Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XN9jeb_WHGyjYyGz8Awp1dZREDE.cer
File: XN9jeb_WHGyjYyGz8Awp1dZREDE.cer (raw, json)
Hash identifier: rtl7aII6UuRbEoEShn1neJppO1qZjimgW3S+tfxbl8o=
Subject key identifier: 5C:DF:63:79:BF:D6:1C:6C:A3:63:21:B3:F0:0C:29:D5:D6:51:10:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B63352D1F4D8940FFFC40135E5F8C25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/XN9jeb_WHGyjYyGz8Awp1dZREDE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.107.0/24
IP: 2a12:9100::/29
Validation: Failed, certificate revoked on Tue 05 Dec 2023 11:40:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:35:2d:1f:4d:89:40:ff:fc:40:13:5e:5f:8c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cdf6379bfd61c6ca36321b3f00c29d5d6511031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cb:d6:58:ed:fb:fa:39:98:a3:db:15:42:ce:
c3:98:f7:6c:39:7a:4e:76:61:ad:04:63:2f:d3:4d:
b0:fe:18:3f:ce:e1:ec:59:51:7e:d5:c3:81:48:11:
f0:d9:a6:78:00:f5:aa:74:99:59:c2:1a:22:78:a4:
9b:3b:1e:13:9e:d0:6c:8e:f2:20:ed:9e:b4:f3:fd:
75:3a:49:2d:2c:ac:e1:63:b9:19:76:23:a9:a0:a2:
50:aa:95:72:1d:a6:60:a4:25:64:71:52:c6:60:96:
b2:f4:78:06:ad:7f:6d:7d:a6:d1:a5:5d:8e:bd:5e:
d0:21:2d:ae:dc:32:7c:27:51:e5:ae:43:92:f6:32:
b7:e8:87:82:90:8d:0c:19:75:7a:d5:af:6c:75:0d:
ce:48:b6:88:9d:a2:42:d0:c3:e8:df:e4:8f:b5:02:
85:fa:1e:94:3d:5c:4c:d8:a7:25:e6:f5:e9:68:10:
25:2d:15:df:65:47:f6:35:97:87:d6:2d:ac:65:f4:
4f:bf:f3:bc:8d:8c:ea:39:a4:93:5c:24:48:ac:70:
1f:c9:5f:22:ba:ba:ee:cc:3e:88:91:44:99:50:d9:
ac:cf:ba:a7:36:55:15:e8:03:07:de:97:f4:64:a0:
00:17:fb:8c:22:e0:78:f0:cb:b7:08:6e:7d:9f:e5:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:63:79:BF:D6:1C:6C:A3:63:21:B3:F0:0C:29:D5:D6:51:10:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bac50b-31b9-4ea7-8ecf-4b8ce75ef231/1/XN9jeb_WHGyjYyGz8Awp1dZREDE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.107.0/24
IPv6:
2a12:9100::/29
Signature Algorithm: sha256WithRSAEncryption
42:d1:35:63:0e:de:a3:31:00:d1:33:f3:aa:94:e3:b2:9d:f0:
31:9f:3a:c7:f9:9d:5a:da:55:15:0b:cb:10:df:f8:0d:6f:19:
41:8c:85:c7:92:1f:f3:a0:16:a3:44:bb:28:fc:43:1c:8a:06:
2c:78:30:4e:97:ac:ba:82:44:be:ce:8f:62:02:26:10:21:e4:
43:9f:87:33:59:7d:60:6f:f3:11:eb:98:d3:a1:20:25:ad:2d:
9e:0c:b0:38:75:05:95:0c:c4:84:13:b2:6d:ee:6f:25:21:ab:
a5:0c:fa:ce:07:66:8d:1a:62:ab:d5:62:98:09:83:bb:77:62:
f6:54:98:a9:0e:83:a7:8c:db:26:22:a0:b0:1b:7d:55:60:54:
fa:a5:14:a9:b0:41:96:e0:51:10:f6:d7:58:75:ac:50:14:97:
a0:5d:48:1c:5b:b2:89:ae:4a:86:2d:be:33:c0:7b:bc:f5:6b:
12:f7:b0:37:34:07:12:7e:10:b4:bb:aa:95:1b:80:55:94:87:
ab:09:f4:73:ac:85:87:25:cb:22:ce:ff:13:41:76:bf:68:b8:
76:a3:d4:cc:45:aa:94:86:ca:15:30:28:5a:f6:d4:67:80:32:
f1:64:c7:65:f9:48:8b:b9:c9:98:f9:d1:ca:93:5d:31:c7:b3:
23:fb:37:ca
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVrYzUtH02JQP/8QBNeX4wlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2RmNjM3OWJmZDYxYzZjYTM2MzIxYjNmMDBjMjlkNWQ2NTExMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18vWWO37+jmYo9sVQs7DmPdsOXpO
dmGtBGMv002w/hg/zuHsWVF+1cOBSBHw2aZ4APWqdJlZwhoieKSbOx4TntBsjvIg
7Z608/11OkktLKzhY7kZdiOpoKJQqpVyHaZgpCVkcVLGYJay9HgGrX9tfabRpV2O
vV7QIS2u3DJ8J1HlrkOS9jK36IeCkI0MGXV61a9sdQ3OSLaInaJC0MPo3+SPtQKF
+h6UPVxM2Kcl5vXpaBAlLRXfZUf2NZeH1i2sZfRPv/O8jYzqOaSTXCRIrHAfyV8i
urruzD6IkUSZUNmsz7qnNlUV6AMH3pf0ZKAAF/uMIuB48Mu3CG59n+VeSQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFzfY3m/1hxso2Mhs/AMKdXWURAxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2JhYzUw
Yi0zMWI5LTRlYTctOGVjZi00YjhjZTc1ZWYyMzEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvYmFjNTBi
LTMxYjktNGVhNy04ZWNmLTRiOGNlNzVlZjIzMS8xL1hOOWplYl9XSEd5all5R3o4
QXdwMWRaUkVERS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhNrMA0EAgACMAcDBQMqEpEAMA0GCSqGSIb3
DQEBCwUAA4IBAQBC0TVjDt6jMQDRM/OqlOOynfAxnzrH+Z1a2lUVC8sQ3/gNbxlB
jIXHkh/zoBajRLso/EMcigYseDBOl6y6gkS+zo9iAiYQIeRDn4czWX1gb/MR65jT
oSAlrS2eDLA4dQWVDMSEE7Jt7m8lIaulDPrOB2aNGmKr1WKYCYO7d2L2VJipDoOn
jNsmIqCwG31VYFT6pRSpsEGW4FEQ9tdYdaxQFJegXUgcW7KJrkqGLb4zwHu89WsS
97A3NAcSfhC0u6qVG4BVlIerCfRzrIWHJcsizv8TQXa/aLh2o9TMRaqUhsoVMCha
9tRngDLxZMdl+UiLucmY+dHKk10xx7Mj+zfK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:55 2024 by rpki-client on console-fra.rpki-client.org