Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1axeVc8dX5FXVBHli3jAXaFQFU.cer
File: c1axeVc8dX5FXVBHli3jAXaFQFU.cer (raw, json)
Hash identifier: EyrshP5miPX9zAMDrFOteYLegSrsSy5ZDxayiOGosXA=
Subject key identifier: 73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187B1F6EFF2D6B63E18631DBE4635BC63A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 24 Apr 2023 06:32:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.164.175.0/24
IP: 2a07:3f00::/29
Validation: Failed, certificate revoked on Tue 12 Dec 2023 07:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:f6:ef:f2:d6:b6:3e:18:63:1d:be:46:35:bc:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 24 06:32:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7356b179573c757e455d5047962de30176854055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:ca:2c:a8:a8:77:d4:86:ec:4b:2f:44:ec:
38:39:11:fd:e0:31:1a:5a:21:57:f4:0e:47:22:11:
df:19:f9:bc:63:5f:b6:d7:9e:97:62:a7:2b:30:86:
9d:9f:c3:14:56:61:87:c6:44:2f:fb:f5:29:7c:46:
6a:70:b8:ab:90:ee:e9:0c:82:8a:a7:75:71:34:0e:
a0:81:ac:71:65:61:f6:79:61:50:13:b8:2d:af:63:
a8:5d:b6:d1:df:27:6a:a8:53:7c:1e:7a:d9:e6:e1:
d4:92:19:51:62:a1:53:6d:a9:dc:7c:91:c8:2f:42:
b3:04:81:cd:15:ab:a4:49:6c:7b:12:c3:66:21:d0:
e5:ec:c9:e1:3e:eb:d8:25:92:50:e5:f5:49:12:0a:
23:2d:9b:a1:5f:c3:c2:d3:91:80:83:6f:6d:db:00:
4c:b2:73:3e:d8:fd:d7:59:05:85:29:a0:95:0f:5c:
ad:d8:e2:25:c2:4a:76:32:6a:28:a6:40:da:67:3f:
88:73:15:34:86:d2:69:70:ef:b4:e6:d8:5a:da:37:
9f:d6:ce:d6:06:a6:d5:fd:0a:d9:7a:35:4d:d1:cb:
53:75:c1:36:00:38:2e:5c:eb:e5:11:aa:52:ce:28:
5e:52:ca:2c:8c:b9:0b:34:00:cc:0e:3d:67:7e:e7:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:56:B1:79:57:3C:75:7E:45:5D:50:47:96:2D:E3:01:76:85:40:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d780b6-10a4-4730-b3bc-ab80a98a0335/1/c1axeVc8dX5FXVBHli3jAXaFQFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.175.0/24
IPv6:
2a07:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
9b:29:55:14:16:5c:2d:da:91:63:72:7d:db:94:13:dd:78:68:
31:d6:7a:5d:96:0a:cb:16:b3:01:05:7c:4e:cb:39:4c:01:4d:
86:6b:47:8e:b9:c3:9c:77:33:91:66:3f:c8:49:e2:6e:09:34:
21:a2:05:0d:a4:a3:45:f3:7a:86:4b:84:dc:61:36:d9:e7:d3:
14:3c:83:93:15:7a:21:d6:39:94:32:f7:ac:3b:8e:af:54:31:
57:5e:c5:93:00:7d:81:2f:03:0a:13:21:64:b3:15:52:9d:c2:
ab:68:8f:f8:8d:c8:7a:74:fd:fe:d5:ad:1d:1b:ed:93:a1:26:
ff:a3:3d:15:0f:8b:96:18:fc:5a:44:1a:1d:5a:83:d6:87:48:
fb:7f:65:38:89:76:e3:20:31:38:1d:af:0f:ef:8b:d5:33:69:
59:d8:63:f2:f4:32:75:64:be:9c:77:ed:8d:b8:53:b9:99:1b:
9c:ba:e4:8c:d8:eb:d9:87:b2:f0:34:97:5d:f1:a7:36:2b:c9:
03:be:6c:bb:d3:19:c9:97:b1:a9:b0:a2:9a:f8:9b:5c:b6:1f:
89:cf:40:50:e5:72:a6:34:b4:96:b3:3f:bc:13:4b:84:dd:61:
79:fa:08:5d:73:1f:0e:e6:71:e6:ab:49:e8:26:b0:d0:9b:b6:
1c:e1:e8:ee
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYex9u/y1rY+GGMdvkY1vGOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDI0MDYzMjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzU2YjE3OTU3M2M3NTdlNDU1ZDUwNDc5NjJkZTMwMTc2ODU0MDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35rKLKiod9SG7EsvROw4ORH94DEa
WiFX9A5HIhHfGfm8Y1+2156XYqcrMIadn8MUVmGHxkQv+/UpfEZqcLirkO7pDIKK
p3VxNA6ggaxxZWH2eWFQE7gtr2OoXbbR3ydqqFN8HnrZ5uHUkhlRYqFTbancfJHI
L0KzBIHNFaukSWx7EsNmIdDl7MnhPuvYJZJQ5fVJEgojLZuhX8PC05GAg29t2wBM
snM+2P3XWQWFKaCVD1yt2OIlwkp2MmoopkDaZz+IcxU0htJpcO+05tha2jef1s7W
BqbV/QrZejVN0ctTdcE2ADguXOvlEapSziheUsosjLkLNADMDj1nfudohQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHNWsXlXPHV+RV1QR5Yt4wF2hUBVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2Q3ODBi
Ni0xMGE0LTQ3MzAtYjNiYy1hYjgwYTk4YTAzMzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZDc4MGI2
LTEwYTQtNDczMC1iM2JjLWFiODBhOThhMDMzNS8xL2MxYXhlVmM4ZFg1RlhWQkhs
aTNqQVhhRlFGVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuaSvMA0EAgACMAcDBQMqBz8AMA0GCSqGSIb3
DQEBCwUAA4IBAQCbKVUUFlwt2pFjcn3blBPdeGgx1npdlgrLFrMBBXxOyzlMAU2G
a0eOucOcdzORZj/ISeJuCTQhogUNpKNF83qGS4TcYTbZ59MUPIOTFXoh1jmUMves
O46vVDFXXsWTAH2BLwMKEyFksxVSncKraI/4jch6dP3+1a0dG+2ToSb/oz0VD4uW
GPxaRBodWoPWh0j7f2U4iXbjIDE4Ha8P74vVM2lZ2GPy9DJ1ZL6cd+2NuFO5mRuc
uuSM2OvZh7LwNJdd8ac2K8kDvmy70xnJl7GpsKKa+Jtcth+Jz0BQ5XKmNLSWsz+8
E0uE3WF5+ghdcx8O5nHmq0noJrDQm7Yc4eju
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:28 2024 by rpki-client on console-ams.rpki-client.org