Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PtJZHByD2zDkL7Dkq4Ew5sogv44.cer
File: PtJZHByD2zDkL7Dkq4Ew5sogv44.cer (raw, json)
Hash identifier: 5s6Vw1fVMQgd+gTj0QBb18hMxpR41bvLA1XT8QC021U=
Subject key identifier: 3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570F956E291B72F7781DA98498DE5EE1B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:34:27 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.23.186.0/24
IP: 2a11:dc80::/29
Validation: Failed, certificate revoked on Mon 11 Sep 2023 13:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f9:56:e2:91:b7:2f:77:81:da:98:49:8d:e5:ee:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ed2591c1c83db30e42fb0e4ab8130e6ca20bf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:39:e6:87:fc:bf:91:05:ca:13:74:6e:7b:
e3:cf:29:d7:ae:61:c2:1d:c5:2c:ec:f2:e5:2c:8e:
02:44:05:ad:87:27:88:d1:6a:0b:fb:3b:4c:f9:23:
22:f0:7c:a0:82:5c:e1:71:87:28:47:ff:c6:54:d2:
86:22:28:c2:ca:9c:86:f3:05:c6:0e:df:65:75:2b:
34:61:82:f2:83:82:2d:be:be:39:78:38:0a:de:90:
c5:91:47:07:7c:1e:60:48:14:64:5b:fd:9b:e8:3a:
b4:c4:97:70:b6:b3:0a:8a:ed:da:e2:fc:06:f9:e1:
76:b2:d2:61:39:af:68:bd:b2:2e:1c:95:20:3f:c2:
39:a1:c8:94:b2:86:9d:cd:51:d0:ac:e7:d4:80:1e:
82:93:50:61:76:4f:58:a5:88:84:51:3d:21:85:20:
cd:67:f4:f8:7d:0f:31:d3:83:ec:2c:1e:09:9d:6e:
95:b9:3d:5e:41:da:82:3c:d5:c1:46:07:58:12:d6:
da:45:fc:6a:40:45:e2:99:f7:f4:cc:99:4d:ea:eb:
f7:4c:1e:db:4f:ff:d1:3a:cf:63:5f:52:2d:97:bf:
ca:0a:01:48:be:bd:d6:4f:61:6f:3e:f7:6e:ed:ec:
61:11:43:48:f8:77:1d:64:ce:0b:0d:de:67:cb:4c:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:59:1C:1C:83:DB:30:E4:2F:B0:E4:AB:81:30:E6:CA:20:BF:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/7a180c-c1a5-4146-8429-08380fffc169/1/PtJZHByD2zDkL7Dkq4Ew5sogv44.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.23.186.0/24
IPv6:
2a11:dc80::/29
Signature Algorithm: sha256WithRSAEncryption
0b:50:73:3b:c6:10:f7:00:94:fc:4d:29:fb:16:23:e9:c7:0f:
89:b3:d5:70:06:24:67:c7:48:a5:73:7a:12:f1:32:99:cc:7c:
53:ee:96:63:7f:2d:80:77:05:4b:a4:91:c4:40:b4:df:a6:a2:
27:20:5e:f5:71:56:a5:63:a9:7a:80:55:40:0e:fb:5b:fd:a7:
43:dd:18:0d:51:80:b9:13:c3:d1:62:01:e9:54:56:7a:64:15:
b0:43:10:1b:ef:02:81:7f:25:47:51:75:ce:d8:d6:e5:27:34:
c0:ce:53:15:b2:b6:b3:7d:0f:3c:d5:29:82:a0:ec:83:ed:2b:
16:e4:97:5c:12:86:50:54:0e:08:5f:f9:22:73:9c:c7:5a:cc:
6c:38:c1:ed:4a:24:fc:cb:c6:ff:7b:77:f5:f7:00:c6:89:36:
71:9b:0b:4c:65:e9:d1:03:07:5f:25:a5:b2:c7:37:a5:21:5c:
3e:04:60:a2:a0:70:39:0d:85:b9:20:80:1f:64:36:f2:56:dd:
aa:48:7e:a1:d8:69:f1:72:d6:3b:91:11:71:81:62:25:52:da:
c2:2a:31:e6:c5:b7:71:d8:c3:48:76:62:71:d1:ef:01:f6:0c:
d0:cf:0c:f2:72:ee:3c:76:6a:c8:5a:44:18:b1:d8:e0:8f:fa:
7e:53:52:96
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVw+Vbikbcvd4HamEmN5e4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDUzNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWQyNTkxYzFjODNkYjMwZTQyZmIwZTRhYjgxMzBlNmNhMjBiZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo055of8v5EFyhN0bnvjzynXrmHC
HcUs7PLlLI4CRAWthyeI0WoL+ztM+SMi8HygglzhcYcoR//GVNKGIijCypyG8wXG
Dt9ldSs0YYLyg4Itvr45eDgK3pDFkUcHfB5gSBRkW/2b6Dq0xJdwtrMKiu3a4vwG
+eF2stJhOa9ovbIuHJUgP8I5ociUsoadzVHQrOfUgB6Ck1Bhdk9YpYiEUT0hhSDN
Z/T4fQ8x04PsLB4JnW6VuT1eQdqCPNXBRgdYEtbaRfxqQEXimff0zJlN6uv3TB7b
T//ROs9jX1Itl7/KCgFIvr3WT2FvPvdu7exhEUNI+HcdZM4LDd5ny0zBoQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFD7SWRwcg9sw5C+w5KuBMObKIL+OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzdhMTgw
Yy1jMWE1LTQxNDYtODQyOS0wODM4MGZmZmMxNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvN2ExODBj
LWMxYTUtNDE0Ni04NDI5LTA4MzgwZmZmYzE2OS8xL1B0SlpIQnlEMnpEa0w3RGtx
NEV3NXNvZ3Y0NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAshe6MA0EAgACMAcDBQMqEdyAMA0GCSqGSIb3
DQEBCwUAA4IBAQALUHM7xhD3AJT8TSn7FiPpxw+Js9VwBiRnx0ilc3oS8TKZzHxT
7pZjfy2AdwVLpJHEQLTfpqInIF71cValY6l6gFVADvtb/adD3RgNUYC5E8PRYgHp
VFZ6ZBWwQxAb7wKBfyVHUXXO2NblJzTAzlMVsrazfQ881SmCoOyD7SsW5JdcEoZQ
VA4IX/kic5zHWsxsOMHtSiT8y8b/e3f19wDGiTZxmwtMZenRAwdfJaWyxzelIVw+
BGCioHA5DYW5IIAfZDbyVt2qSH6h2GnxctY7kRFxgWIlUtrCKjHmxbdx2MNIdmJx
0e8B9gzQzwzycu48dmrIWkQYsdjgj/p+U1KW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:02 2024 by rpki-client on console-ams.rpki-client.org