Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
File: cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer (raw, json)
Hash identifier: XvxW1dScjzBhbE5poXRpNMrjP/xV4Au+gVpd4dhkzII=
Subject key identifier: 71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B8B2855CBE53A03575459BBB0318DE8F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Nov 2023 13:52:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.229.114.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:28:55:cb:e5:3a:03:57:54:59:bb:b0:31:8d:e8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 1 13:52:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:e9:c3:05:1f:ab:13:d8:6f:9f:a6:6e:31:
cf:d1:fa:13:39:b0:33:24:70:6f:21:e6:d2:f3:d8:
9f:86:9b:32:82:a7:95:ef:b0:f9:2b:0d:43:99:1e:
4d:49:49:15:8e:8b:e1:41:43:b7:8a:b4:b9:07:11:
85:2c:41:83:fd:9d:d4:9b:90:cc:01:00:b0:0b:ed:
3c:f7:b6:68:7e:d0:d0:27:11:da:47:e5:ee:18:0e:
ff:db:1c:f5:10:36:f9:5c:a7:0c:12:ca:51:74:e4:
33:7e:42:39:65:bc:5a:47:d8:0a:a8:f1:b6:16:df:
e7:85:78:f6:8e:41:67:b1:ca:ce:8d:a0:5c:fc:61:
80:de:80:e3:fa:53:e6:30:a1:50:e1:fb:64:43:20:
4f:64:68:fe:d0:3e:3e:fe:31:b9:de:43:01:14:45:
71:e7:d4:fa:f3:0f:6d:d0:3c:a5:84:bc:45:19:b5:
c6:ff:e6:94:cf:44:10:ac:0c:a3:b6:e1:64:4c:a2:
47:09:9c:0a:68:a1:4d:ed:18:09:48:f1:25:63:97:
c0:2b:fb:4c:a9:49:7b:87:e7:d7:93:30:2b:89:54:
6e:dc:58:93:86:de:7e:0c:6d:27:ad:8d:06:64:54:
60:bc:88:b6:51:8f:1c:6a:c4:2a:75:e6:61:f9:29:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.114.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c2:b1:4a:bd:39:31:96:09:8c:af:83:d3:f4:6c:88:0c:d0:
b3:ba:0f:b1:57:ee:36:31:af:3d:0f:3d:12:9c:d5:62:8b:a7:
c2:97:0c:da:62:91:e0:de:9f:00:f7:2b:37:81:b8:bf:79:95:
5e:48:97:90:c4:2b:ae:61:4a:a5:fc:c4:08:0a:23:59:ce:c2:
4c:82:64:c9:1a:80:02:73:8d:64:39:33:6b:19:e1:ab:ee:e3:
b6:e3:e8:c2:34:44:e6:7f:99:07:34:cf:b7:32:14:2d:78:3b:
32:a6:f7:01:9e:55:96:45:e3:e5:2f:bb:2f:e4:c8:71:82:14:
f3:27:4a:75:a3:7c:3a:12:44:2b:7c:cc:6c:b7:36:d8:0c:ea:
07:60:13:e8:19:94:9e:a1:5b:e3:38:c4:75:77:2f:0a:a8:50:
3f:99:5e:5e:68:c2:73:5c:91:a1:49:3e:bd:1d:68:a0:7c:44:
7e:9d:01:a6:ed:9d:8f:17:8a:ea:db:e8:eb:51:63:07:02:f6:
b1:e3:6f:d6:11:9c:1f:6d:94:1c:21:a9:f0:56:f6:68:1b:9c:
a7:aa:ed:3c:f9:0a:24:ec:ce:f2:be:9e:ad:d4:bd:82:a1:9a:
09:e1:20:74:ff:d2:de:e3:db:18:ce:ee:00:ac:81:ac:c6:1b:
7f:7c:57:1e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYuLKFXL5ToDV1RZu7AxjejyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMTAxMTM1MjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTVmYzMyYWM3NWI4YmY1YzYxNDJmYTVmM2ZiNTZjYjBmYTg1M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloXpwwUfqxPYb5+mbjHP0foTObAz
JHBvIebS89ifhpsygqeV77D5Kw1DmR5NSUkVjovhQUO3irS5BxGFLEGD/Z3Um5DM
AQCwC+0897ZoftDQJxHaR+XuGA7/2xz1EDb5XKcMEspRdOQzfkI5ZbxaR9gKqPG2
Ft/nhXj2jkFnscrOjaBc/GGA3oDj+lPmMKFQ4ftkQyBPZGj+0D4+/jG53kMBFEVx
59T68w9t0DylhLxFGbXG/+aUz0QQrAyjtuFkTKJHCZwKaKFN7RgJSPElY5fAK/tM
qUl7h+fXkzAriVRu3FiTht5+DG0nrY0GZFRgvIi2UY8casQqdeZh+SkbHwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHFfwyrHW4v1xhQvpfP7VssPqFPrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzhjNGUz
Yy0zNDBjLTQ1NTEtOWY1ZS1kZWNkZDg4ZDBlMmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvOGM0ZTNj
LTM0MGMtNDU1MS05ZjVlLWRlY2RkODhkMGUyZS8xL2NWX0RLc2RiaV9YR0ZDLWw4
X3RXeXctb1Utcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+VyMA0GCSqGSIb3DQEBCwUAA4IBAQB9wrFK
vTkxlgmMr4PT9GyIDNCzug+xV+42Ma89Dz0SnNVii6fClwzaYpHg3p8A9ys3gbi/
eZVeSJeQxCuuYUql/MQICiNZzsJMgmTJGoACc41kOTNrGeGr7uO24+jCNETmf5kH
NM+3MhQteDsypvcBnlWWRePlL7sv5MhxghTzJ0p1o3w6EkQrfMxstzbYDOoHYBPo
GZSeoVvjOMR1dy8KqFA/mV5eaMJzXJGhST69HWigfER+nQGm7Z2PF4rq2+jrUWMH
Avax42/WEZwfbZQcIanwVvZoG5ynqu08+Qok7M7yvp6t1L2CoZoJ4SB0/9Le49sY
zu4ArIGsxht/fFce
-----END CERTIFICATE-----
Generated at Tue Nov 21 12:31:58 2023 by rpki-client on console-ams.rpki-client.org