Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TdUBcXHLSGIoRhygeFkbrKwkts0.cer
File: TdUBcXHLSGIoRhygeFkbrKwkts0.cer (raw, json)
Hash identifier: hrwwB0koYgmTmNfDwMYFaHAHqYOr8rRjRqwd9h86Hhg=
Subject key identifier: 4D:D5:01:71:71:CB:48:62:28:46:1C:A0:78:59:1B:AC:AC:24:B6:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B7A4739667FC3B15097EACC46B690
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/TdUBcXHLSGIoRhygeFkbrKwkts0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.150.0/24
IP: 2a12:2400::/29
Validation: Failed, certificate revoked on Thu 02 Nov 2023 15:52:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:7a:47:39:66:7f:c3:b1:50:97:ea:cc:46:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd5017171cb486228461ca078591bacac24b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:36:b2:81:b3:b3:db:34:f0:55:70:d6:10:
c6:c2:ec:f5:ac:94:4e:03:3a:02:79:46:de:2e:75:
d5:b3:ea:99:7e:0a:3c:11:ee:d6:ae:d0:cd:aa:cf:
ad:eb:02:be:29:89:5d:bf:d7:ab:f3:9e:53:e6:ab:
c5:22:e9:45:6f:66:24:c4:46:ad:5d:df:e4:1a:b4:
7f:78:30:f6:6a:57:83:7c:ae:bf:85:c8:f4:83:3d:
2f:fb:68:ea:94:37:ed:c0:34:bd:95:e2:54:4b:7f:
90:8a:4c:16:22:3a:3b:f9:b7:ec:26:32:96:69:6f:
39:ad:99:19:c1:3a:aa:9c:8e:9f:c6:29:b5:12:f0:
0f:71:56:fe:88:f3:6c:b6:d3:e4:29:aa:88:14:12:
29:8c:2f:e0:22:09:98:69:2c:ca:68:50:2b:67:e0:
b1:37:8b:c2:bc:9f:83:d8:31:fd:39:a3:77:a9:6f:
cf:5f:90:10:00:5f:8c:64:82:cc:b2:2f:fc:ca:80:
b2:94:ef:5c:00:48:df:16:32:19:cb:5b:13:70:a9:
ed:8e:16:4b:2c:68:58:c9:58:07:c8:f9:62:77:bf:
66:c6:b7:8e:7b:81:bc:8b:7b:3c:e9:6b:a2:d5:8a:
ae:26:0e:d0:f4:60:71:25:88:b4:35:a7:65:79:a9:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:01:71:71:CB:48:62:28:46:1C:A0:78:59:1B:AC:AC:24:B6:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fa17f3-2d73-4584-afac-1e2273f5eb19/1/TdUBcXHLSGIoRhygeFkbrKwkts0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.150.0/24
IPv6:
2a12:2400::/29
Signature Algorithm: sha256WithRSAEncryption
86:8f:35:ab:3f:01:96:7c:25:4c:b7:95:7b:5a:59:5e:13:a1:
a7:9a:8b:03:3f:81:ec:1f:0d:29:95:e2:5e:56:9a:35:0b:e5:
b8:a1:c7:83:c8:3b:ff:65:de:f6:b1:e5:6f:1f:66:e8:48:1f:
a1:99:33:1a:eb:e2:77:56:f2:28:67:8c:14:be:75:f2:6b:05:
10:0a:5a:5a:6a:c0:17:aa:0c:d1:d1:0c:7d:4b:c4:2b:7c:9c:
3d:42:82:89:88:10:8e:c9:1d:2f:49:c0:ec:b8:fa:9d:77:e2:
13:da:75:60:9c:09:88:c9:90:b0:48:ab:bd:42:d8:85:4e:95:
b2:82:e2:9f:83:2f:1f:77:2c:50:64:07:52:57:02:35:65:ef:
f0:11:f3:29:a2:1c:16:17:0f:a0:24:41:13:8f:54:00:b6:ab:
7e:2c:a4:06:14:e5:09:0b:60:92:cf:74:2e:30:a6:dc:02:5a:
04:55:22:75:cb:cd:e8:51:c1:c8:59:b6:e9:fa:7e:48:36:85:
1f:27:fd:a5:57:80:1f:47:58:86:5f:87:7c:1d:75:c0:aa:72:
75:67:74:4b:1a:91:08:ed:65:71:4d:94:9f:ee:b0:2c:56:47:
06:6f:ee:b2:b8:8b:5d:d7:32:cf:5b:ac:70:32:fe:54:c4:80:
a3:d5:d2:78
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtG3pHOWZ/w7FQl+rMRraQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGQ1MDE3MTcxY2I0ODYyMjg0NjFjYTA3ODU5MWJhY2FjMjRiNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuI2soGzs9s08FVw1hDGwuz1rJRO
AzoCeUbeLnXVs+qZfgo8Ee7WrtDNqs+t6wK+KYldv9er855T5qvFIulFb2YkxEat
Xd/kGrR/eDD2aleDfK6/hcj0gz0v+2jqlDftwDS9leJUS3+QikwWIjo7+bfsJjKW
aW85rZkZwTqqnI6fxim1EvAPcVb+iPNsttPkKaqIFBIpjC/gIgmYaSzKaFArZ+Cx
N4vCvJ+D2DH9OaN3qW/PX5AQAF+MZILMsi/8yoCylO9cAEjfFjIZy1sTcKntjhZL
LGhYyVgHyPlid79mxreOe4G8i3s86Wui1YquJg7Q9GBxJYi0NadleanmVQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFE3VAXFxy0hiKEYcoHhZG6ysJLbNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2ZhMTdm
My0yZDczLTQ1ODQtYWZhYy0xZTIyNzNmNWViMTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZmExN2Yz
LTJkNzMtNDU4NC1hZmFjLTFlMjI3M2Y1ZWIxOS8xL1RkVUJjWEhMU0dJb1JoeWdl
Rmtickt3a3RzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAw2CWMA0EAgACMAcDBQMqEiQAMA0GCSqGSIb3
DQEBCwUAA4IBAQCGjzWrPwGWfCVMt5V7WlleE6GnmosDP4HsHw0pleJeVpo1C+W4
oceDyDv/Zd72seVvH2boSB+hmTMa6+J3VvIoZ4wUvnXyawUQClpaasAXqgzR0Qx9
S8QrfJw9QoKJiBCOyR0vScDsuPqdd+IT2nVgnAmIyZCwSKu9QtiFTpWyguKfgy8f
dyxQZAdSVwI1Ze/wEfMpohwWFw+gJEETj1QAtqt+LKQGFOUJC2CSz3QuMKbcAloE
VSJ1y83oUcHIWbbp+n5INoUfJ/2lV4AfR1iGX4d8HXXAqnJ1Z3RLGpEI7WVxTZSf
7rAsVkcGb+6yuItd1zLPW6xwMv5UxICj1dJ4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:01 2024 by rpki-client on console-fra.rpki-client.org