Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer
File: RxqrCn7S035Uc1AWFDR6hYDg7Vs.cer (raw, json)
Hash identifier: r8hIA3FtPWeLlfkdT/UmPX/bF9FSun75GQCxTIYdBQ0=
Subject key identifier: 47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B81E3F87AF555661C91673EE95679
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.36.0/24
IP: 2a12:3700::/29
Validation: Failed, certificate revoked on Fri 17 Nov 2023 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:81:e3:f8:7a:f5:55:66:1c:91:67:3e:e9:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471aab0a7ed2d37e5473501614347a8580e0ed5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:fb:83:8e:72:3e:1b:69:12:2c:e7:9b:05:
4d:54:6d:2f:40:1c:2b:5f:c9:00:b0:b2:b6:54:df:
85:0a:ed:be:bc:b0:1c:dd:c0:19:d4:d4:b6:eb:01:
95:74:8d:59:4d:48:95:63:a6:98:e4:7e:a3:17:41:
9a:f4:98:3f:5a:0c:ee:fd:cc:9d:6b:6c:09:dd:ea:
b9:02:71:fa:01:b8:59:81:fc:f2:2d:0b:96:1a:1b:
e7:59:06:24:34:3a:94:1e:79:b1:05:cb:7a:51:ea:
63:4a:f6:3a:2a:cc:f1:28:a1:ec:96:c3:05:f9:87:
b9:fa:fb:70:94:5d:b2:58:de:ed:36:d5:07:d9:8a:
3c:83:23:03:4d:87:e2:c9:0d:d0:9c:aa:57:a7:00:
ec:07:ac:77:9c:79:b3:1d:f8:67:01:0d:e7:3c:0d:
ec:36:76:9f:a7:a7:0d:d9:c1:76:13:4a:58:9d:52:
e8:96:a4:cc:f0:3e:21:03:cd:84:f9:43:ae:a8:b8:
a6:fa:f2:39:8a:f5:af:cd:92:1a:47:ef:6c:28:38:
56:bc:c0:26:68:44:a1:27:a4:05:e5:23:a8:3d:32:
3c:67:c0:6f:e5:f3:5e:9f:b4:a7:17:03:05:0a:b7:
c3:50:64:33:cc:d9:36:fe:5d:4d:10:1f:b2:dc:b0:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1A:AB:0A:7E:D2:D3:7E:54:73:50:16:14:34:7A:85:80:E0:ED:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1e9c33-69a3-4b65-8a23-52d951e18eeb/1/RxqrCn7S035Uc1AWFDR6hYDg7Vs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.36.0/24
IPv6:
2a12:3700::/29
Signature Algorithm: sha256WithRSAEncryption
54:e2:5e:54:75:19:47:78:c7:71:f9:83:78:c0:99:e3:15:ea:
38:98:8c:1c:11:00:45:26:c8:71:70:26:a0:06:12:ca:95:32:
35:9b:4f:9e:7a:5f:2f:00:c5:ef:91:aa:0a:23:b4:6f:b2:7f:
49:d3:6d:c9:ac:06:ce:8e:be:4a:0c:dc:2e:55:07:87:e6:0f:
4d:0d:0d:22:b5:ef:8f:9f:62:b6:28:07:93:ed:ff:92:1b:61:
ad:0e:43:fe:df:45:bd:9a:5a:ab:9f:ba:e3:6c:4a:2a:4f:99:
80:bf:48:9d:c7:0b:d5:5d:7c:64:36:0b:e4:f9:66:0f:91:ed:
82:81:2e:08:ee:0c:04:df:68:16:e9:09:c1:34:2b:40:e2:cf:
5b:7d:57:c0:4c:36:ed:eb:eb:ee:1e:8c:10:6f:55:57:b0:39:
4f:11:49:9e:f1:00:7c:39:24:fb:ee:b2:03:0f:83:c3:dc:b7:
4e:2e:37:9c:a2:79:51:6e:c3:d1:bc:19:16:e6:50:60:d2:09:
cf:91:d2:6e:db:c3:b9:8d:b7:2e:f8:cb:8d:06:18:dd:f7:b7:
97:b5:1f:a1:0a:b1:c5:e3:0c:f7:4e:5c:9d:fe:29:72:29:8c:
c8:1f:32:19:97:62:30:e5:7e:2e:d0:27:32:39:31:9f:69:25:
43:e7:2e:aa
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtG4Hj+Hr1VWYckWc+6VZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFhYWIwYTdlZDJkMzdlNTQ3MzUwMTYxNDM0N2E4NTgwZTBlZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvND7g45yPhtpEiznmwVNVG0vQBwr
X8kAsLK2VN+FCu2+vLAc3cAZ1NS26wGVdI1ZTUiVY6aY5H6jF0Ga9Jg/Wgzu/cyd
a2wJ3eq5AnH6AbhZgfzyLQuWGhvnWQYkNDqUHnmxBct6UepjSvY6KszxKKHslsMF
+Ye5+vtwlF2yWN7tNtUH2Yo8gyMDTYfiyQ3QnKpXpwDsB6x3nHmzHfhnAQ3nPA3s
Nnafp6cN2cF2E0pYnVLolqTM8D4hA82E+UOuqLim+vI5ivWvzZIaR+9sKDhWvMAm
aEShJ6QF5SOoPTI8Z8Bv5fNen7SnFwMFCrfDUGQzzNk2/l1NEB+y3LDpowIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEcaqwp+0tN+VHNQFhQ0eoWA4O1bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzFlOWMz
My02OWEzLTRiNjUtOGEyMy01MmQ5NTFlMThlZWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMWU5YzMz
LTY5YTMtNGI2NS04YTIzLTUyZDk1MWUxOGVlYi8xL1J4cXJDbjdTMDM1VWMxQVdG
RFI2aFlEZzdWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhMkMA0EAgACMAcDBQMqEjcAMA0GCSqGSIb3
DQEBCwUAA4IBAQBU4l5UdRlHeMdx+YN4wJnjFeo4mIwcEQBFJshxcCagBhLKlTI1
m0+eel8vAMXvkaoKI7Rvsn9J023JrAbOjr5KDNwuVQeH5g9NDQ0ite+Pn2K2KAeT
7f+SG2GtDkP+30W9mlqrn7rjbEoqT5mAv0idxwvVXXxkNgvk+WYPke2CgS4I7gwE
32gW6QnBNCtA4s9bfVfATDbt6+vuHowQb1VXsDlPEUme8QB8OST77rIDD4PD3LdO
LjeconlRbsPRvBkW5lBg0gnPkdJu28O5jbcu+MuNBhjd97eXtR+hCrHF4wz3Tlyd
/ilyKYzIHzIZl2Iw5X4u0CcyOTGfaSVD5y6q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-fra.rpki-client.org