap5PRbs7CCFgN2l8KQCs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.36.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20526
Signature Algorithm: sha256WithRSAEncryption
79:b1:18:a3:e2:fe:48:56:c9:96:82:c5:b2:90:01:d3:d4:b7:
55:95:ce:b0:3d:34:15:9d:fb:c4:92:56:4b:78:30:e5:82:7e:
c9:9f:c6:58:8e:1e:8f:1f:62:57:ba:2e:98:2b:97:a3:b2:cf:
5b:4a:38:f6:1f:23:26:a5:b7:63:0b:59:99:0b:3e:39:36:50:
44:06:3b:66:47:c7:ba:65:1c:48:50:b2:ae:8d:23:5b:8d:61:
0b:6c:c7:74:f7:ad:67:66:c5:30:74:b0:37:55:0b:e5:b1:94:
a4:e7:a4:6e:50:6b:4e:34:1d:bc:17:dc:8c:50:65:ae:0c:c6:
b3:b2:22:df:49:87:7e:99:74:bb:14:05:04:40:6e:2c:72:5a:
29:13:6d:bd:40:a3:87:09:20:67:78:f5:0c:56:7a:04:6c:6d:
27:c6:fe:f4:5e:b9:4a:5a:dd:f7:18:ae:6b:02:57:44:30:37:
b5:09:5f:f5:4d:da:0f:4d:fd:be:78:58:4b:3d:60:9c:0b:03:
b8:71:7a:f0:73:31:5d:4b:74:14:15:38:8b:70:17:a9:75:eb:
20:3d:a5:b4:fd:23:00:dd:db:f8:6e:24:fe:c7:8c:94:02:4e:
3d:0f:36:78:49:a8:a3:29:0b:71:97:44:b0:b2:bb:cf:f5:52:
75:b9:71:60
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYVwHm/5uTzPzGAc+vOylVirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDEzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjhkMmI0MmYwOWFhNzkzZDE2ZWNlYzIwODU4MGRkYTVmMGE0MDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/RtYvvRDIeQGWHhVipaDO3Onhf
Gk7t/vqHmGG3GzV1sXoS8HmRe4s1XNfHcfh5u6eqjYHKd0ynkuNgXm3UTCHzdLD8
QpfU31ZnrjNGqq0aKmzUVYoGOjXljLZ1oAW8SSmaUGiUsmBJRMLD1ayOw9Bj56qV
tvxNuonjqU+01KteEAd9Ap0buyzHdblVu7ft0fDUxPZVow6smChFsNECyME2Dmmq
K7V0/i9rCbgw8JselJnPovndei948Te8Nm0WT/tWqVrEVZqtn4KrkhvAP5frCs4b
cA9X75eahjnfQCHOnrD1/L1HplP7o9jIjAmfk6rr8+F7xlJ5ra+iyM8R9QIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFDKNK0LwmqeT0W7OwghYDdpfCkArMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2E1ZmE3
Zi0wZmYzLTRkODAtYjhiMi1iMDhmM2Q3NDVjYzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvYTVmYTdm
LTBmZjMtNGQ4MC1iOGIyLWIwOGYzZDc0NWNjNi8xL01vMHJRdkNhcDVQUmJzN0ND
RmdOMmw4S1FDcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwvIkMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AlAuMA0GCSqGSIb3DQEBCwUAA4IBAQB5sRij4v5IVsmWgsWykAHT1LdVlc6wPTQV
nfvEklZLeDDlgn7Jn8ZYjh6PH2JXui6YK5ejss9bSjj2HyMmpbdjC1mZCz45NlBE
BjtmR8e6ZRxIULKujSNbjWELbMd0961nZsUwdLA3VQvlsZSk56RuUGtONB28F9yM
UGWuDMazsiLfSYd+mXS7FAUEQG4sclopE229QKOHCSBnePUMVnoEbG0nxv70XrlK
Wt33GK5rAldEMDe1CV/1TdoPTf2+eFhLPWCcCwO4cXrwczFdS3QUFTiLcBepdesg
PaW0/SMA3dv4biT+x4yUAk49DzZ4SaijKQtxl0SwsrvP9VJ1uXFg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-fra.rpki-client.org