Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
File: S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer (raw, json)
Hash identifier: 9q6RDOJR2sO1Jq5ZsXnSMkb3dPJ5iQ2gCNAEz52tGSo=
Subject key identifier: 4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8010BBEE02225FB565035CA48C73F72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:29:20 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 59605
IP: 151.248.96.0/20
IP: 185.201.192.0/22
IP: 2a02:f040::/29
Validation: Failed, certificate revoked on Wed 01 May 2024 07:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0b:be:e0:22:25:fb:56:50:35:ca:48:c7:3f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:89:17:41:5b:ea:ef:f8:c5:f8:75:c4:51:
5b:32:2b:e7:1b:df:02:49:5d:ff:e4:cb:4c:7f:9f:
47:7d:fd:67:c6:45:b7:5b:5d:14:64:c3:15:85:44:
7b:d9:41:5b:b2:cd:70:3e:29:cd:69:58:6e:85:cf:
5d:fa:fc:2a:4e:42:fd:d1:63:b5:60:c1:01:0b:4d:
25:84:ef:80:4a:30:cd:83:49:1a:cc:6b:c5:22:43:
4d:30:6c:69:5e:39:82:18:8b:cb:e1:ce:df:d2:76:
41:57:73:69:66:43:f2:7e:01:9a:55:f4:5d:53:55:
eb:9b:9d:fc:78:88:d3:29:d7:ac:34:36:cb:20:8e:
53:db:6e:8e:d5:15:e7:66:d5:65:c4:07:b9:b1:fa:
9e:a1:87:0f:ac:ad:6d:a1:86:59:18:e4:6a:52:39:
14:72:37:fc:14:cc:2f:fa:44:e5:f2:01:31:bb:9a:
55:a0:ad:89:dd:e9:23:d1:35:b3:cf:41:03:9a:0f:
b3:5f:ad:e6:af:07:23:c8:78:bf:d9:fc:a0:0e:5a:
23:cc:8d:06:51:2c:64:01:76:2a:85:9c:95:51:56:
70:70:dc:9e:68:24:e0:28:0f:5d:0b:95:be:64:46:
68:7e:cc:34:37:a3:cd:28:63:99:c6:e6:67:a9:1b:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.96.0/20
185.201.192.0/22
IPv6:
2a02:f040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59605
Signature Algorithm: sha256WithRSAEncryption
30:2f:fd:ac:d7:2b:0c:45:7a:d9:bc:2a:6a:9c:39:52:7f:28:
ca:d9:37:c2:fd:2a:73:31:5b:27:d6:36:c8:2d:6f:7e:b3:4f:
c0:72:a0:23:21:79:dd:29:cf:8c:c0:36:97:8e:e6:25:74:91:
bb:1e:8a:8c:05:11:ea:4d:25:0a:f0:0a:4e:09:be:a9:5d:83:
fe:55:06:67:00:25:b6:be:c7:4b:87:18:70:7d:d9:2f:3f:57:
e4:0a:48:f2:be:37:fb:55:ea:9a:d2:6c:6f:49:1d:ba:32:29:
70:e1:9b:26:e1:50:ac:e9:78:ae:74:0d:05:2b:db:7d:d4:6b:
ae:40:aa:81:15:53:18:5b:3f:1e:0d:59:d6:cf:5c:bc:6d:54:
57:8e:56:19:f3:15:64:2c:3e:13:6d:3b:3b:ad:bc:4a:60:b5:
3d:8d:88:46:18:0c:07:07:a3:f9:98:f7:51:88:e5:1b:de:ab:
c5:44:2a:89:08:1d:99:e1:f2:41:8a:65:f9:7d:cf:09:5f:84:
59:bf:c4:d2:03:0f:53:f4:30:95:22:a9:ed:af:6e:cd:84:45:
b3:46:3c:80:ef:dd:cf:df:5c:7d:35:33:21:55:be:fd:b0:20:
f8:60:80:4c:9c:b1:bf:41:72:21:f9:39:1c:d2:2f:98:5d:dd:
4c:bd:3b:02
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzIAQu+4CIl+1ZQNcpIxz9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIyOTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmYyMDNkNmFlNjY5OGUwOWYyNTU3ODBiODhhY2NkY2Q5NDY3NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lKJF0Fb6u/4xfh1xFFbMivnG98C
SV3/5MtMf59Hff1nxkW3W10UZMMVhUR72UFbss1wPinNaVhuhc9d+vwqTkL90WO1
YMEBC00lhO+ASjDNg0kazGvFIkNNMGxpXjmCGIvL4c7f0nZBV3NpZkPyfgGaVfRd
U1Xrm538eIjTKdesNDbLII5T226O1RXnZtVlxAe5sfqeoYcPrK1toYZZGORqUjkU
cjf8FMwv+kTl8gExu5pVoK2J3ekj0TWzz0EDmg+zX63mrwcjyHi/2fygDlojzI0G
USxkAXYqhZyVUVZwcNyeaCTgKA9dC5W+ZEZofsw0N6PNKGOZxuZnqRvq+QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFEvyA9auZpjgnyVXgLiKzNzZRnWhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA3LzI5OTk4
NC02ZDdkLTQ1ZTMtYjZmZC1iYzkxN2M5MjM1ZDIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMjk5OTg0
LTZkN2QtNDVlMy1iNmZkLWJjOTE3YzkyMzVkMi8xL1NfSUQxcTVtbU9DZkpWZUF1
SXJNM05sR2RhRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQEl/hgAwQCucnAMA0EAgACMAcDBQMqAvBAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDo1TANBgkqhkiG9w0BAQsFAAOCAQEAMC/9
rNcrDEV62bwqapw5Un8oytk3wv0qczFbJ9Y2yC1vfrNPwHKgIyF53SnPjMA2l47m
JXSRux6KjAUR6k0lCvAKTgm+qV2D/lUGZwAltr7HS4cYcH3ZLz9X5ApI8r43+1Xq
mtJsb0kdujIpcOGbJuFQrOl4rnQNBSvbfdRrrkCqgRVTGFs/Hg1Z1s9cvG1UV45W
GfMVZCw+E207O628SmC1PY2IRhgMBwej+Zj3UYjlG96rxUQqiQgdmeHyQYpl+X3P
CV+EWb/E0gMPU/QwlSKp7a9uzYRFs0Y8gO/dz99cfTUzIVW+/bAg+GCATJyxv0Fy
Ifk5HNIvmF3dTL07Ag==
-----END CERTIFICATE-----
Generated at Wed May 1 09:24:12 2024 by rpki-client on console-ams.rpki-client.org