Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDZhhHPIJss9LLXqS9vSWNGgtaE.cer
File: XDZhhHPIJss9LLXqS9vSWNGgtaE.cer (raw, json)
Hash identifier: P5YuG47O37MqrbVraa08lSljGv323kQD7TE9c9YLzPk=
Subject key identifier: 5C:36:61:84:73:C8:26:CB:3D:2C:B5:EA:4B:DB:D2:58:D1:A0:B5:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A2BE6ECD3B226D4922A645E669166
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200109
IP: 212.46.61.0/24
IP: 2a13:cd00::/29
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2b:e6:ec:d3:b2:26:d4:92:2a:64:5e:66:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c36618473c826cb3d2cb5ea4bdbd258d1a0b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:96:30:c8:07:f9:ad:58:6e:ce:1a:7c:0d:
51:d8:45:6c:7e:be:47:5d:a9:e1:33:07:ae:01:ba:
38:17:32:4b:c1:00:0b:65:69:9f:59:97:8f:9c:22:
d3:44:4b:f8:fa:59:65:43:fa:50:3c:82:1b:a3:e6:
be:8b:cc:01:d1:5e:ea:10:89:ca:fe:c0:8d:e5:3b:
26:20:32:86:15:95:b9:1d:dd:0e:77:79:3b:e5:04:
8d:ca:cb:b8:eb:f3:39:3c:fc:c0:e2:43:65:2b:4b:
73:eb:30:f1:c4:41:cf:fa:38:4d:57:22:6c:7c:6e:
3b:a7:5d:a1:3e:ce:f9:08:c4:23:33:31:dc:3e:e2:
95:12:78:81:0a:27:71:1a:93:35:e9:7a:9d:6c:f5:
b6:ca:61:51:e8:c0:4c:06:fb:68:91:5d:3f:ea:11:
16:13:05:b7:fd:bd:83:2c:d9:1e:8b:33:61:bf:be:
2b:06:b6:99:e0:ab:29:22:f9:82:ab:00:83:3c:83:
ef:a9:13:7a:23:7c:82:72:67:8f:48:a5:98:60:cd:
0c:f6:e4:14:c8:db:b5:43:96:fd:0d:41:1f:7b:f9:
94:d5:d8:20:f1:8b:a1:3c:64:09:23:6f:a4:d0:86:
33:e3:3c:cc:27:d3:86:c3:a2:78:05:60:9b:c0:da:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:61:84:73:C8:26:CB:3D:2C:B5:EA:4B:DB:D2:58:D1:A0:B5:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fcf7da-4a13-4412-8768-039817ccf5e1/1/XDZhhHPIJss9LLXqS9vSWNGgtaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.61.0/24
IPv6:
2a13:cd00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200109
Signature Algorithm: sha256WithRSAEncryption
0e:67:bd:e3:14:6b:5f:7b:0e:11:7a:54:56:af:c4:d2:c7:f6:
2d:a6:8d:bf:05:bd:5c:2a:5e:57:2f:ed:45:e5:ad:40:ba:73:
dd:8f:61:eb:bb:b1:2b:31:50:28:43:a2:ea:02:88:51:b5:ac:
4d:6f:04:50:df:c7:54:6a:5a:1a:83:5b:53:91:fa:8d:7a:b3:
e7:bd:00:e2:dd:0c:2a:0e:c2:6b:1c:54:14:39:52:3e:5a:4d:
2b:4b:11:57:16:db:3d:33:0e:6c:e6:19:86:c2:f0:f9:d1:94:
c8:ec:54:89:28:9e:ef:1d:39:97:ec:39:c8:60:94:cc:80:4e:
b3:31:46:33:f5:51:c5:cb:f6:3d:a8:68:e3:a9:e5:7a:64:36:
c5:2b:75:cc:ac:3b:42:47:26:ee:c9:e9:f4:ad:d2:c6:91:6a:
fa:37:ee:1c:3e:26:7e:96:c4:f8:52:e7:5e:0d:ca:06:6a:e8:
cd:49:1a:5a:e1:3d:ba:17:ea:6a:0e:36:fd:a3:16:62:b5:48:
7e:5d:8b:7e:9a:c7:e6:be:24:12:a7:0c:ac:e7:a8:a6:18:ce:
e2:f3:2a:03:83:fb:fe:02:ca:cb:0e:aa:3b:7a:e7:e0:ed:e8:
fe:d8:74:80:5e:49:11:b0:45:2b:79:67:85:92:35:20:2c:9e:
45:76:0f:8a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYzKKivm7NOyJtSSKmReZpFmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMzMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzM2NjE4NDczYzgyNmNiM2QyY2I1ZWE0YmRiZDI1OGQxYTBiNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU2WMMgH+a1Ybs4afA1R2EVsfr5H
XanhMweuAbo4FzJLwQALZWmfWZePnCLTREv4+lllQ/pQPIIbo+a+i8wB0V7qEInK
/sCN5TsmIDKGFZW5Hd0Od3k75QSNysu46/M5PPzA4kNlK0tz6zDxxEHP+jhNVyJs
fG47p12hPs75CMQjMzHcPuKVEniBCidxGpM16XqdbPW2ymFR6MBMBvtokV0/6hEW
EwW3/b2DLNkeizNhv74rBraZ4KspIvmCqwCDPIPvqRN6I3yCcmePSKWYYM0M9uQU
yNu1Q5b9DUEfe/mU1dgg8YuhPGQJI2+k0IYz4zzMJ9OGw6J4BWCbwNph4QIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFFw2YYRzyCbLPSy16kvb0ljRoLWhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2ZjZjdk
YS00YTEzLTQ0MTItODc2OC0wMzk4MTdjY2Y1ZTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZmNmN2Rh
LTRhMTMtNDQxMi04NzY4LTAzOTgxN2NjZjVlMS8xL1hEWmhoSFBJSnNzOUxMWHFT
OXZTV05HZ3RhRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1C49MA0EAgACMAcDBQMqE80AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMNrTANBgkqhkiG9w0BAQsFAAOCAQEADme94xRrX3sO
EXpUVq/E0sf2LaaNvwW9XCpeVy/tReWtQLpz3Y9h67uxKzFQKEOi6gKIUbWsTW8E
UN/HVGpaGoNbU5H6jXqz570A4t0MKg7CaxxUFDlSPlpNK0sRVxbbPTMObOYZhsLw
+dGUyOxUiSie7x05l+w5yGCUzIBOszFGM/VRxcv2Paho46nlemQ2xSt1zKw7Qkcm
7snp9K3SxpFq+jfuHD4mfpbE+FLnXg3KBmrozUkaWuE9uhfqag42/aMWYrVIfl2L
fprH5r4kEqcMrOeophjO4vMqA4P7/gLKyw6qO3rn4O3o/th0gF5JEbBFK3lnhZI1
ICyeRXYPig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:34:26 2024 by rpki-client on console-ams.rpki-client.org