Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer
File: MyDD4uzyi4xZN0-oFtxK2Q5fDPA.cer (raw, json)
Hash identifier: E5Gk7hdQ+ev5wsWw/NFYh3dARLJ/QFf92Pm9EVkxcu8=
Subject key identifier: 33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245D7CB4438527D9B9ED9C580E63639
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.62.162.0/24
IP: 2a11:7a00::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:d7:cb:44:38:52:7d:9b:9e:d9:c5:80:e6:36:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3320c3e2ecf28b8c59374fa816dc4ad90e5f0cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:17:a8:99:01:4b:78:de:3c:83:e1:ed:b9:
d4:30:ea:c7:e9:3a:86:65:d1:16:de:67:19:54:e3:
ab:52:d6:e6:9c:ad:4e:b8:d9:01:60:39:00:80:e1:
6f:9b:f5:f3:53:07:57:07:2f:7d:c4:da:e1:58:e6:
c4:9a:d2:17:fe:e5:8f:50:2c:f8:8f:4d:df:08:3c:
67:4e:0b:70:91:b3:69:e3:f1:60:eb:0c:52:78:5b:
dd:89:56:01:c1:74:69:bd:9b:66:fd:c4:5e:ef:0a:
13:dd:9b:b7:bf:1c:1d:da:7a:45:eb:9b:23:02:d4:
b2:de:49:23:8d:5f:cf:f7:48:e9:be:9c:c8:39:d3:
f2:32:cd:17:b8:b1:58:69:17:84:b2:34:5a:c6:9a:
47:12:ff:ca:da:17:72:14:8b:3d:4d:eb:04:96:f3:
31:ae:d7:e8:c2:be:f7:0c:6c:cc:f3:f6:98:b5:a2:
f8:70:45:02:40:3b:5b:89:b4:13:8e:2f:36:eb:c6:
4d:df:b9:ca:95:f5:d7:41:29:78:f1:7d:a4:86:9f:
f1:1d:3a:41:78:08:37:5c:03:94:09:f2:c3:c3:82:
6a:76:09:35:3f:1b:ad:7e:a6:6a:0c:ed:5a:e6:ca:
fe:e6:08:1e:99:65:a9:72:c3:b1:8e:45:dc:d0:46:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:C3:E2:EC:F2:8B:8C:59:37:4F:A8:16:DC:4A:D9:0E:5F:0C:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/57eb89-91a8-4f98-adf1-d68f4c035ea1/1/MyDD4uzyi4xZN0-oFtxK2Q5fDPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.162.0/24
IPv6:
2a11:7a00::/29
Signature Algorithm: sha256WithRSAEncryption
85:6a:8e:80:4e:97:84:e0:af:13:b2:03:c5:5c:5a:11:11:39:
f3:6b:55:35:19:a1:58:fa:52:b0:9a:c5:33:70:e2:f4:c9:47:
26:13:64:a1:93:cc:9d:8d:83:4d:30:3e:fb:d6:5a:cf:96:ed:
10:f0:44:93:d4:c8:90:86:21:f0:d8:63:e2:31:b8:1a:3e:8c:
70:d8:4f:03:bc:54:ee:f0:22:27:fd:b6:a3:8f:42:7c:35:fe:
6a:52:8e:b7:bd:bc:34:6c:c2:00:2d:cf:fd:92:a2:33:87:ff:
e8:4e:29:42:1f:87:c2:87:10:67:07:90:db:bc:93:57:27:14:
db:74:dd:37:38:fe:46:43:ca:44:dc:fa:38:1b:d7:4d:ab:25:
4e:16:f1:eb:38:eb:d3:2d:c6:91:98:44:f0:a3:38:5f:d5:79:
52:de:0c:da:7f:12:f7:23:34:0f:d7:e4:35:03:54:36:d6:72:
c9:75:9f:91:9d:94:ee:86:ee:35:49:50:4a:56:f1:f3:a0:3d:
04:b6:b9:6e:94:e8:5a:44:35:ee:9b:9d:6f:2f:7e:44:4c:e8:
93:fa:92:b1:2b:51:72:7a:6a:44:d6:a2:a3:59:58:11:02:e0:
23:fe:f4:17:d8:cf:e2:a4:ae:f2:8b:71:fb:cf:6b:a7:3a:76:
6b:35:6f:25
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVyRdfLRDhSfZue2cWA5jY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzIwYzNlMmVjZjI4YjhjNTkzNzRmYTgxNmRjNGFkOTBlNWYwY2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj4XqJkBS3jePIPh7bnUMOrH6TqG
ZdEW3mcZVOOrUtbmnK1OuNkBYDkAgOFvm/XzUwdXBy99xNrhWObEmtIX/uWPUCz4
j03fCDxnTgtwkbNp4/Fg6wxSeFvdiVYBwXRpvZtm/cRe7woT3Zu3vxwd2npF65sj
AtSy3kkjjV/P90jpvpzIOdPyMs0XuLFYaReEsjRaxppHEv/K2hdyFIs9TesElvMx
rtfowr73DGzM8/aYtaL4cEUCQDtbibQTji8268ZN37nKlfXXQSl48X2khp/xHTpB
eAg3XAOUCfLDw4Jqdgk1PxutfqZqDO1a5sr+5ggemWWpcsOxjkXc0EbihQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDMgw+Ls8ouMWTdPqBbcStkOXwzwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzU3ZWI4
OS05MWE4LTRmOTgtYWRmMS1kNjhmNGMwMzVlYTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNTdlYjg5
LTkxYTgtNGY5OC1hZGYxLWQ2OGY0YzAzNWVhMS8xL015REQ0dXp5aTR4Wk4wLW9G
dHhLMlE1ZkRQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwj6iMA0EAgACMAcDBQMqEXoAMA0GCSqGSIb3
DQEBCwUAA4IBAQCFao6ATpeE4K8TsgPFXFoRETnza1U1GaFY+lKwmsUzcOL0yUcm
E2Shk8ydjYNNMD771lrPlu0Q8EST1MiQhiHw2GPiMbgaPoxw2E8DvFTu8CIn/baj
j0J8Nf5qUo63vbw0bMIALc/9kqIzh//oTilCH4fChxBnB5DbvJNXJxTbdN03OP5G
Q8pE3Po4G9dNqyVOFvHrOOvTLcaRmETwozhf1XlS3gzafxL3IzQP1+Q1A1Q21nLJ
dZ+RnZTuhu41SVBKVvHzoD0EtrlulOhaRDXum51vL35ETOiT+pKxK1FyempE1qKj
WVgRAuAj/vQX2M/ipK7yi3H7z2unOnZrNW8l
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:25 2024 by rpki-client on console-fra.rpki-client.org