Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.cer
File: WCbFRUTdw8i-u7eLfi6s5d4oGJQ.cer (raw, json)
Hash identifier: IupBs30JxHAMN1gczWQOtaBudIY/NFxVWFsbO55Zzcg=
Subject key identifier: 58:26:C5:45:44:DD:C3:C8:BE:BB:B7:8B:7E:2E:AC:E5:DE:28:18:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFA99D55F61A8A22B3DBD1B824A52B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 33885
IP: 31.211.192.0/18
IP: 37.46.160.0/19
IP: 37.247.0.0/19
IP: 84.55.64.0/18
IP: 84.246.88.0/21
IP: 89.253.64.0/18
IP: 92.244.0.0/19
IP: 94.137.96.0/19
IP: 109.104.0.0/19
IP: 178.78.192.0/18
IP: 185.86.100.0/22
IP: 212.107.128.0/19
IP: 2a01:3b8::/32
Validation: Failed, certificate revoked on Tue 28 Nov 2023 10:28:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:99:d5:5f:61:a8:a2:2b:3d:bd:1b:82:4a:52:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5826c54544ddc3c8bebbb78b7e2eace5de281894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:58:b2:ca:3e:62:52:54:70:ec:ea:9a:94:d7:
09:db:6b:db:91:a9:5f:e3:9e:b8:a4:b7:a0:61:7b:
5e:e2:ad:49:e5:86:a6:8a:fe:88:36:b5:91:72:3c:
bc:48:33:87:24:10:b9:8d:07:34:46:3f:da:56:bf:
6c:05:25:c3:39:a5:df:65:de:13:c9:00:cf:a4:af:
54:9b:d1:bb:b2:a5:15:d6:df:b1:72:a5:17:c5:3d:
b1:a7:14:0e:e7:9a:08:d8:84:d6:83:41:ca:be:8f:
d1:c9:9f:1b:9e:3b:89:27:e3:1c:ec:f0:27:f9:0b:
e7:50:03:ab:ce:35:ae:c1:e6:27:4d:3a:4e:a0:3c:
67:2f:75:f1:ff:9a:d5:1e:7f:51:72:17:62:71:04:
43:76:98:5f:9e:de:f7:1b:be:bc:43:6f:59:9f:27:
49:52:6d:eb:c1:1d:cd:cd:d4:23:61:e6:3e:de:67:
59:51:09:2b:14:d9:2c:e3:6f:19:da:00:3b:21:11:
be:33:94:e9:da:d9:b2:dd:32:8d:8a:56:be:69:42:
39:d8:26:ce:90:4c:83:f9:7e:e4:73:f2:9e:34:b5:
06:ce:4a:9b:45:2c:56:e1:9c:18:1a:78:c2:cf:a8:
fa:49:47:f6:5a:ff:e9:63:24:57:f9:3a:14:99:b6:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:C5:45:44:DD:C3:C8:BE:BB:B7:8B:7E:2E:AC:E5:DE:28:18:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.211.192.0/18
37.46.160.0/19
37.247.0.0/19
84.55.64.0/18
84.246.88.0/21
89.253.64.0/18
92.244.0.0/19
94.137.96.0/19
109.104.0.0/19
178.78.192.0/18
185.86.100.0/22
212.107.128.0/19
IPv6:
2a01:3b8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
33885
Signature Algorithm: sha256WithRSAEncryption
88:b1:9b:0e:eb:6d:75:4d:0e:2e:82:ac:2f:78:85:8e:f9:77:
4e:4d:c6:90:74:e7:84:f8:16:36:56:f8:b9:8c:cb:4e:96:f9:
27:3c:47:b8:ab:4d:97:58:80:11:cf:be:59:72:4d:c6:5a:a0:
bd:04:20:45:12:74:fe:61:df:fe:15:ed:b7:11:11:58:0f:2b:
e3:d8:d4:21:0b:e9:45:80:7e:48:b3:c0:25:a2:5c:b5:85:76:
47:9b:c0:34:87:f7:30:43:14:1e:66:0d:d3:36:b0:c0:8c:f3:
4f:51:80:27:49:e2:40:8e:69:f4:b8:3b:7e:50:91:cb:74:b4:
f9:1c:df:20:c1:34:60:95:99:bd:86:ea:07:4d:35:31:bc:c0:
31:b7:32:89:35:60:b2:e8:7c:74:3b:2d:7a:71:48:ed:18:14:
29:ab:e4:57:6e:58:d5:52:63:c3:4d:0d:11:6b:77:28:e2:48:
3a:e3:94:84:0b:de:4e:21:4e:86:52:64:75:9e:2f:eb:d7:e1:
88:b9:e0:4c:6e:ad:91:d3:53:b4:a5:38:53:77:5e:79:db:cb:
76:56:26:87:20:75:e2:06:41:20:ce:e5:d9:6e:95:b0:fa:b4:
01:d3:33:dd:a8:67:43:e9:34:5d:3a:68:f5:74:4f:dc:92:73:
c2:57:2a:9d
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAYVu+pnVX2Goois9vRuCSlKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNjM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODI2YzU0NTQ0ZGRjM2M4YmViYmI3OGI3ZTJlYWNlNWRlMjgxODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFiyyj5iUlRw7OqalNcJ22vbkalf
4564pLegYXte4q1J5Yamiv6INrWRcjy8SDOHJBC5jQc0Rj/aVr9sBSXDOaXfZd4T
yQDPpK9Um9G7sqUV1t+xcqUXxT2xpxQO55oI2ITWg0HKvo/RyZ8bnjuJJ+Mc7PAn
+QvnUAOrzjWuweYnTTpOoDxnL3Xx/5rVHn9RchdicQRDdphfnt73G768Q29ZnydJ
Um3rwR3NzdQjYeY+3mdZUQkrFNks428Z2gA7IRG+M5Tp2tmy3TKNila+aUI52CbO
kEyD+X7kc/KeNLUGzkqbRSxW4ZwYGnjCz6j6SUf2Wv/pYyRX+ToUmbbHbQIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFFgmxUVE3cPIvru3i34urOXeKBiUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzcwN2Yw
OS0wY2Q0LTQ3MzUtYWE5OC0zZWM3ZTdkZDRhMjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvNzA3ZjA5
LTBjZDQtNDczNS1hYTk4LTNlYzdlN2RkNGEyMC8xL1dDYkZSVVRkdzhpLXU3ZUxm
aTZzNWQ0b0dKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF
BwEHAQH/BGEwXzBOBAIAATBIAwQGH9PAAwQFJS6gAwQFJfcAAwQGVDdAAwQDVPZY
AwQGWf1AAwQFXPQAAwQFXolgAwQFbWgAAwQGsk7AAwQCuVZkAwQF1GuAMA0EAgAC
MAcDBQAqAQO4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCEXTANBgkqhkiG9w0B
AQsFAAOCAQEAiLGbDuttdU0OLoKsL3iFjvl3Tk3GkHTnhPgWNlb4uYzLTpb5JzxH
uKtNl1iAEc++WXJNxlqgvQQgRRJ0/mHf/hXttxERWA8r49jUIQvpRYB+SLPAJaJc
tYV2R5vANIf3MEMUHmYN0zawwIzzT1GAJ0niQI5p9Lg7flCRy3S0+RzfIME0YJWZ
vYbqB001MbzAMbcyiTVgsuh8dDstenFI7RgUKavkV25Y1VJjw00NEWt3KOJIOuOU
hAveTiFOhlJkdZ4v69fhiLngTG6tkdNTtKU4U3deedvLdlYmhyB14gZBIM7l2W6V
sPq0AdMz3ahnQ+k0XTpo9XRP3JJzwlcqnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:05 2024 by rpki-client on console-ams.rpki-client.org