Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
File: _l70sPJo0ewkzPVCtIEdMHrvADQ.cer (raw, json)
Hash identifier: ZwKZffFHmQ6DmiOCqylUOXlNQiPsZLyXo0uHgUIuO60=
Subject key identifier: FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857245697535D234194EAEA1E2E89EE24E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:37:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.8.0/24
IP: 2a11:e3c0::/29
Validation: Failed, certificate revoked on Fri 27 Oct 2023 14:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:69:75:35:d2:34:19:4e:ae:a1:e2:e8:9e:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:f6:80:93:17:89:e7:9c:75:70:7b:d6:2a:
eb:56:fd:0c:a6:d5:ec:fe:7b:1d:8f:f8:e3:75:86:
7a:0d:61:d8:df:c4:4d:7a:a0:67:7e:1e:f5:f2:73:
1d:e1:31:99:86:30:38:ad:ad:4c:6a:27:f6:2a:e4:
a6:e0:3e:a9:a5:2f:dc:39:81:e5:38:57:cd:c8:d2:
bd:e7:2d:d3:f7:e1:3e:55:28:6d:57:0a:a0:8c:88:
00:11:3f:61:dc:a5:87:fa:fc:cb:32:16:85:07:a6:
d4:0f:9f:9f:41:be:e8:74:dc:6f:4e:b0:1f:f1:21:
da:8f:b7:2f:06:ed:92:6f:43:64:ab:4b:7a:7c:d4:
ec:7a:79:e4:0e:4e:af:a5:28:5c:59:08:db:67:c9:
5d:3e:38:a7:64:25:b9:0d:16:be:e8:a8:09:6d:7c:
d4:d3:ab:db:48:e3:54:06:d8:4f:6d:25:18:8d:fb:
4a:43:49:63:0d:e7:18:fb:aa:cb:4d:b5:8f:b6:7c:
3e:f7:04:57:d9:28:a1:96:71:00:2a:df:d2:a2:c5:
dd:93:e1:20:1a:b2:b3:43:a7:fd:9e:06:0f:df:65:
c3:fa:3e:40:c7:39:9f:bf:de:ba:78:0c:ec:c1:16:
e2:00:7a:15:89:6c:1f:f8:57:86:3f:d4:91:12:5d:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.8.0/24
IPv6:
2a11:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
90:02:11:16:60:28:26:76:d1:08:1b:97:f9:0e:29:38:83:a6:
7a:34:26:5f:fd:10:89:77:26:30:3e:85:78:2a:14:1f:b0:1f:
29:74:19:69:1f:f4:44:0f:3e:49:4a:b0:e3:a5:a5:cd:cc:45:
23:b6:02:51:7b:e0:57:b9:de:02:db:43:83:21:20:27:22:ae:
9b:8d:15:c5:d7:e6:38:22:92:f2:dd:e0:d5:c6:07:3a:4a:6f:
aa:9b:1a:50:ea:ed:be:0a:55:eb:e1:eb:12:0d:d2:c5:c7:f2:
88:4d:8f:f5:98:9a:cd:8c:ec:5a:ea:0b:76:e3:58:94:ba:04:
e4:84:6f:83:39:80:6b:91:7a:2c:cc:6b:70:18:c9:62:c2:98:
4f:ca:f9:d1:ca:5a:89:46:18:96:d3:80:d5:d8:9d:00:e9:3a:
f7:6c:50:9d:93:bb:57:22:fa:bf:ab:ec:12:c1:23:11:f7:bd:
c4:cc:12:f2:8f:0d:08:b7:cf:9a:6a:9c:f9:9c:df:4d:bb:fb:
b2:5a:b1:55:78:8c:56:1a:10:e0:59:f0:9d:ee:52:22:c4:cb:
63:cd:e1:60:5c:01:00:1e:90:95:fa:d3:b1:be:2e:f2:9e:bb:
15:a5:cf:2a:d3:67:04:25:9d:4b:98:9c:58:da:7e:30:a0:7f:
6f:ef:b7:22
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVyRWl1NdI0GU6uoeLonuJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMTEzNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTVlZjRiMGYyNjhkMWVjMjRjY2Y1NDJiNDgxMWQzMDdhZWYwMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2b2gJMXieecdXB71irrVv0MptXs
/nsdj/jjdYZ6DWHY38RNeqBnfh718nMd4TGZhjA4ra1Maif2KuSm4D6ppS/cOYHl
OFfNyNK95y3T9+E+VShtVwqgjIgAET9h3KWH+vzLMhaFB6bUD5+fQb7odNxvTrAf
8SHaj7cvBu2Sb0Nkq0t6fNTsennkDk6vpShcWQjbZ8ldPjinZCW5DRa+6KgJbXzU
06vbSONUBthPbSUYjftKQ0ljDecY+6rLTbWPtnw+9wRX2SihlnEAKt/SosXdk+Eg
GrKzQ6f9ngYP32XD+j5Axzmfv966eAzswRbiAHoViWwf+FeGP9SREl3ppwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFP5e9LDyaNHsJMz1QrSBHTB67wA0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhLzkwMjY5
Zi00NmI0LTRlMDMtOWI2MS1iZDlmNDQ0YTBkNzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvOTAyNjlm
LTQ2YjQtNGUwMy05YjYxLWJkOWY0NDRhMGQ3MC8xL19sNzBzUEpvMGV3a3pQVkN0
SUVkTUhydkFEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQIMA0EAgACMAcDBQMqEePAMA0GCSqGSIb3
DQEBCwUAA4IBAQCQAhEWYCgmdtEIG5f5Dik4g6Z6NCZf/RCJdyYwPoV4KhQfsB8p
dBlpH/REDz5JSrDjpaXNzEUjtgJRe+BXud4C20ODISAnIq6bjRXF1+Y4IpLy3eDV
xgc6Sm+qmxpQ6u2+ClXr4esSDdLFx/KITY/1mJrNjOxa6gt241iUugTkhG+DOYBr
kXoszGtwGMliwphPyvnRylqJRhiW04DV2J0A6Tr3bFCdk7tXIvq/q+wSwSMR973E
zBLyjw0It8+aapz5nN9Nu/uyWrFVeIxWGhDgWfCd7lIixMtjzeFgXAEAHpCV+tOx
vi7ynrsVpc8q02cEJZ1LmJxY2n4woH9v77ci
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:42 2024 by rpki-client on console-fra.rpki-client.org