Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P78NTyXsEZco8UqcUa7oA0__P_Y.cer
File: P78NTyXsEZco8UqcUa7oA0__P_Y.cer (raw, json)
Hash identifier: qsdZtBfh1PsrKP7F5eLc1w03Jntbm4aNDk2HPZhWjq8=
Subject key identifier: 3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B61DA25E4FF200EF63704B2C8542A6998
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 24 Oct 2023 13:22:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.118.33.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:da:25:e4:ff:20:0e:f6:37:04:b2:c8:54:2a:69:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 24 13:22:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fbf0d4f25ec119728f14a9c51aee8034fff3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:7e:9b:30:77:bf:3b:de:2c:73:2b:0b:57:
df:34:13:4b:77:23:ce:0f:f0:6d:a9:27:38:a7:52:
98:b4:99:86:6f:9a:f2:9e:ad:09:cc:bd:b1:82:a3:
59:b8:1a:89:bd:b7:5c:31:3d:b6:e9:10:26:68:42:
b3:34:07:ca:56:28:34:0d:c2:f0:60:97:a6:41:e8:
7f:e0:0b:b2:e6:d2:bb:85:ee:00:f8:e5:ee:5b:4f:
fb:61:82:90:4c:4a:3c:cb:d8:ee:db:47:02:97:6e:
63:e5:4e:e6:bf:9d:b7:64:aa:48:b3:1c:f5:dd:e1:
7f:3a:fa:ba:c2:4e:42:c7:49:88:16:5b:5c:82:dd:
22:59:a9:96:16:a5:19:8d:e6:c2:88:80:43:89:80:
15:e5:f9:a7:5e:3b:02:4b:bc:46:46:60:04:9f:ce:
6f:91:00:86:c6:e2:3f:ff:8e:88:43:65:53:12:0f:
79:05:a0:ed:ca:7b:bf:21:cb:81:75:a0:04:ff:8e:
43:04:5b:da:ea:c4:13:0d:4d:0f:c0:da:8e:ed:8c:
15:56:e8:86:74:35:1f:9c:c0:94:95:e4:91:aa:31:
e4:05:2b:7a:ac:83:17:9f:1d:e0:ab:a9:0d:4e:27:
74:06:00:34:c1:cb:06:3a:2c:2e:c5:fe:05:ce:b3:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:0D:4F:25:EC:11:97:28:F1:4A:9C:51:AE:E8:03:4F:FF:3F:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a8e808-95f3-4ab3-978b-23cd7cceac45/1/P78NTyXsEZco8UqcUa7oA0__P_Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.33.0/24
Signature Algorithm: sha256WithRSAEncryption
03:65:3f:ff:97:f0:f4:e0:8d:64:7b:df:9b:84:89:94:fa:6d:
0a:d1:b8:02:d7:10:28:5c:d3:0c:e0:79:fa:28:aa:34:91:f6:
a2:9d:67:1f:5e:cc:f4:97:ad:ba:14:eb:40:3c:67:8d:b2:2c:
45:75:59:73:07:59:8f:2f:d7:c9:67:38:61:7f:98:05:7a:e3:
25:22:19:99:49:6e:8f:89:53:f8:fc:18:f4:45:39:95:df:07:
5e:1c:65:9c:b6:1a:5c:73:d8:8e:81:e2:0a:92:79:9e:57:e7:
dc:f9:b9:08:86:aa:2a:a6:11:23:d2:48:59:53:f5:98:60:4e:
bd:d2:69:34:91:cb:00:4a:90:d5:fd:7f:c7:34:a4:c4:b1:b5:
fd:27:0d:60:28:c8:86:34:bb:ee:b4:09:5b:26:9d:56:96:e0:
08:4b:76:2a:a5:5f:8d:0c:16:ff:08:ec:38:f3:29:18:e0:09:
e1:40:ae:e4:98:3e:cd:1a:0a:bb:c0:88:62:26:bc:d5:51:d2:
fd:dd:62:6e:35:69:f7:61:46:6a:30:7b:dc:80:35:77:16:a8:
dc:72:ab:34:6d:d3:32:e4:36:97:a7:c2:cb:3c:0c:52:b8:ae:
17:33:21:fd:33:a4:c6:c0:94:99:d0:ab:7d:b8:7c:8e:ba:6a:
ad:f4:53:02
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYth2iXk/yAO9jcEsshUKmmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDI0MTMyMjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmJmMGQ0ZjI1ZWMxMTk3MjhmMTRhOWM1MWFlZTgwMzRmZmYzZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA251+mzB3vzveLHMrC1ffNBNLdyPO
D/BtqSc4p1KYtJmGb5rynq0JzL2xgqNZuBqJvbdcMT226RAmaEKzNAfKVig0DcLw
YJemQeh/4Auy5tK7he4A+OXuW0/7YYKQTEo8y9ju20cCl25j5U7mv523ZKpIsxz1
3eF/Ovq6wk5Cx0mIFltcgt0iWamWFqUZjebCiIBDiYAV5fmnXjsCS7xGRmAEn85v
kQCGxuI//46IQ2VTEg95BaDtynu/IcuBdaAE/45DBFva6sQTDU0PwNqO7YwVVuiG
dDUfnMCUleSRqjHkBSt6rIMXnx3gq6kNTid0BgA0wcsGOiwuxf4FzrMaOQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFD+/DU8l7BGXKPFKnFGu6ANP/z/2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2E4ZTgw
OC05NWYzLTRhYjMtOTc4Yi0yM2NkN2NjZWFjNDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvYThlODA4
LTk1ZjMtNGFiMy05NzhiLTIzY2Q3Y2NlYWM0NS8xL1A3OE5UeVhzRVpjbzhVcWNV
YTdvQTBfX1BfWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAsHYhMA0GCSqGSIb3DQEBCwUAA4IBAQADZT//
l/D04I1ke9+bhImU+m0K0bgC1xAoXNMM4Hn6KKo0kfainWcfXsz0l626FOtAPGeN
sixFdVlzB1mPL9fJZzhhf5gFeuMlIhmZSW6PiVP4/Bj0RTmV3wdeHGWcthpcc9iO
geIKknmeV+fc+bkIhqoqphEj0khZU/WYYE690mk0kcsASpDV/X/HNKTEsbX9Jw1g
KMiGNLvutAlbJp1WluAIS3YqpV+NDBb/COw48ykY4AnhQK7kmD7NGgq7wIhiJrzV
UdL93WJuNWn3YUZqMHvcgDV3Fqjccqs0bdMy5DaXp8LLPAxSuK4XMyH9M6TGwJSZ
0Kt9uHyOumqt9FMC
-----END CERTIFICATE-----
Generated at Mon Nov 13 09:49:20 2023 by rpki-client on console-ams.rpki-client.org