Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
File: X9NR5espYvwW_BTnxuUbhK0d6LU.cer (raw, json)
Hash identifier: qzhN3jsFRXKiuWjypte5yp9gxh/5zPudqoecwzKtCTU=
Subject key identifier: 5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8D8EBF3086E9DF5A4EE6C0EB236FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.140.172.0/24
IP: 2a12:fd80::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d8:eb:f3:08:6e:9d:f5:a4:ee:6c:0e:b2:36:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:c0:12:23:f3:fc:e5:7a:8a:bc:17:a1:c6:
85:b3:21:9f:65:66:8f:96:f1:64:10:f9:c5:9e:8a:
78:2a:c0:79:80:cd:d2:a7:16:00:3f:93:de:29:e2:
9c:f7:e2:cf:48:e6:ac:16:fc:95:de:29:25:28:d2:
44:94:2b:18:bc:2b:01:c2:96:8f:3a:54:57:65:8b:
ef:3e:9e:2c:be:bd:09:4f:7c:eb:84:d5:4d:b2:a0:
45:01:8f:91:34:98:4f:c9:71:95:c5:d1:01:d3:a3:
9a:60:cc:26:1a:27:55:62:87:e3:17:35:59:5f:76:
9c:9b:b3:7e:1e:4b:50:20:3b:09:7f:5b:e4:9f:81:
80:90:0d:9e:f5:e9:63:e3:2f:e6:a7:6a:9d:2e:d4:
5a:90:e8:e1:f4:20:8d:29:3b:99:21:11:fd:5d:46:
a1:34:74:23:f4:bc:ec:07:8e:42:89:35:79:79:aa:
e9:ae:77:f0:ad:36:ef:9b:88:29:7f:eb:4d:c5:0e:
2a:80:33:77:2a:01:a2:e4:cf:68:26:76:17:37:24:
20:ba:0b:1f:46:ca:cd:3f:14:3b:4b:c2:00:71:0d:
e9:38:2c:2c:0d:b9:0b:3d:9f:75:d6:73:7f:f6:ef:
0c:82:d8:f5:26:29:d9:2d:06:cb:ee:22:6d:95:af:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.172.0/24
IPv6:
2a12:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
34:1c:f8:fa:63:aa:df:4f:fa:6a:7b:ba:29:13:70:48:78:9f:
2a:56:69:fe:23:91:31:15:a6:b0:5c:ce:02:b7:8c:35:07:7a:
be:5f:c9:6d:49:1e:e4:b3:be:c8:4c:7d:9f:1e:9b:9d:54:09:
4c:93:15:85:f7:db:a6:dc:f7:c2:2f:28:df:67:30:b2:a1:62:
13:a1:e3:15:21:e6:d6:ec:d9:65:84:f9:f8:0e:a5:b5:fb:4c:
19:42:fd:1f:1e:63:eb:7b:ee:89:cd:6f:2e:e5:03:1e:84:db:
95:7d:32:c3:6d:39:06:53:ff:fe:f3:01:ba:93:2d:0e:e6:f2:
8d:0d:af:35:c8:84:02:ec:16:74:a0:6f:c9:1a:31:ab:50:54:
9c:2a:34:90:68:f7:96:61:09:d3:d1:1b:a9:a7:bb:5f:fe:e3:
cc:c7:b8:60:88:80:4e:92:86:5b:a4:d6:ab:73:ee:8d:2b:51:
51:92:b3:ec:78:ac:96:a1:d8:2a:cc:95:a4:1c:9f:d8:48:54:
f6:71:9b:7b:49:e4:a1:86:c8:78:03:6f:d9:36:f1:44:1f:57:
74:44:48:e8:a2:94:6b:fd:4c:db:50:32:30:78:22:67:29:11:
21:23:7a:1d:54:b3:ae:e0:6e:b5:fa:01:ee:18:1c:69:2c:bb:
21:d6:75:d7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGuNjr8whunfWk7mwOsjb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQzNTFlNWViMjk2MmZjMTZmYzE0ZTdjNmU1MWI4NGFkMWRlOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpHAEiPz/OV6irwXocaFsyGfZWaP
lvFkEPnFnop4KsB5gM3SpxYAP5PeKeKc9+LPSOasFvyV3iklKNJElCsYvCsBwpaP
OlRXZYvvPp4svr0JT3zrhNVNsqBFAY+RNJhPyXGVxdEB06OaYMwmGidVYofjFzVZ
X3acm7N+HktQIDsJf1vkn4GAkA2e9elj4y/mp2qdLtRakOjh9CCNKTuZIRH9XUah
NHQj9LzsB45CiTV5earprnfwrTbvm4gpf+tNxQ4qgDN3KgGi5M9oJnYXNyQgugsf
RsrNPxQ7S8IAcQ3pOCwsDbkLPZ911nN/9u8Mgtj1JinZLQbL7iJtla91UwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFF/TUeXrKWL8FvwU58blG4StHei1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzk0NTdj
Ny1iZGZlLTRjOGEtOGY1NC03NDdkODgzNjdhZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvOTQ1N2M3
LWJkZmUtNGM4YS04ZjU0LTc0N2Q4ODM2N2FkYy8xL1g5TlI1ZXNwWXZ3V19CVG54
dVViaEswZDZMVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuYysMA0EAgACMAcDBQMqEv2AMA0GCSqGSIb3
DQEBCwUAA4IBAQA0HPj6Y6rfT/pqe7opE3BIeJ8qVmn+I5ExFaawXM4Ct4w1B3q+
X8ltSR7ks77ITH2fHpudVAlMkxWF99um3PfCLyjfZzCyoWIToeMVIebW7NllhPn4
DqW1+0wZQv0fHmPre+6JzW8u5QMehNuVfTLDbTkGU//+8wG6ky0O5vKNDa81yIQC
7BZ0oG/JGjGrUFScKjSQaPeWYQnT0Rupp7tf/uPMx7hgiIBOkoZbpNarc+6NK1FR
krPseKyWodgqzJWkHJ/YSFT2cZt7SeShhsh4A2/ZNvFEH1d0REjoopRr/UzbUDIw
eCJnKREhI3odVLOu4G61+gHuGBxpLLsh1nXX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:51 2024 by rpki-client on console-fra.rpki-client.org