Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cuNLwAhD5Dz3042UIBpjNjjijcA.cer
File: cuNLwAhD5Dz3042UIBpjNjjijcA.cer (raw, json)
Hash identifier: NqykHx/RSc/QB6ogmmPLDiln0SyYOOIDB4b2setMl1U=
Subject key identifier: 72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6771C68A9F93B066C6D326D9006AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:58 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.193.84.0/22
IP: 194.110.116.0/24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 14:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:77:1c:68:a9:f9:3b:06:6c:6d:32:6d:90:06:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72e34bc00843e43cf7d38d94201a633638e28dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:40:6c:8f:28:af:48:32:85:29:b8:03:3d:
f0:e5:d2:b3:4e:d6:e3:fd:d7:86:5d:25:be:08:84:
17:cb:fa:b4:78:75:ec:b9:49:2b:55:a5:9a:ad:88:
36:ee:15:07:a7:11:ce:2c:53:7d:6c:de:41:3c:82:
03:87:40:f4:44:d1:9d:c0:35:cd:1c:31:82:ec:af:
57:ea:d7:2d:f7:33:9e:66:f9:51:ec:25:72:0e:63:
25:8b:86:94:33:d2:74:8d:ea:a8:33:83:dd:2e:90:
db:08:b6:2c:a0:bc:7c:f3:17:e1:2b:00:d7:31:83:
d3:e0:d4:53:7e:21:99:bb:e5:ba:4c:11:76:1e:67:
1d:ce:b1:86:f5:65:f8:f3:40:f1:b0:f5:35:20:8a:
ea:f8:4a:18:68:a5:59:75:c2:da:4c:ce:5d:d7:3a:
28:63:db:81:a4:7a:50:a7:aa:a3:73:f6:3a:b3:cb:
cd:c2:b2:f9:61:fc:40:dc:5b:88:a5:15:25:a1:f9:
ce:be:4e:e8:1b:50:b5:eb:87:0b:a3:ad:6b:4d:b8:
33:73:95:be:1c:26:80:fa:ae:3c:6c:b4:bc:07:aa:
c0:47:86:5c:f4:2c:f6:a1:ea:04:08:d3:30:03:d3:
26:a5:1d:41:3f:b5:11:93:6d:e0:cf:59:fc:7a:5e:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:4B:C0:08:43:E4:3C:F7:D3:8D:94:20:1A:63:36:38:E2:8D:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/96958b-7ca0-488e-88d1-6a8c719ec5f4/1/cuNLwAhD5Dz3042UIBpjNjjijcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.84.0/22
194.110.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:74:2a:51:15:20:68:59:ca:8d:a0:7c:fa:40:c5:60:00:eb:
fc:fe:1e:67:b2:5f:a8:5b:90:15:c6:6c:aa:d4:b6:52:eb:69:
83:06:74:54:1a:cc:2b:79:72:c6:ec:0c:58:b6:e1:26:95:ab:
84:db:20:e5:d5:57:71:bc:a2:b4:29:fc:2c:c8:cf:be:31:8b:
24:17:32:9a:39:f1:cf:d5:e3:67:79:98:ad:52:f3:61:3b:c6:
5a:8e:99:5d:c9:d9:0d:4c:13:e3:57:07:94:fd:11:93:cf:89:
7c:df:4b:8e:cf:19:0a:0a:8d:74:ce:21:e6:25:f9:eb:0a:c6:
88:a6:fd:5b:d3:7d:d4:98:11:9f:a8:ea:cb:26:0a:cc:55:a7:
6d:90:8e:c0:59:dc:25:30:97:ce:a4:78:32:da:ed:54:c0:a0:
f6:39:8c:00:13:3b:89:28:dd:d0:28:31:af:bb:3d:5b:49:70:
9e:de:b2:b2:00:68:79:f2:97:43:b4:af:e4:73:92:eb:4d:ba:
22:1d:c5:d3:01:14:f9:4b:a4:4a:20:75:16:c0:c1:0e:fa:9a:
bf:83:55:f2:aa:57:93:c0:3d:9f:ea:6b:27:df:85:be:c3:3e:
40:aa:56:92:43:be:87:f2:d1:e4:d6:0d:72:5d:46:a9:b3:bf:
2e:7d:19:12
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYVx1nccaKn5OwZsbTJtkAatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmUzNGJjMDA4NDNlNDNjZjdkMzhkOTQyMDFhNjMzNjM4ZTI4ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz9AbI8or0gyhSm4Az3w5dKzTtbj
/deGXSW+CIQXy/q0eHXsuUkrVaWarYg27hUHpxHOLFN9bN5BPIIDh0D0RNGdwDXN
HDGC7K9X6tct9zOeZvlR7CVyDmMli4aUM9J0jeqoM4PdLpDbCLYsoLx88xfhKwDX
MYPT4NRTfiGZu+W6TBF2HmcdzrGG9WX480DxsPU1IIrq+EoYaKVZdcLaTM5d1zoo
Y9uBpHpQp6qjc/Y6s8vNwrL5YfxA3FuIpRUlofnOvk7oG1C164cLo61rTbgzc5W+
HCaA+q48bLS8B6rAR4Zc9Cz2oeoECNMwA9MmpR1BP7URk23gz1n8el5MWQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFHLjS8AIQ+Q899ONlCAaYzY44o3AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzk2OTU4
Yi03Y2EwLTQ4OGUtODhkMS02YThjNzE5ZWM1ZjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvOTY5NThi
LTdjYTAtNDg4ZS04OGQxLTZhOGM3MTllYzVmNC8xL2N1Tkx3QWhENUR6MzA0MlVJ
QnBqTmpqaWpjQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCW8FUAwQAwm50MA0GCSqGSIb3DQEBCwUAA4IB
AQCgdCpRFSBoWcqNoHz6QMVgAOv8/h5nsl+oW5AVxmyq1LZS62mDBnRUGswreXLG
7AxYtuEmlauE2yDl1VdxvKK0KfwsyM++MYskFzKaOfHP1eNneZitUvNhO8Zajpld
ydkNTBPjVweU/RGTz4l830uOzxkKCo10ziHmJfnrCsaIpv1b033UmBGfqOrLJgrM
VadtkI7AWdwlMJfOpHgy2u1UwKD2OYwAEzuJKN3QKDGvuz1bSXCe3rKyAGh58pdD
tK/kc5LrTboiHcXTART5S6RKIHUWwMEO+pq/g1XyqleTwD2f6msn34W+wz5AqlaS
Q76H8tHk1g1yXUaps78ufRkS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:37 2024 by rpki-client on console-fra.rpki-client.org