Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TpOBFg1llASaMTpbe9UxYo193hs.cer
File: TpOBFg1llASaMTpbe9UxYo193hs.cer (raw, json)
Hash identifier: 1QoOlV+r89IAZ9j8gqASs57i1eTPdfn7bs6ycPlgVzs=
Subject key identifier: 4E:93:81:16:0D:65:94:04:9A:31:3A:5B:7B:D5:31:62:8D:7D:DE:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018EEB84430BAE9F615F3D6BE12BFAE76A24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/TpOBFg1llASaMTpbe9UxYo193hs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 17 Apr 2024 10:04:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 48937
IP: 195.149.65.0/24
IP: 213.5.168.0/21
Validation: Failed, certificate revoked on Mon 22 Apr 2024 14:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:eb:84:43:0b:ae:9f:61:5f:3d:6b:e1:2b:fa:e7:6a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 10:04:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9381160d6594049a313a5b7bd531628d7dde1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:fc:b0:fc:82:48:0a:ac:67:e2:b8:e1:80:
2f:96:61:37:25:30:96:5a:50:04:3f:57:58:e9:41:
a0:84:cf:db:41:0e:10:2b:b6:02:e2:74:ca:38:2f:
d5:e0:f6:2b:a4:47:4f:b7:d3:03:ab:89:f2:20:0e:
b7:59:7c:e3:e2:88:49:d5:af:fa:de:91:c7:52:0a:
14:ca:bc:78:02:fd:db:99:01:b3:5e:13:6d:94:68:
d4:dc:92:b8:8b:f3:14:46:1b:e6:ba:07:b2:5a:bd:
ba:0b:40:d5:83:e0:5d:8d:ad:a1:60:10:9a:b1:11:
cf:79:d3:68:c1:cf:32:d5:b1:cc:bd:6f:a6:f5:83:
ad:2d:56:05:f3:6d:46:81:82:64:1c:93:88:3f:e5:
22:52:7e:7f:99:3b:b7:16:95:ad:c0:50:87:3b:2d:
27:d6:70:8b:21:65:3d:0b:5b:ac:80:9e:1b:c9:03:
d3:50:d2:8b:fd:ab:86:09:63:b9:dd:86:b4:9c:b1:
54:ec:34:13:e9:fc:df:21:a4:59:2e:03:ac:85:3d:
c4:68:a8:9e:43:25:19:cb:35:57:18:58:b0:0d:22:
a8:95:dd:5b:4a:23:51:7c:4a:c6:02:5e:a9:5a:72:
b0:24:79:79:85:ac:52:59:9a:c8:ef:be:53:0c:c4:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:93:81:16:0D:65:94:04:9A:31:3A:5B:7B:D5:31:62:8D:7D:DE:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a13c8-2223-4aa4-8094-964111a9eb22/1/TpOBFg1llASaMTpbe9UxYo193hs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.65.0/24
213.5.168.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48937
Signature Algorithm: sha256WithRSAEncryption
7c:da:ed:49:71:10:b6:0e:ad:97:90:0c:6b:cf:88:ed:ea:cc:
26:77:67:e9:02:ce:4f:c7:0a:25:ab:b1:ee:66:a4:37:16:9c:
13:14:0c:ac:bf:2c:fc:e3:e9:e1:ba:19:95:a4:7e:8c:98:70:
4e:08:d0:c9:01:cd:87:e3:55:e7:17:d7:b5:b9:c1:c7:35:df:
2a:56:85:9f:18:0c:6d:16:ac:04:4d:fd:6f:dc:33:29:39:2b:
54:0b:20:bc:6c:24:df:34:ad:0c:a3:cc:30:4e:6e:22:52:f7:
35:77:c2:0e:a2:17:06:8d:fe:f9:7e:5b:3b:68:e7:ac:1a:14:
cf:86:00:6c:05:b4:93:b9:bf:c0:a0:0b:2d:e8:bd:96:fa:7f:
a5:01:c4:0b:b8:23:05:b2:6f:e8:91:a4:c8:ee:74:d2:bf:37:
b6:6e:d5:be:0a:43:c9:bf:53:3a:ef:c3:11:d3:1e:4f:c1:7e:
9c:9d:93:67:be:b3:35:7f:42:9b:82:c0:b4:af:b1:57:25:28:
de:d6:d8:55:44:81:98:7d:05:ec:75:7e:f0:ef:34:81:d7:ba:
8e:a1:bd:47:b9:22:a2:82:51:77:db:28:25:ac:a4:ae:ba:53:
21:12:41:de:f4:85:fd:c3:5a:48:0b:84:40:d3:ba:89:02:78:
c3:d5:c2:30
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAY7rhEMLrp9hXz1r4Sv652okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwNDE3MTAwNDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTkzODExNjBkNjU5NDA0OWEzMTNhNWI3YmQ1MzE2MjhkN2RkZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TX8sPyCSAqsZ+K44YAvlmE3JTCW
WlAEP1dY6UGghM/bQQ4QK7YC4nTKOC/V4PYrpEdPt9MDq4nyIA63WXzj4ohJ1a/6
3pHHUgoUyrx4Av3bmQGzXhNtlGjU3JK4i/MURhvmugeyWr26C0DVg+Bdja2hYBCa
sRHPedNowc8y1bHMvW+m9YOtLVYF821GgYJkHJOIP+UiUn5/mTu3FpWtwFCHOy0n
1nCLIWU9C1usgJ4byQPTUNKL/auGCWO53Ya0nLFU7DQT6fzfIaRZLgOshT3EaKie
QyUZyzVXGFiwDSKold1bSiNRfErGAl6pWnKwJHl5haxSWZrI775TDMQOYQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFE6TgRYNZZQEmjE6W3vVMWKNfd4bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4LzdhMTNj
OC0yMjIzLTRhYTQtODA5NC05NjQxMTFhOWViMjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvN2ExM2M4
LTIyMjMtNGFhNC04MDk0LTk2NDExMWE5ZWIyMi8xL1RwT0JGZzFsbEFTYU1UcGJl
OVV4WW8xOTNocy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAw5VBAwQD1QWoMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwC/KTANBgkqhkiG9w0BAQsFAAOCAQEAfNrtSXEQtg6tl5AMa8+I7erM
Jndn6QLOT8cKJaux7makNxacExQMrL8s/OPp4boZlaR+jJhwTgjQyQHNh+NV5xfX
tbnBxzXfKlaFnxgMbRasBE39b9wzKTkrVAsgvGwk3zStDKPMME5uIlL3NXfCDqIX
Bo3++X5bO2jnrBoUz4YAbAW0k7m/wKALLei9lvp/pQHEC7gjBbJv6JGkyO500r83
tm7VvgpDyb9TOu/DEdMeT8F+nJ2TZ76zNX9Cm4LAtK+xVyUo3tbYVUSBmH0F7HV+
8O80gde6jqG9R7kiooJRd9soJaykrrpTIRJB3vSF/cNaSAuEQNO6iQJ4w9XCMA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:59:20 2025 by rpki-client