Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer
File: VYgVPz7Gs2o_xoUNBTNyNvPO0RI.cer (raw, json)
Hash identifier: mfZmicziFKfb3fR5sQN19RwvZhfLsqd1fv3/oO+CP/0=
Subject key identifier: 55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01863AF8E8FCA1F838BA7817FE4359C094F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Feb 2023 10:57:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.213.0/24
IP: 2a13:b500::/29
Validation: Failed, certificate revoked on Mon 30 Oct 2023 08:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:f8:e8:fc:a1:f8:38:ba:78:17:fe:43:59:c0:94:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 10:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5588153f3ec6b36a3fc6850d05337236f3ced112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:2a:bd:22:94:54:7c:80:3e:c2:b8:5d:53:
fa:6d:bf:cd:0b:e8:84:cf:ab:24:f8:d6:27:99:bb:
36:2c:f1:59:bb:a4:16:64:84:3c:bb:74:24:6f:6d:
e3:a0:d3:d5:09:15:d1:af:9e:f4:54:b7:40:9b:5b:
17:ac:92:72:7f:e0:a3:3b:ba:36:c0:93:04:8b:b1:
b4:86:fc:3e:42:20:28:86:a6:50:c9:b3:d4:68:73:
c0:21:73:ce:65:f0:ee:f9:af:48:a6:0b:c5:20:36:
46:b9:06:58:20:15:1a:d5:36:35:eb:ef:7e:52:d4:
87:f1:af:16:03:41:92:8a:05:2c:86:7f:17:3c:d8:
ba:32:4b:7d:71:18:8e:3a:00:05:45:cf:2d:cd:5d:
be:b5:1a:fe:aa:a4:c6:ec:92:b5:2e:54:31:3c:bd:
02:4d:8b:63:5a:63:7f:d3:c1:4b:40:08:1e:2e:e1:
70:07:41:69:a8:0d:5a:c7:42:40:d4:a5:c8:3c:c4:
cc:bf:29:dc:61:17:67:89:12:96:4c:60:ac:e3:8f:
5b:36:b6:cb:fa:45:7c:8e:cd:fc:41:1a:af:2a:82:
a5:25:d2:37:72:c2:43:5f:4b:45:4c:67:9f:66:a9:
b9:54:f0:b8:7c:7f:79:5e:bd:6e:70:e4:f2:af:fd:
18:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:88:15:3F:3E:C6:B3:6A:3F:C6:85:0D:05:33:72:36:F3:CE:D1:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6ba63c-83d2-4157-b4ff-00104e74eccd/1/VYgVPz7Gs2o_xoUNBTNyNvPO0RI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.213.0/24
IPv6:
2a13:b500::/29
Signature Algorithm: sha256WithRSAEncryption
6c:46:a1:80:35:9b:0a:8b:8a:35:20:9f:ae:d8:0e:b3:aa:3f:
46:0b:1f:d3:e6:ca:a6:2b:7f:11:ec:07:cb:34:7f:0c:cb:69:
23:7d:6b:9f:79:48:ef:f0:cf:05:87:8e:f9:ad:5d:70:a2:f2:
29:6e:20:1d:88:33:34:1e:c5:4c:6a:3d:4d:df:2e:35:97:fd:
e9:bd:a6:4d:7d:36:6e:1a:7c:ff:a5:cd:9a:c3:44:b4:29:1c:
60:cc:ad:99:6f:d2:2a:d4:8d:9f:cb:73:d6:42:9d:cf:29:f0:
d1:fb:ce:87:56:24:6c:fd:23:3b:b7:74:05:f1:e8:da:f1:a7:
4d:52:fb:13:d6:5b:df:23:4d:a5:6f:34:4d:e5:38:16:87:d7:
74:22:79:b1:a9:ca:90:66:c8:71:61:23:d7:89:5d:1a:9a:2b:
33:07:fa:40:66:77:0f:c4:23:59:fa:b5:89:96:e8:be:35:90:
8b:da:14:42:27:9c:5d:0a:34:3b:de:5d:88:5e:8f:d6:8d:75:
b8:86:df:37:6e:87:7c:b0:af:41:88:44:60:a0:84:d1:8a:4f:
6d:47:10:3b:9c:29:c9:7a:9d:f1:d3:54:bc:e5:6f:7e:cb:01:
b4:33:fc:fd:1d:e2:24:a1:9b:ac:e9:dd:09:82:2a:f5:66:cf:
64:a3:87:44
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYY6+Oj8ofg4ungX/kNZwJT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjEwMTA1NzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTg4MTUzZjNlYzZiMzZhM2ZjNjg1MGQwNTMzNzIzNmYzY2VkMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfgqvSKUVHyAPsK4XVP6bb/NC+iE
z6sk+NYnmbs2LPFZu6QWZIQ8u3Qkb23joNPVCRXRr570VLdAm1sXrJJyf+CjO7o2
wJMEi7G0hvw+QiAohqZQybPUaHPAIXPOZfDu+a9IpgvFIDZGuQZYIBUa1TY16+9+
UtSH8a8WA0GSigUshn8XPNi6Mkt9cRiOOgAFRc8tzV2+tRr+qqTG7JK1LlQxPL0C
TYtjWmN/08FLQAgeLuFwB0FpqA1ax0JA1KXIPMTMvyncYRdniRKWTGCs449bNrbL
+kV8js38QRqvKoKlJdI3csJDX0tFTGefZqm5VPC4fH95Xr1ucOTyr/0YjQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFWIFT8+xrNqP8aFDQUzcjbzztESMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzZiYTYz
Yy04M2QyLTQxNTctYjRmZi0wMDEwNGU3NGVjY2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvNmJhNjNj
LTgzZDItNDE1Ny1iNGZmLTAwMTA0ZTc0ZWNjZC8xL1ZZZ1ZQejdHczJvX3hvVU5C
VE55TnZQTzBSSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsGHVMA0EAgACMAcDBQMqE7UAMA0GCSqGSIb3
DQEBCwUAA4IBAQBsRqGANZsKi4o1IJ+u2A6zqj9GCx/T5sqmK38R7AfLNH8My2kj
fWufeUjv8M8Fh475rV1wovIpbiAdiDM0HsVMaj1N3y41l/3pvaZNfTZuGnz/pc2a
w0S0KRxgzK2Zb9Iq1I2fy3PWQp3PKfDR+86HViRs/SM7t3QF8eja8adNUvsT1lvf
I02lbzRN5TgWh9d0InmxqcqQZshxYSPXiV0amiszB/pAZncPxCNZ+rWJlui+NZCL
2hRCJ5xdCjQ73l2IXo/WjXW4ht83bod8sK9BiERgoITRik9tRxA7nCnJep3x01S8
5W9+ywG0M/z9HeIkoZus6d0Jgir1Zs9ko4dE
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:53 2024 by rpki-client on console-ams.rpki-client.org