Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.cer
File: RP64nGxyXfHp8Ul9Iwf4aSa3DxE.cer (raw, json)
Hash identifier: 3ety9Xy4Jrjc1fWQ66i5uE9ub9HOp0rB2JKdg9PK3BY=
Subject key identifier: 44:FE:B8:9C:6C:72:5D:F1:E9:F1:49:7D:23:07:F8:69:26:B7:0F:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857168D3B6F6167800E3D3EFC71751691F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 21447
AS: 62423
IP: 93.159.232.0/21
IP: 185.36.60.0/22
IP: 185.108.160.0/22
IP: 185.165.160.0/22
IP: 2a00:ebe0::/32
IP: 2a01:8820::/32
Validation: Failed, certificate revoked on Tue 28 Mar 2023 12:53:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:d3:b6:f6:16:78:00:e3:d3:ef:c7:17:51:69:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44feb89c6c725df1e9f1497d2307f86926b70f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:b4:59:a0:eb:c9:ec:49:01:37:e4:5d:97:
3d:4d:f8:29:79:c7:6d:48:9b:61:d8:40:95:c6:16:
01:af:25:93:97:75:4d:7b:b7:d0:92:d0:3f:aa:d4:
60:14:c9:f1:1a:da:8a:ac:a7:0a:d5:cf:ee:c4:b3:
2d:74:cd:e2:8f:e9:ff:b5:9b:fe:84:24:95:33:62:
f5:40:db:f0:19:e6:38:f5:6a:82:af:ee:13:a8:49:
56:42:71:34:75:be:6d:3c:3d:6f:f2:c4:94:fb:f7:
48:ce:42:87:5d:c6:5f:72:00:6d:40:f0:74:23:01:
19:5e:48:30:68:7e:a3:9e:81:68:da:e1:df:ef:9d:
16:f2:73:c5:3d:ea:75:b5:03:5f:45:fb:44:36:ab:
85:7e:b4:d2:08:68:5d:41:73:55:0b:4d:c9:62:15:
05:0e:fc:9b:06:64:d7:31:d6:d9:9b:90:c1:ca:6f:
84:5f:55:5f:1b:cf:cf:20:85:29:b9:f2:17:7c:c3:
ee:e1:9d:ba:24:12:a9:ce:25:6d:22:76:b4:51:89:
b9:29:23:bb:a3:a6:11:09:2c:3b:7e:c0:a1:a6:d9:
0b:f8:e2:10:0a:47:27:38:bc:27:27:fc:92:a7:7f:
0d:0c:e9:f8:f2:d5:b0:64:bb:4c:33:da:71:af:f0:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:B8:9C:6C:72:5D:F1:E9:F1:49:7D:23:07:F8:69:26:B7:0F:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/842fe0-7e91-48b3-bb67-1de2545be960/1/RP64nGxyXfHp8Ul9Iwf4aSa3DxE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.232.0/21
185.36.60.0/22
185.108.160.0/22
185.165.160.0/22
IPv6:
2a00:ebe0::/32
2a01:8820::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21447
62423
Signature Algorithm: sha256WithRSAEncryption
32:76:e1:1a:d0:c5:56:bf:a2:0f:62:a8:ab:12:e8:dc:7b:c6:
3c:98:72:4c:10:35:e9:7a:be:ac:22:b5:b4:27:f2:ce:76:d3:
52:a1:98:9a:d5:11:f5:12:5b:16:fe:29:d5:77:c4:22:02:6e:
a1:ff:35:d6:03:8a:20:7c:b0:3c:e4:db:c6:f9:6d:d0:32:3d:
1e:d6:e6:cc:6f:de:d9:96:cc:af:dc:3b:87:a4:3f:8f:f7:5b:
b0:a8:06:65:a7:fd:68:93:b8:0e:d3:23:4c:96:5b:98:68:28:
ed:1f:73:fe:08:d9:51:0f:0b:71:08:9d:c2:63:72:6a:69:1f:
32:7d:c1:e4:88:ae:55:b9:93:a5:4c:e8:10:30:b0:27:29:f1:
63:7c:85:8b:33:65:23:ba:5d:74:03:0a:77:2a:3d:b2:e2:2c:
63:26:ec:3b:ac:51:83:54:a5:26:d0:9a:ff:2b:15:e2:c8:a9:
4d:46:64:9b:29:86:a0:70:d8:e5:e4:d4:c9:bd:b5:c4:5d:42:
7d:8b:82:6e:b6:d4:dc:30:46:07:9d:c5:20:74:4e:0a:b1:dc:
40:06:fa:b6:2c:fa:03:33:69:81:67:5c:13:91:eb:5d:50:c0:
4e:c4:c0:f4:fd:82:28:ac:34:41:78:b2:21:8b:81:50:83:48:
b4:d1:1a:89
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgISAYVxaNO29hZ4AOPT78cXUWkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGZlYjg5YzZjNzI1ZGYxZTlmMTQ5N2QyMzA3Zjg2OTI2YjcwZjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc60WaDryexJATfkXZc9Tfgpecdt
SJth2ECVxhYBryWTl3VNe7fQktA/qtRgFMnxGtqKrKcK1c/uxLMtdM3ij+n/tZv+
hCSVM2L1QNvwGeY49WqCr+4TqElWQnE0db5tPD1v8sSU+/dIzkKHXcZfcgBtQPB0
IwEZXkgwaH6jnoFo2uHf750W8nPFPep1tQNfRftENquFfrTSCGhdQXNVC03JYhUF
DvybBmTXMdbZm5DBym+EX1VfG8/PIIUpufIXfMPu4Z26JBKpziVtIna0UYm5KSO7
o6YRCSw7fsChptkL+OIQCkcnOLwnJ/ySp38NDOn48tWwZLtMM9pxr/C+ewIDAQAB
o4ICzDCCAsgwHQYDVR0OBBYEFET+uJxscl3x6fFJfSMH+Gkmtw8RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzg0MmZl
MC03ZTkxLTQ4YjMtYmI2Ny0xZGUyNTQ1YmU5NjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvODQyZmUw
LTdlOTEtNDhiMy1iYjY3LTFkZTI1NDViZTk2MC8xL1JQNjRuR3h5WGZIcDhVbDlJ
d2Y0YVNhM0R4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF
BwEHAQH/BDgwNjAeBAIAATAYAwQDXZ/oAwQCuSQ8AwQCuWygAwQCuaWgMBQEAgAC
MA4DBQAqAOvgAwUAKgGIIDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJTxwIDAPPX
MA0GCSqGSIb3DQEBCwUAA4IBAQAyduEa0MVWv6IPYqirEujce8Y8mHJMEDXper6s
IrW0J/LOdtNSoZia1RH1ElsW/inVd8QiAm6h/zXWA4ogfLA85NvG+W3QMj0e1ubM
b97Zlsyv3DuHpD+P91uwqAZlp/1ok7gO0yNMlluYaCjtH3P+CNlRDwtxCJ3CY3Jq
aR8yfcHkiK5VuZOlTOgQMLAnKfFjfIWLM2Ujul10Awp3Kj2y4ixjJuw7rFGDVKUm
0Jr/KxXiyKlNRmSbKYagcNjl5NTJvbXEXUJ9i4JuttTcMEYHncUgdE4KsdxABvq2
LPoDM2mBZ1wTketdUMBOxMD0/YIorDRBeLIhi4FQg0i00RqJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:32 2024 by rpki-client on console-ams.rpki-client.org