Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RFy34lYN4pSkmmNw90JYndy83nQ.cer
File: RFy34lYN4pSkmmNw90JYndy83nQ.cer (raw, json)
Hash identifier: XgU0spf+UDR59C4Y62c5iIdAmMA1kJhplEwjcBV+qMo=
Subject key identifier: 44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65912BFD3D9B7E4492C94CDD01D059
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/RFy34lYN4pSkmmNw90JYndy83nQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:33:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.221.0/24
IP: 2a12:680::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:91:2b:fd:3d:9b:7e:44:92:c9:4c:dd:01:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:33:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445cb7e2560de294a49a6370f742589ddcbcde74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:ae:0c:32:9c:6e:01:42:03:cf:df:07:cb:
eb:05:83:fc:17:99:f2:47:1e:5d:24:95:e0:35:58:
5f:d2:3e:3a:7c:f0:fa:a4:2e:0b:1a:e4:8b:65:c6:
60:94:16:b4:79:cf:c5:aa:62:6f:5a:08:2e:af:05:
00:cf:83:47:a0:cc:a7:aa:70:aa:c4:9e:20:14:d6:
e5:57:e4:d4:cf:20:26:b8:bb:a4:2e:c2:d0:e4:1b:
08:41:bf:6d:53:33:d4:84:03:dd:17:42:3a:a7:06:
0f:13:34:e5:c5:68:ff:4b:e9:17:a1:61:1c:cb:d3:
36:82:03:fc:c2:50:9f:17:44:61:a4:28:49:d5:45:
ea:d6:5a:45:d6:28:51:d6:38:05:97:23:ab:aa:07:
c5:de:de:62:ff:dd:a5:75:51:4f:f8:8a:17:75:6a:
eb:9a:53:97:70:94:ce:d5:4a:18:2e:51:a5:91:5f:
9c:d7:08:c3:80:3c:09:f7:f6:60:fb:b6:ce:b1:59:
dd:7a:da:3b:86:19:e4:92:fd:dd:c3:4e:92:72:b3:
f5:ec:3d:c0:04:4c:d7:bb:0f:04:62:4a:07:7d:02:
b5:e5:43:61:22:bf:0d:cf:be:0f:79:d8:cf:59:d9:
a3:23:82:f8:2d:97:c5:39:bc:c8:6d:4e:a6:47:79:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:B7:E2:56:0D:E2:94:A4:9A:63:70:F7:42:58:9D:DC:BC:DE:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/ac531f-49a8-4ccf-a1ab-7b14735ee234/1/RFy34lYN4pSkmmNw90JYndy83nQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.221.0/24
IPv6:
2a12:680::/29
Signature Algorithm: sha256WithRSAEncryption
50:19:ad:72:73:a7:fa:ff:3b:61:be:f0:2d:f1:d9:c4:af:09:
d8:dc:aa:32:fe:94:bc:d9:93:6b:fa:73:b9:86:73:7e:e2:f6:
ae:89:40:eb:b7:72:99:2b:7d:68:d6:6c:3d:e8:90:1d:ce:62:
08:65:df:f3:11:75:85:04:42:bc:66:24:f7:2a:a3:4b:e2:f1:
70:ad:3a:fa:00:97:3d:b3:a7:ef:19:45:6e:ff:8b:22:b4:84:
8f:f1:5d:3b:1b:a2:fa:74:68:d3:83:3e:d4:c7:73:02:d5:a4:
43:0e:b0:e6:63:2c:74:e8:a7:1d:09:4f:74:4d:26:84:66:10:
d0:c3:da:1b:83:14:27:d8:7b:23:6e:a9:10:ba:b0:26:8a:06:
08:6d:56:48:d9:4b:72:89:0f:a3:55:ae:f2:05:09:ac:97:b7:
42:3e:1e:2f:ac:17:9f:e1:99:6b:36:8d:a4:e7:91:1b:58:4c:
d3:5c:0a:19:65:76:6d:d3:f1:2e:ed:4e:51:cb:0e:e1:1a:ce:
5c:82:30:19:a1:a7:e1:ee:43:20:02:e6:8d:55:b8:8c:6d:74:
29:a6:28:5d:b9:9c:bc:f5:c1:cf:7c:ca:ed:6a:74:93:43:b5:
38:e8:1f:a0:19:8d:66:3d:ec:94:14:9a:b5:d9:63:99:69:6c:
28:c8:74:d9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVuZZEr/T2bfkSSyUzdAdBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczMzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDVjYjdlMjU2MGRlMjk0YTQ5YTYzNzBmNzQyNTg5ZGRjYmNkZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kOuDDKcbgFCA8/fB8vrBYP8F5ny
Rx5dJJXgNVhf0j46fPD6pC4LGuSLZcZglBa0ec/FqmJvWggurwUAz4NHoMynqnCq
xJ4gFNblV+TUzyAmuLukLsLQ5BsIQb9tUzPUhAPdF0I6pwYPEzTlxWj/S+kXoWEc
y9M2ggP8wlCfF0RhpChJ1UXq1lpF1ihR1jgFlyOrqgfF3t5i/92ldVFP+IoXdWrr
mlOXcJTO1UoYLlGlkV+c1wjDgDwJ9/Zg+7bOsVndeto7hhnkkv3dw06ScrP17D3A
BEzXuw8EYkoHfQK15UNhIr8Nz74PedjPWdmjI4L4LZfFObzIbU6mR3noJwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFERct+JWDeKUpJpjcPdCWJ3cvN50MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2L2FjNTMx
Zi00OWE4LTRjY2YtYTFhYi03YjE0NzM1ZWUyMzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvYWM1MzFm
LTQ5YTgtNGNjZi1hMWFiLTdiMTQ3MzVlZTIzNC8xL1JGeTM0bFlONHBTa21tTnc5
MEpZbmR5ODNuUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhPdMA0EAgACMAcDBQMqEgaAMA0GCSqGSIb3
DQEBCwUAA4IBAQBQGa1yc6f6/zthvvAt8dnErwnY3Koy/pS82ZNr+nO5hnN+4vau
iUDrt3KZK31o1mw96JAdzmIIZd/zEXWFBEK8ZiT3KqNL4vFwrTr6AJc9s6fvGUVu
/4sitISP8V07G6L6dGjTgz7Ux3MC1aRDDrDmYyx06KcdCU90TSaEZhDQw9obgxQn
2HsjbqkQurAmigYIbVZI2UtyiQ+jVa7yBQmsl7dCPh4vrBef4ZlrNo2k55EbWEzT
XAoZZXZt0/Eu7U5Ryw7hGs5cgjAZoafh7kMgAuaNVbiMbXQppihduZy89cHPfMrt
anSTQ7U46B+gGY1mPeyUFJq12WOZaWwoyHTZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:28 2024 by rpki-client on console-ams.rpki-client.org