Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RzcmOvVE4bul3sXpiIlraYhOCLQ.cer
File: RzcmOvVE4bul3sXpiIlraYhOCLQ.cer (raw, json)
Hash identifier: pMa/1n90IoOuv7EfevyIJ9c0aWbar6mUp8kbh4APrfE=
Subject key identifier: 47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01865E6038E71CE2DBDA50C86E17F157AABD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/RzcmOvVE4bul3sXpiIlraYhOCLQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Feb 2023 07:56:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.230.0/24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 08:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:60:38:e7:1c:e2:db:da:50:c8:6e:17:f1:57:aa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 07:56:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4737263af544e1bba5dec5e988896b69884e08b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:44:8e:c4:38:f4:c0:5d:3b:6c:f0:9a:a1:
51:d5:c1:02:84:ea:ec:fd:fa:0c:61:a0:f0:81:02:
22:5b:dd:99:f9:4d:33:55:e7:1e:1f:3a:ae:0e:35:
c1:9b:75:27:d6:0c:3f:fd:cd:23:29:e8:ea:74:73:
74:07:f2:17:3e:fe:d2:06:f2:08:cb:1d:de:32:4b:
b0:32:63:57:96:75:20:37:78:35:bb:7f:b1:23:8a:
59:3c:d8:b2:83:0d:7c:b6:bc:8d:73:61:94:c7:a3:
0f:7a:b3:3b:3b:94:0b:62:76:91:6c:a7:c3:69:87:
6b:a3:47:bd:b0:70:b0:6a:ef:81:02:b7:1d:7f:85:
46:41:2c:d0:62:af:2f:15:85:20:e5:fd:e3:ef:dd:
a2:a6:53:e3:c3:3d:5d:14:5a:5f:8f:13:85:8f:94:
57:9c:e4:5b:f4:f8:20:6b:a8:ac:5d:4b:97:63:c4:
34:ad:2d:c8:f5:f1:44:a3:4e:a0:d4:e3:f2:45:9b:
24:d0:95:a1:e6:67:98:4e:db:9b:5f:fc:36:7a:42:
55:36:75:2d:d3:a7:66:a3:07:24:52:15:ff:e8:5d:
3b:3d:ae:d0:5e:9d:91:ef:37:10:ed:b3:5a:0c:5d:
e5:27:16:40:62:4e:d6:c4:07:9b:4c:d3:3d:48:62:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:26:3A:F5:44:E1:BB:A5:DE:C5:E9:88:89:6B:69:88:4E:08:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3e1f8b-0eb8-469e-97b1-a8c6f90a7013/1/RzcmOvVE4bul3sXpiIlraYhOCLQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d3:d1:95:39:06:df:58:8b:76:30:04:17:8e:6b:64:67:35:
c7:b3:62:9c:87:4a:35:48:a9:14:c5:c4:6f:7f:0f:ca:f2:1a:
af:90:e2:33:80:01:19:89:d5:12:2b:5c:09:89:cd:f3:c7:fc:
f5:a1:be:76:70:3a:51:02:68:fa:01:ad:2e:f9:3b:8d:cb:70:
49:ad:68:36:e0:23:5c:e4:f6:86:5d:38:72:9a:91:c2:a9:32:
62:d2:62:6e:9a:a9:58:f1:a0:b3:b0:95:84:12:ca:93:a7:44:
1f:23:72:e8:37:c3:27:ee:ce:92:e1:dc:1d:29:5e:9f:44:76:
b9:88:95:09:54:d8:ae:37:2d:23:06:fc:1e:82:99:0e:63:fd:
bb:43:f9:dd:47:2d:5e:be:91:34:8f:d3:36:ee:c3:60:6e:f6:
01:bf:92:43:6b:6d:ef:15:de:5b:28:1a:47:ef:24:06:1b:df:
5a:20:34:f2:0b:9a:14:d3:77:76:b6:ac:35:9b:d7:20:65:b6:
91:2b:47:e5:dd:b6:29:31:91:d2:5e:f7:cb:49:01:5f:46:80:
01:af:72:da:8e:48:13:81:6c:c6:46:13:18:64:29:83:cc:3c:
be:a5:3d:f5:48:fd:1f:ca:8e:24:70:ac:2c:42:98:24:a2:d2:
6b:1d:ad:2d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYZeYDjnHOLb2lDIbhfxV6q9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjE3MDc1NjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzM3MjYzYWY1NDRlMWJiYTVkZWM1ZTk4ODg5NmI2OTg4NGUwOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mZEjsQ49MBdO2zwmqFR1cEChOrs
/foMYaDwgQIiW92Z+U0zVeceHzquDjXBm3Un1gw//c0jKejqdHN0B/IXPv7SBvII
yx3eMkuwMmNXlnUgN3g1u3+xI4pZPNiygw18tryNc2GUx6MPerM7O5QLYnaRbKfD
aYdro0e9sHCwau+BArcdf4VGQSzQYq8vFYUg5f3j792iplPjwz1dFFpfjxOFj5RX
nORb9Pgga6isXUuXY8Q0rS3I9fFEo06g1OPyRZsk0JWh5meYTtubX/w2ekJVNnUt
06dmowckUhX/6F07Pa7QXp2R7zcQ7bNaDF3lJxZAYk7WxAebTNM9SGJWLQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEc3Jjr1ROG7pd7F6YiJa2mITgi0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzNlMWY4
Yi0wZWI4LTQ2OWUtOTdiMS1hOGM2ZjkwYTcwMTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvM2UxZjhi
LTBlYjgtNDY5ZS05N2IxLWE4YzZmOTBhNzAxMy8xL1J6Y21PdlZFNGJ1bDNzWHBp
SWxyYVloT0NMUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAkhPmMA0GCSqGSIb3DQEBCwUAA4IBAQBq09GV
OQbfWIt2MAQXjmtkZzXHs2Kch0o1SKkUxcRvfw/K8hqvkOIzgAEZidUSK1wJic3z
x/z1ob52cDpRAmj6Aa0u+TuNy3BJrWg24CNc5PaGXThympHCqTJi0mJumqlY8aCz
sJWEEsqTp0QfI3LoN8Mn7s6S4dwdKV6fRHa5iJUJVNiuNy0jBvwegpkOY/27Q/nd
Ry1evpE0j9M27sNgbvYBv5JDa23vFd5bKBpH7yQGG99aIDTyC5oU03d2tqw1m9cg
ZbaRK0fl3bYpMZHSXvfLSQFfRoABr3LajkgTgWzGRhMYZCmDzDy+pT31SP0fyo4k
cKwsQpgkotJrHa0t
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:42 2024 by rpki-client on console-ams.rpki-client.org