Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer
File: V7e0YuTO-S3L9EaS_w-FHuPnqdY.cer (raw, json)
Hash identifier: AhD9XSfDXk3tA5eypaRD2A6pUfSBTx1Kpiu1xgY+hdw=
Subject key identifier: 57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A4C1AA3B7B458E18E0D7ECC8E029B9CF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/V7e0YuTO-S3L9EaS_w-FHuPnqdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Aug 2023 14:58:48 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.0.48.0/21
IP: 185.5.240.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4c:1a:a3:b7:b4:58:e1:8e:0d:7e:cc:8e:02:9b:9c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 31 14:58:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57b7b462e4cef92dcbf44692ff0f851ee3e7a9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:30:2e:7e:ce:1c:30:dc:28:1f:af:a9:32:
f2:66:4d:5a:2c:36:cb:69:dc:4d:4b:27:b2:9d:64:
a3:9d:94:8b:91:14:02:a4:a6:0a:11:5f:8c:63:a5:
46:92:05:e8:93:32:a8:37:f8:df:aa:52:b5:b5:0d:
d0:87:ad:6c:77:d9:a6:bb:09:42:58:3a:c7:0e:37:
53:b3:04:50:ef:0e:bd:1e:f3:2e:50:a4:63:96:21:
53:17:7a:4b:be:51:9e:8a:a6:1e:6a:47:63:fa:fd:
ac:6e:90:29:f0:93:c3:55:2f:aa:80:4c:c9:19:b6:
3e:ea:17:2d:e7:c0:71:bc:5f:a8:30:89:f2:42:11:
15:07:c7:98:54:68:04:86:f5:da:05:00:be:48:90:
e4:b6:45:6e:e1:ca:b2:5f:77:ef:17:bc:87:86:63:
23:03:fa:25:91:20:1c:78:ee:a9:c4:17:91:55:e6:
5b:01:e4:ca:9b:d0:68:0b:9d:fd:48:ac:2f:f8:72:
2b:3c:6c:8d:87:43:8b:f4:59:10:c5:03:52:20:4c:
86:9f:98:a6:f5:fb:ec:8c:e9:22:71:ed:52:4e:39:
99:61:70:8d:9b:bc:c5:3a:2a:4b:de:bf:0e:c0:51:
12:2e:d2:0c:eb:58:c6:73:83:c6:79:96:17:a1:60:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:B4:62:E4:CE:F9:2D:CB:F4:46:92:FF:0F:85:1E:E3:E7:A9:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a9a70-808a-417c-b6da-ed6b8f76f097/1/V7e0YuTO-S3L9EaS_w-FHuPnqdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.48.0/21
185.5.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:25:9a:55:96:a0:7c:48:45:80:d2:49:5e:dd:4c:0a:9a:65:
90:24:b2:e5:63:f1:75:b1:20:89:a7:8b:0e:1c:64:1e:c8:ee:
ef:f2:b7:34:ec:94:f4:fe:f9:3a:e5:7c:90:2f:8c:0b:ee:05:
1f:cb:0e:10:2d:04:17:61:6d:17:13:46:fa:4d:fb:ae:98:09:
36:25:af:c7:14:bf:3a:a2:ea:4a:66:b4:57:4f:99:d4:91:bf:
09:67:a7:99:c9:a9:81:71:43:ea:12:71:3d:2b:e0:dc:24:7c:
ba:c7:74:c2:42:c0:8b:e4:81:fe:eb:7a:22:8b:54:ae:30:c4:
52:76:c3:19:0f:86:26:8e:b9:ab:a0:33:04:67:82:26:98:4b:
35:1b:b7:74:82:a4:c1:75:da:9f:d1:61:38:67:22:04:0d:f1:
85:0f:c0:45:05:d9:43:86:b2:6f:f8:c0:d0:b2:c2:f6:34:ed:
f1:24:6c:df:22:3b:d2:98:32:0e:07:10:cd:30:e4:da:7f:dc:
99:aa:af:04:69:19:fc:48:77:69:04:2d:1e:e5:ba:18:b7:74:
f6:bf:bf:92:c4:91:fd:b9:87:45:b0:ac:da:92:09:7b:3a:50:
41:f9:6e:e5:dc:94:eb:34:4c:33:ec:30:3f:cc:42:f2:d1:17:
85:99:2c:43
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYpMGqO3tFjhjg1+zI4Cm5z5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwODMxMTQ1ODQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2I3YjQ2MmU0Y2VmOTJkY2JmNDQ2OTJmZjBmODUxZWUzZTdhOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxcwLn7OHDDcKB+vqTLyZk1aLDbL
adxNSyeynWSjnZSLkRQCpKYKEV+MY6VGkgXokzKoN/jfqlK1tQ3Qh61sd9mmuwlC
WDrHDjdTswRQ7w69HvMuUKRjliFTF3pLvlGeiqYeakdj+v2sbpAp8JPDVS+qgEzJ
GbY+6hct58BxvF+oMInyQhEVB8eYVGgEhvXaBQC+SJDktkVu4cqyX3fvF7yHhmMj
A/olkSAceO6pxBeRVeZbAeTKm9BoC539SKwv+HIrPGyNh0OL9FkQxQNSIEyGn5im
9fvsjOkice1STjmZYXCNm7zFOipL3r8OwFESLtIM61jGc4PGeZYXoWChqQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFFe3tGLkzvkty/RGkv8PhR7j56nWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzJhOWE3
MC04MDhhLTQxN2MtYjZkYS1lZDZiOGY3NmYwOTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMmE5YTcw
LTgwOGEtNDE3Yy1iNmRhLWVkNmI4Zjc2ZjA5Ny8xL1Y3ZTBZdVRPLVMzTDlFYVNf
dy1GSHVQbnFkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQDkgAwAwQCuQXwMA0GCSqGSIb3DQEBCwUAA4IB
AQCcJZpVlqB8SEWA0kle3UwKmmWQJLLlY/F1sSCJp4sOHGQeyO7v8rc07JT0/vk6
5XyQL4wL7gUfyw4QLQQXYW0XE0b6TfuumAk2Ja/HFL86oupKZrRXT5nUkb8JZ6eZ
yamBcUPqEnE9K+DcJHy6x3TCQsCL5IH+63oii1SuMMRSdsMZD4YmjrmroDMEZ4Im
mEs1G7d0gqTBddqf0WE4ZyIEDfGFD8BFBdlDhrJv+MDQssL2NO3xJGzfIjvSmDIO
BxDNMOTaf9yZqq8EaRn8SHdpBC0e5boYt3T2v7+SxJH9uYdFsKzakgl7OlBB+W7l
3JTrNEwz7DA/zELy0ReFmSxD
-----END CERTIFICATE-----
Generated at Fri Oct 13 15:07:31 2023 by rpki-client on console-fra.rpki-client.org