Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NvVXeSqri72ebeTuxtJ4V3AfM00.cer
File: NvVXeSqri72ebeTuxtJ4V3AfM00.cer (raw, json)
Hash identifier: 97yA6gH6XgAyOMsGIZuGmiegOdassIw0IAbwZDmyoG8=
Subject key identifier: 36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716856F875D8D47105FCF92B3A421178
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:41 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.213.108.0/22
IP: 2a0b:8740::/29
Validation: Failed, certificate revoked on Fri 29 Dec 2023 13:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:56:f8:75:d8:d4:71:05:fc:f9:2b:3a:42:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f557792aab8bbd9e6de4eec6d27857701f334d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:44:fa:b7:51:ad:94:d6:98:0c:66:e1:9b:
da:ad:c2:79:24:c7:e1:60:37:22:6d:0a:63:a7:ef:
29:bc:f8:ce:95:14:3c:9e:8d:43:45:89:ae:68:10:
33:e7:41:a0:0a:a7:d8:36:80:0a:fc:7f:bd:e5:ca:
50:fc:03:84:e5:54:1a:9f:32:88:31:b0:0c:7c:82:
95:5f:b2:93:f3:38:32:df:38:0e:55:e3:2b:56:34:
bc:d2:8e:76:df:d6:f1:ae:72:dc:6b:84:ec:56:1d:
02:20:50:bc:d5:da:ad:ff:6f:8e:ad:b9:9e:cc:a6:
0f:76:6b:db:3d:d2:cd:fe:35:f8:1c:ce:29:95:c8:
97:b0:a9:0f:0a:f2:bb:fb:1e:99:f8:25:3f:d3:5a:
8c:7d:0d:59:ad:7d:17:ba:b9:fa:9e:22:6a:1d:7c:
f5:74:a8:6e:90:ea:90:1c:dc:fb:67:04:92:3f:11:
cb:cb:b6:3c:e4:09:0c:00:0b:a9:49:68:1b:f6:6d:
34:e8:93:42:09:c6:14:a1:a1:28:dd:08:90:52:1d:
8f:7a:89:9e:fe:af:a6:e3:5e:92:f5:46:3f:f5:09:
dd:c0:4f:18:ac:7f:e4:18:0a:d1:81:2b:be:a7:74:
a5:eb:8b:c1:8c:cc:d1:d4:66:be:bb:67:d6:40:b5:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:57:79:2A:AB:8B:BD:9E:6D:E4:EE:C6:D2:78:57:70:1F:33:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4e1c2-edce-428f-a64d-218f1adcd82a/1/NvVXeSqri72ebeTuxtJ4V3AfM00.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.108.0/22
IPv6:
2a0b:8740::/29
Signature Algorithm: sha256WithRSAEncryption
64:96:f8:c6:bf:7e:73:ce:7b:ca:30:47:b9:f0:52:b0:e0:63:
a4:4c:fa:01:36:55:6d:20:e0:32:91:ef:ad:a3:b2:26:0e:8a:
a7:96:f8:00:12:fa:f1:57:a9:a9:1a:d9:4d:f9:bd:58:0e:dc:
4d:52:25:ae:80:49:6d:0d:43:e1:44:1a:f3:4d:80:1c:bb:44:
cb:72:08:f0:18:7c:a3:af:40:c4:01:61:08:9b:5d:f7:80:86:
4c:ea:0e:69:93:52:68:e6:8f:12:50:a3:5f:41:10:cb:14:28:
8e:27:32:98:64:40:13:e2:d0:58:bf:17:d0:26:bc:b2:66:ea:
ea:18:fc:f8:c0:88:64:95:3d:a4:65:f4:d5:01:55:53:43:d4:
e0:93:2c:48:79:c2:7d:86:c0:8a:95:c4:ef:c5:b3:be:2e:87:
c8:cc:c4:f5:28:48:2b:26:0e:e1:e7:a1:15:12:e9:44:fb:fe:
f1:84:2c:c5:70:73:58:ff:90:bb:f2:fc:2b:dc:72:94:3c:7d:
1c:c4:85:c1:b3:c9:23:f8:7b:e5:40:c0:d2:8e:7a:36:be:20:
c1:25:1c:f9:16:66:e2:5d:8d:fc:f0:6b:8b:60:a8:97:05:af:
43:b8:3f:97:96:2a:b8:93:c6:c4:65:61:4c:03:d9:df:f9:89:
d6:93:88:d0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVxaFb4ddjUcQX8+Ss6QhF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmY1NTc3OTJhYWI4YmJkOWU2ZGU0ZWVjNmQyNzg1NzcwMWYzMzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypBE+rdRrZTWmAxm4ZvarcJ5JMfh
YDcibQpjp+8pvPjOlRQ8no1DRYmuaBAz50GgCqfYNoAK/H+95cpQ/AOE5VQanzKI
MbAMfIKVX7KT8zgy3zgOVeMrVjS80o5239bxrnLca4TsVh0CIFC81dqt/2+Orbme
zKYPdmvbPdLN/jX4HM4plciXsKkPCvK7+x6Z+CU/01qMfQ1ZrX0Xurn6niJqHXz1
dKhukOqQHNz7ZwSSPxHLy7Y85AkMAAupSWgb9m006JNCCcYUoaEo3QiQUh2Peome
/q+m416S9UY/9QndwE8YrH/kGArRgSu+p3Sl64vBjMzR1Ga+u2fWQLWLiQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDb1V3kqq4u9nm3k7sbSeFdwHzNNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxL2M0ZTFj
Mi1lZGNlLTQyOGYtYTY0ZC0yMThmMWFkY2Q4MmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvYzRlMWMy
LWVkY2UtNDI4Zi1hNjRkLTIxOGYxYWRjZDgyYS8xL052VlhlU3FyaTcyZWJlVHV4
dEo0VjNBZk0wMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCudVsMA0EAgACMAcDBQMqC4dAMA0GCSqGSIb3
DQEBCwUAA4IBAQBklvjGv35zznvKMEe58FKw4GOkTPoBNlVtIOAyke+to7ImDoqn
lvgAEvrxV6mpGtlN+b1YDtxNUiWugEltDUPhRBrzTYAcu0TLcgjwGHyjr0DEAWEI
m133gIZM6g5pk1Jo5o8SUKNfQRDLFCiOJzKYZEAT4tBYvxfQJryyZurqGPz4wIhk
lT2kZfTVAVVTQ9TgkyxIecJ9hsCKlcTvxbO+LofIzMT1KEgrJg7h56EVEulE+/7x
hCzFcHNY/5C78vwr3HKUPH0cxIXBs8kj+HvlQMDSjno2viDBJRz5FmbiXY388GuL
YKiXBa9DuD+Xliq4k8bEZWFMA9nf+YnWk4jQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-fra.rpki-client.org