Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer
File: cvMzrKBkl1H_xcE0ZCisIcvN9QE.cer (raw, json)
Hash identifier: p6vk60xM2TOaAdMZsVPhLWwGU8v3RlCAmR7FKPqz43E=
Subject key identifier: 72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42471EC6865D649B3C9705CBE1E5A6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:29:32 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.108.131.0/24
IP: 2a12:4480::/29
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:71:ec:68:65:d6:49:b3:c9:70:5c:be:1e:5a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f333aca0649751ffc5c1346428ac21cbcdf501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:72:49:ce:da:78:6d:2d:cb:b1:ea:73:1b:
7a:6d:43:67:63:82:26:53:1d:30:6a:8a:7a:80:77:
32:b2:2e:a9:18:1e:c2:57:b3:87:e5:57:a6:2c:af:
0d:93:56:90:83:60:1a:a9:27:d3:cc:48:f3:ff:d6:
69:7a:12:5b:7d:57:f8:0a:5f:43:08:16:08:de:62:
74:82:e5:3b:78:30:d3:8e:0a:79:e3:aa:71:1c:f6:
65:ae:eb:9c:8d:37:ce:ef:10:fb:59:0c:1e:33:7b:
06:5e:df:c5:1c:6e:17:ab:e4:fd:a4:84:df:fe:f8:
e7:17:73:c0:0d:24:f8:20:a6:c7:62:a0:65:37:6a:
ab:cf:ff:f4:ba:c2:10:c1:81:1c:d0:a4:be:98:45:
61:c1:28:04:5f:73:65:ee:1e:d6:82:b2:22:af:92:
b2:c8:28:27:ea:7d:b0:55:57:43:1e:24:5e:f3:c8:
66:72:3d:04:21:15:24:f4:1f:72:fe:dc:b3:21:5d:
9c:2a:59:b3:ca:d8:f8:4d:24:43:a6:87:9b:d0:b7:
e0:bd:7c:8d:a0:f6:95:cc:a0:31:46:03:70:83:68:
78:24:59:1d:14:21:ce:85:80:8a:9e:7c:62:b6:c8:
28:f7:83:7d:56:4a:17:62:4a:79:f4:98:c5:df:df:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F3:33:AC:A0:64:97:51:FF:C5:C1:34:64:28:AC:21:CB:CD:F5:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5c92ef-141f-4c7f-9556-757c182291fb/1/cvMzrKBkl1H_xcE0ZCisIcvN9QE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.131.0/24
IPv6:
2a12:4480::/29
Signature Algorithm: sha256WithRSAEncryption
6c:3f:6e:d3:2d:d1:66:e6:a8:37:fc:11:f5:27:c8:c8:2c:2b:
17:8c:f3:56:b6:00:11:46:11:3b:74:59:c8:a3:c4:c2:57:d2:
da:04:05:83:a4:9a:87:f7:34:06:73:9b:0e:64:c1:43:1e:94:
a9:7e:13:31:69:dc:4d:15:5a:bc:38:9b:51:fe:9e:0e:28:c5:
5e:7f:b7:a5:1c:9b:9e:c3:bf:45:4d:88:57:a6:6d:30:0f:2d:
bb:20:a8:5b:b6:a3:a3:95:e2:51:86:d0:86:d4:70:3a:35:51:
45:57:a9:17:9f:48:c2:38:7f:85:e8:72:0f:4a:dc:a1:95:d8:
73:80:f9:b6:42:74:77:8a:90:1a:71:8e:6d:cb:fc:4c:d4:12:
d4:30:fd:6a:08:46:13:75:04:e6:13:4b:08:a1:ca:03:5c:43:
b4:67:83:2c:01:9e:dc:46:db:b6:05:8f:b5:ab:a8:f6:7e:d1:
bc:f9:04:43:1d:65:bd:99:ae:71:4a:3c:eb:8b:17:90:a3:2d:
f1:6d:fd:d0:a6:74:ad:b7:5c:a0:f3:ae:a6:93:7e:3d:22:67:
07:85:70:2e:80:c0:17:8f:cf:7a:b9:a4:ec:6f:b7:3d:a4:2e:
aa:88:e9:60:62:ab:f8:0d:26:84:d6:04:92:c6:7b:51:71:b0:
c7:68:43:01
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzEJHHsaGXWSbPJcFy+HlptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDgyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmYzMzNhY2EwNjQ5NzUxZmZjNWMxMzQ2NDI4YWMyMWNiY2RmNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaxySc7aeG0ty7Hqcxt6bUNnY4Im
Ux0waop6gHcysi6pGB7CV7OH5VemLK8Nk1aQg2AaqSfTzEjz/9ZpehJbfVf4Cl9D
CBYI3mJ0guU7eDDTjgp546pxHPZlruucjTfO7xD7WQweM3sGXt/FHG4Xq+T9pITf
/vjnF3PADST4IKbHYqBlN2qrz//0usIQwYEc0KS+mEVhwSgEX3Nl7h7WgrIir5Ky
yCgn6n2wVVdDHiRe88hmcj0EIRUk9B9y/tyzIV2cKlmzytj4TSRDpoeb0LfgvXyN
oPaVzKAxRgNwg2h4JFkdFCHOhYCKnnxitsgo94N9VkoXYkp59JjF399H4wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHLzM6ygZJdR/8XBNGQorCHLzfUBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QxLzVjOTJl
Zi0xNDFmLTRjN2YtOTU1Ni03NTdjMTgyMjkxZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvNWM5MmVm
LTE0MWYtNGM3Zi05NTU2LTc1N2MxODIyOTFmYi8xL2N2TXpyS0JrbDFIX3hjRTBa
Q2lzSWN2TjlRRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwWyDMA0EAgACMAcDBQMqEkSAMA0GCSqGSIb3
DQEBCwUAA4IBAQBsP27TLdFm5qg3/BH1J8jILCsXjPNWtgARRhE7dFnIo8TCV9La
BAWDpJqH9zQGc5sOZMFDHpSpfhMxadxNFVq8OJtR/p4OKMVef7elHJuew79FTYhX
pm0wDy27IKhbtqOjleJRhtCG1HA6NVFFV6kXn0jCOH+F6HIPStyhldhzgPm2QnR3
ipAacY5ty/xM1BLUMP1qCEYTdQTmE0sIocoDXEO0Z4MsAZ7cRtu2BY+1q6j2ftG8
+QRDHWW9ma5xSjzrixeQoy3xbf3QpnStt1yg866mk349ImcHhXAugMAXj896uaTs
b7c9pC6qiOlgYqv4DSaE1gSSxntRcbDHaEMB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:37 2024 by rpki-client on console-fra.rpki-client.org