Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
File: Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer (raw, json)
Hash identifier: 5WAeIYitl9b5wgS8zmoqg6752pdqGg7AUsNj9ggaLJ8=
Subject key identifier: 4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B46AD0EA1ABE5FE47764CBC524929
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.95.0/24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 14:17:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:46:ad:0e:a1:ab:e5:fe:47:76:4c:bc:52:49:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:d4:34:dd:21:e3:61:92:0c:2a:6a:3d:b9:
54:43:76:e1:d2:a9:23:f5:04:ca:57:bc:cb:da:2d:
fc:45:b8:60:7a:0c:54:13:c7:a6:da:de:72:77:56:
88:dc:23:b0:d3:44:85:7c:0d:ea:62:ac:60:00:43:
1f:0f:c5:3d:59:38:cd:97:68:d1:56:e5:b3:f2:3d:
27:d8:cc:d8:91:28:79:c5:ef:8f:89:7e:1b:ea:0c:
4b:09:44:b4:c7:c8:16:fd:c9:cc:5e:dc:22:07:24:
31:7c:4c:5d:e8:b4:e2:94:cb:32:45:06:85:ab:e8:
2f:65:75:3a:41:b9:5c:5f:50:4d:04:6a:0b:a7:15:
77:ca:36:79:7b:40:81:2e:f3:30:eb:aa:ed:a6:87:
6e:2b:45:ba:58:41:16:ce:cd:4f:7b:b0:85:8b:18:
8a:2a:63:23:43:3f:3b:96:f8:4e:75:94:05:9a:fc:
39:09:8c:ca:57:49:93:ac:42:2c:86:a7:45:7e:6f:
cc:e8:28:92:5f:9e:cd:69:e5:fe:79:61:34:5a:9c:
9e:22:f5:5f:1e:0a:c1:78:e2:73:7e:cc:40:c6:f1:
d0:ed:ef:53:68:9e:8c:09:b5:cc:bc:bc:f0:a7:50:
a6:ca:95:9c:48:4c:90:c5:b2:da:26:cd:4a:ed:2b:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.95.0/24
Signature Algorithm: sha256WithRSAEncryption
25:fe:b9:58:95:f4:1b:fc:af:12:a5:bd:d6:62:b3:fd:dd:68:
32:8d:0d:02:ec:0b:e7:35:fe:90:52:6d:95:79:21:5c:5c:7b:
17:89:bb:43:7f:64:ca:bf:44:0a:6f:fa:5d:06:99:84:da:f4:
03:06:08:b5:37:f0:2d:25:d9:74:66:df:d7:a4:3c:2d:d1:3b:
75:8f:68:58:75:2b:fd:fa:fd:41:9d:4e:5c:ce:36:db:c3:77:
5d:1b:16:4e:2c:45:c1:c5:91:cb:e9:4c:f6:98:25:2a:9e:7d:
1f:4a:87:17:aa:78:5c:92:a4:cb:5b:7c:d9:df:c7:5e:d3:84:
94:b2:72:05:e4:a0:a3:d3:bf:ab:89:6e:57:f5:02:75:76:dd:
83:5a:80:9b:ee:b5:e1:ec:45:f7:45:25:bd:0a:28:4c:00:10:
92:58:82:7a:41:47:db:bc:c4:94:bf:5b:7c:81:4d:7b:35:11:
28:2c:49:12:66:d1:ef:e5:4f:a6:4d:f8:61:56:b1:a4:74:66:
b5:c6:bf:b3:10:8b:c0:04:8e:5d:2a:15:dd:f5:06:e0:ee:80:
64:b7:fd:f2:e0:c8:f5:91:e1:58:ea:94:69:02:37:ce:5f:89:
5b:18:79:27:57:93:e0:73:84:b9:a0:a7:9a:38:b8:49:d7:29:
2c:25:a3:0c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVtG0atDqGr5f5Hdky8UkkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjJkOTAxMjIyNjQ3MTkxNDdhNTYxZTdjNmM2MWY3Y2MxNzA2YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47fUNN0h42GSDCpqPblUQ3bh0qkj
9QTKV7zL2i38RbhgegxUE8em2t5yd1aI3COw00SFfA3qYqxgAEMfD8U9WTjNl2jR
VuWz8j0n2MzYkSh5xe+PiX4b6gxLCUS0x8gW/cnMXtwiByQxfExd6LTilMsyRQaF
q+gvZXU6QblcX1BNBGoLpxV3yjZ5e0CBLvMw66rtpoduK0W6WEEWzs1Pe7CFixiK
KmMjQz87lvhOdZQFmvw5CYzKV0mTrEIshqdFfm/M6CiSX57NaeX+eWE0WpyeIvVf
HgrBeOJzfsxAxvHQ7e9TaJ6MCbXMvLzwp1CmypWcSEyQxbLaJs1K7SuUkwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEstkBIiZHGRR6Vh58bGH3zBcGySMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJiL2ZhMWE1
MS03YTczLTQxMWMtOTcxZi00NmRkMmRhZGRmODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmExYTUx
LTdhNzMtNDExYy05NzFmLTQ2ZGQyZGFkZGY4MC8xL1N5MlFFaUprY1pGSHBXSG54
c1lmZk1Gd2JKSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPmpfMA0GCSqGSIb3DQEBCwUAA4IBAQAl/rlY
lfQb/K8Spb3WYrP93WgyjQ0C7AvnNf6QUm2VeSFcXHsXibtDf2TKv0QKb/pdBpmE
2vQDBgi1N/AtJdl0Zt/XpDwt0Tt1j2hYdSv9+v1BnU5czjbbw3ddGxZOLEXBxZHL
6Uz2mCUqnn0fSocXqnhckqTLW3zZ38de04SUsnIF5KCj07+riW5X9QJ1dt2DWoCb
7rXh7EX3RSW9CihMABCSWIJ6QUfbvMSUv1t8gU17NREoLEkSZtHv5U+mTfhhVrGk
dGa1xr+zEIvABI5dKhXd9Qbg7oBkt/3y4Mj1keFY6pRpAjfOX4lbGHknV5Pgc4S5
oKeaOLhJ1yksJaMM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:01 2024 by rpki-client on console-ams.rpki-client.org