Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cD1IZTtCt0ZHJokms8Skl_nveb0.cer
File: cD1IZTtCt0ZHJokms8Skl_nveb0.cer (raw, json)
Hash identifier: rrWOg+EMJd9p/lWevocUfyJ8HlFj/wk3u5jpZZAMgOc=
Subject key identifier: 70:3D:48:65:3B:42:B7:46:47:26:89:26:B3:C4:A4:97:F9:EF:79:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB026D7D8067F6F7B896B70E8B6EAA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/cD1IZTtCt0ZHJokms8Skl_nveb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.242.254.0/24
IP: 2a11:b4c0::/29
Validation: Failed, certificate revoked on Thu 26 Oct 2023 07:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:26:d7:d8:06:7f:6f:7b:89:6b:70:e8:b6:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=703d48653b42b74647268926b3c4a497f9ef79bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:47:2e:17:ff:86:2c:fd:1a:7a:ee:3b:c9:
34:04:b3:f3:24:62:59:f0:97:07:2d:fe:67:c7:40:
f9:7f:1d:1b:7b:56:a8:96:32:24:03:f2:d2:80:71:
b7:0f:1d:ab:57:2a:b1:da:c7:cf:bd:ef:ba:3a:de:
fd:af:b0:97:97:da:82:dd:d2:5e:24:ae:e3:53:98:
c3:7a:1c:e7:8b:c1:86:19:b5:f5:9c:bf:f2:c3:c1:
46:8c:b6:d9:e0:35:2e:4b:57:1c:e8:e4:8a:4b:82:
8d:ab:c8:ec:13:66:23:5c:14:7e:cf:cd:41:03:16:
ba:ae:cd:8a:00:58:aa:4b:da:fb:64:86:59:44:6e:
64:f8:e5:12:01:80:c8:87:b4:4e:75:2a:60:d7:72:
e1:74:58:7b:cf:90:69:0e:5f:a3:4b:db:f0:1c:5c:
50:b0:ff:53:e2:36:fb:36:f5:21:4d:29:2e:5e:36:
c1:fe:2c:6d:71:11:ba:0a:7e:11:32:2b:a8:63:97:
e8:91:3f:ce:41:0e:b2:44:14:b9:60:c5:8d:62:aa:
e9:b4:43:dd:24:8c:19:73:6e:6f:11:1f:4a:a0:66:
22:5a:9e:84:73:7e:87:9e:cc:f2:52:1d:37:07:a8:
2e:49:4c:c7:bd:15:eb:af:2d:27:f4:3f:04:a1:33:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:48:65:3B:42:B7:46:47:26:89:26:B3:C4:A4:97:F9:EF:79:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/cD1IZTtCt0ZHJokms8Skl_nveb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.254.0/24
IPv6:
2a11:b4c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:e0:00:fe:90:46:b2:63:1b:6c:9c:dc:a3:37:0e:b7:a3:40:
d8:07:3d:26:6c:23:52:c7:65:d9:3b:c5:dd:de:a3:8c:9b:c0:
78:b7:1a:03:26:06:9c:03:e8:a0:3c:84:1d:f9:7c:03:04:b6:
e6:d6:19:cb:53:b6:aa:f0:32:f6:90:e3:49:7b:8a:96:b8:89:
ca:44:62:0b:55:64:24:44:d2:70:44:72:a1:3e:2c:ea:e6:78:
73:d1:4f:e0:6d:d0:d6:70:9f:c9:71:ae:ab:54:70:10:b5:66:
d8:ba:ca:f0:82:e4:fd:4d:de:bb:7d:a7:66:eb:7e:aa:80:35:
24:c6:57:0b:83:73:ce:dc:be:38:8a:2f:f0:c8:2e:2d:b4:e3:
6a:df:6a:77:0a:85:de:85:2c:05:58:1f:61:a0:dd:20:ae:88:
f8:1e:a3:af:04:d7:61:5e:32:bd:e3:a0:9a:54:c4:57:eb:9d:
df:9c:bf:34:fc:49:02:65:b8:ff:5a:ba:1d:bc:d1:be:f8:ab:
a9:bd:93:92:d8:bd:24:78:ef:9f:ed:83:9e:2f:0b:1d:e7:f8:
0c:f0:93:b0:89:9d:e5:8f:45:f0:11:b8:bc:a0:4c:79:ac:41:
83:31:b6:07:96:27:c7:81:7f:80:5f:c2:9a:dc:e4:82:f9:5f:
ff:6d:9b:3b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvsCbX2AZ/b3uJa3DotuqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDNkNDg2NTNiNDJiNzQ2NDcyNjg5MjZiM2M0YTQ5N2Y5ZWY3OWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UxHLhf/hiz9GnruO8k0BLPzJGJZ
8JcHLf5nx0D5fx0be1aoljIkA/LSgHG3Dx2rVyqx2sfPve+6Ot79r7CXl9qC3dJe
JK7jU5jDehzni8GGGbX1nL/yw8FGjLbZ4DUuS1cc6OSKS4KNq8jsE2YjXBR+z81B
Axa6rs2KAFiqS9r7ZIZZRG5k+OUSAYDIh7ROdSpg13LhdFh7z5BpDl+jS9vwHFxQ
sP9T4jb7NvUhTSkuXjbB/ixtcRG6Cn4RMiuoY5fokT/OQQ6yRBS5YMWNYqrptEPd
JIwZc25vER9KoGYiWp6Ec36HnszyUh03B6guSUzHvRXrry0n9D8EoTPYyQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHA9SGU7QrdGRyaJJrPEpJf573m9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5LzdhNDA5
NC01ZTNlLTQwNGEtOTkwNi1lNzBlYTYzMzIzNjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvN2E0MDk0
LTVlM2UtNDA0YS05OTA2LWU3MGVhNjMzMjM2NS8xL2NEMUlaVHRDdDBaSEpva21z
OFNrbF9udmViMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW/L+MA0EAgACMAcDBQMqEbTAMA0GCSqGSIb3
DQEBCwUAA4IBAQA/4AD+kEayYxtsnNyjNw63o0DYBz0mbCNSx2XZO8Xd3qOMm8B4
txoDJgacA+igPIQd+XwDBLbm1hnLU7aq8DL2kONJe4qWuInKRGILVWQkRNJwRHKh
Pizq5nhz0U/gbdDWcJ/Jca6rVHAQtWbYusrwguT9Td67fadm636qgDUkxlcLg3PO
3L44ii/wyC4ttONq32p3CoXehSwFWB9hoN0groj4HqOvBNdhXjK946CaVMRX653f
nL80/EkCZbj/WrodvNG++KupvZOS2L0keO+f7YOeLwsd5/gM8JOwiZ3lj0XwEbi8
oEx5rEGDMbYHlifHgX+AX8Ka3OSC+V//bZs7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:50 2024 by rpki-client on console-fra.rpki-client.org