Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
File: Vd58G1xSZby5DBRMVjB2_c-rah4.cer (raw, json)
Hash identifier: aXpR7uS+QPdYTOgkIRGvVfdF0SHJAMxyLSJh8UILc0Y=
Subject key identifier: 55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01859628D1D19E42C034441C3E02B36AC6F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/Vd58G1xSZby5DBRMVjB2_c-rah4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 09 Jan 2023 10:52:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.122.188.0/24
IP: 2a05:f300::/29
Validation: Failed, certificate revoked on Wed 09 Aug 2023 08:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:28:d1:d1:9e:42:c0:34:44:1c:3e:02:b3:6a:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 9 10:52:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:d3:a2:76:aa:fc:76:c7:a5:e4:dd:15:c0:
db:a4:89:2a:cd:3b:f3:b6:51:1f:17:77:fa:9a:df:
cb:fc:7c:99:e4:78:c4:cd:23:c7:78:db:c8:7a:6f:
9a:4e:cc:3d:c9:59:32:06:0e:e7:e5:aa:dc:aa:70:
1e:c6:8e:ad:06:67:d3:e0:57:94:95:e4:51:f1:00:
b8:3b:e5:c4:b8:27:94:99:9d:19:df:74:22:8c:ea:
65:fa:a1:63:ec:dc:2a:ba:d7:ce:0c:63:f3:de:4a:
f8:35:8b:ca:7c:b6:9c:f3:06:f7:54:82:f5:6f:12:
75:65:5a:fe:74:a1:1c:33:4c:cd:62:23:74:bd:90:
53:4d:4f:b6:da:c4:9f:36:5d:04:1c:89:b0:3a:12:
d7:c2:f3:03:cb:d3:e5:54:e1:96:5a:d8:bd:b4:0b:
bc:61:9d:2c:54:e9:bf:65:05:ea:ba:fc:54:85:12:
81:72:e6:aa:4c:86:35:87:9f:0e:25:47:27:50:ab:
e2:31:69:c6:04:d5:57:86:fc:e4:bd:28:c0:65:a7:
81:ac:fb:b5:8f:95:de:a7:8c:4d:fc:73:20:64:32:
fd:05:99:0b:7a:32:ff:53:c1:8c:79:3b:9a:20:67:
e8:33:ef:ff:79:3a:3c:18:a9:6b:bf:0f:4e:a7:76:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/Vd58G1xSZby5DBRMVjB2_c-rah4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.188.0/24
IPv6:
2a05:f300::/29
Signature Algorithm: sha256WithRSAEncryption
2d:f7:60:56:da:8e:c4:90:53:df:ad:c2:76:d3:63:5a:df:0e:
a4:2e:8e:89:2d:49:3c:ca:b7:c3:46:1f:39:28:86:1c:d0:73:
d0:26:75:b5:52:1b:40:83:c2:d1:ea:ee:1c:39:86:5a:92:d3:
5e:7e:87:49:c2:0f:d4:d5:be:f0:8f:5b:ff:24:6a:ed:a9:54:
73:49:4f:73:a7:e6:a8:44:19:93:6f:b5:4a:3a:b5:9d:e7:8d:
6a:27:1d:31:8e:31:15:97:9f:ff:d9:a1:7a:96:d3:20:cd:eb:
1e:31:58:c7:34:20:d9:cd:c6:7f:d2:c6:ad:d1:db:29:ce:e8:
22:24:5a:98:bd:c5:af:48:98:03:1d:62:72:13:5a:31:b2:24:
e5:2a:88:e7:1e:0c:40:29:eb:61:b2:5f:42:dc:5a:a5:10:21:
93:1f:5d:c4:ad:2e:d2:48:75:6d:a4:4c:c6:0d:a0:56:0c:ad:
59:65:d6:8b:cd:d5:7d:33:04:21:fb:b6:c2:5b:8a:48:f8:3f:
77:97:46:f3:83:b2:5a:00:62:77:89:54:53:14:e8:0b:72:6b:
e6:fb:53:a9:2f:df:84:a7:49:e1:5b:69:30:ca:a6:97:98:30:
8f:da:58:35:be:c7:7e:c1:f8:56:30:55:49:d3:ea:13:bc:5c:
a2:f5:83:54
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYWWKNHRnkLANEQcPgKzasbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTA5MTA1MjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWRlN2MxYjVjNTI2NWJjYjkwYzE0NGM1NjMwNzZmZGNmYWI2YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzErTonaq/HbHpeTdFcDbpIkqzTvz
tlEfF3f6mt/L/HyZ5HjEzSPHeNvIem+aTsw9yVkyBg7n5arcqnAexo6tBmfT4FeU
leRR8QC4O+XEuCeUmZ0Z33QijOpl+qFj7NwqutfODGPz3kr4NYvKfLac8wb3VIL1
bxJ1ZVr+dKEcM0zNYiN0vZBTTU+22sSfNl0EHImwOhLXwvMDy9PlVOGWWti9tAu8
YZ0sVOm/ZQXquvxUhRKBcuaqTIY1h58OJUcnUKviMWnGBNVXhvzkvSjAZaeBrPu1
j5Xep4xN/HMgZDL9BZkLejL/U8GMeTuaIGfoM+//eTo8GKlrvw9Op3aXhQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFXefBtcUmW8uQwUTFYwdv3Pq2oeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyL2MxNThk
YS1jM2ZlLTQ4NjItOGVlMS05M2RhYTYzMTliOWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvYzE1OGRh
LWMzZmUtNDg2Mi04ZWUxLTkzZGFhNjMxOWI5YS8xL1ZkNThHMXhTWmJ5NURCUk1W
akIyX2MtcmFoNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPnq8MA0EAgACMAcDBQMqBfMAMA0GCSqGSIb3
DQEBCwUAA4IBAQAt92BW2o7EkFPfrcJ202Na3w6kLo6JLUk8yrfDRh85KIYc0HPQ
JnW1UhtAg8LR6u4cOYZaktNefodJwg/U1b7wj1v/JGrtqVRzSU9zp+aoRBmTb7VK
OrWd541qJx0xjjEVl5//2aF6ltMgzeseMVjHNCDZzcZ/0sat0dspzugiJFqYvcWv
SJgDHWJyE1oxsiTlKojnHgxAKethsl9C3FqlECGTH13ErS7SSHVtpEzGDaBWDK1Z
ZdaLzdV9MwQh+7bCW4pI+D93l0bzg7JaAGJ3iVRTFOgLcmvm+1OpL9+Ep0nhW2kw
yqaXmDCP2lg1vsd+wfhWMFVJ0+oTvFyi9YNU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:55 2024 by rpki-client on console-ams.rpki-client.org