Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer
File: dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer (raw, json)
Hash identifier: stJWKFK/bit/FHS8Iw/D+pCL1LJsBbD0B7J0MrVImyc=
Subject key identifier: 75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFABE1745632ADC9BEC863EE83BECDE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.111.0/24
IP: 2a12:f000::/29
Validation: Failed, certificate revoked on Mon 13 Nov 2023 10:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:be:17:45:63:2a:dc:9b:ec:86:3e:e8:3b:ec:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7565008df899598c7a2c0f98b70f234bf6178011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ad:e8:f7:1c:44:9d:51:93:df:31:4e:33:49:
a8:c4:03:c7:f8:dc:38:9d:86:9c:4a:b4:af:07:75:
b0:ef:bd:2f:77:de:2a:9c:e8:a6:06:38:1c:b4:4c:
0a:2a:2c:7f:e8:7f:ba:bf:7b:62:d4:3d:91:29:52:
9a:54:e3:fc:3f:4f:ee:6a:4d:22:de:c1:51:e0:20:
67:2a:30:47:9f:b7:f4:93:dc:f6:ab:94:5c:65:1d:
41:db:29:fc:b4:28:0e:57:7c:52:30:75:d1:fb:e0:
b0:81:be:de:ca:d3:a2:fe:02:62:3b:dd:75:25:5f:
62:68:58:30:5d:dd:a6:57:5f:cf:2f:ca:51:72:7a:
6e:e5:e6:09:f2:63:f9:bf:e8:73:9e:57:14:a7:51:
83:5b:1a:f1:d0:62:cc:78:5c:23:e1:d1:5c:b3:12:
fd:5e:78:18:23:4e:11:e4:14:3a:95:6e:4c:d4:7c:
87:80:c6:7d:23:c1:0e:77:b5:ba:bb:2e:49:67:24:
64:55:15:15:19:ec:87:01:76:77:42:43:38:39:bc:
a4:2f:39:d7:e0:1d:f8:73:ea:e2:17:93:f7:0a:c0:
a6:59:02:ab:e8:1d:d3:d1:fc:5e:00:b7:d1:d2:59:
f9:c1:8c:cb:15:0c:60:58:33:ba:78:f3:e5:4c:ab:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.111.0/24
IPv6:
2a12:f000::/29
Signature Algorithm: sha256WithRSAEncryption
a7:c9:52:9b:63:41:54:b2:fe:06:00:98:01:12:06:3a:15:d0:
70:8d:6b:b4:95:0f:25:26:0f:d4:28:a7:4a:05:d2:df:ce:aa:
d8:36:4d:7f:36:82:33:d6:98:e1:61:e3:20:56:fd:14:26:3d:
bd:d7:b6:d8:c7:7c:a7:bd:84:b6:02:25:59:51:46:63:41:be:
e1:7b:47:cd:e6:21:54:08:ca:2d:e7:50:ce:f4:fb:cb:f1:65:
d1:43:78:24:3f:5e:ee:e4:8f:ec:a1:8c:43:71:ac:aa:2c:28:
b4:bd:3a:97:c0:d6:99:b8:78:ca:2d:b3:ed:ac:07:4f:f2:d8:
e5:40:7f:8f:17:87:9d:62:a4:c7:a1:73:17:84:ad:72:93:70:
ef:b6:07:58:b7:7e:78:44:60:68:ab:2a:31:38:af:25:03:0a:
c1:f9:be:fe:46:6f:b7:21:5f:80:b3:11:2a:de:ef:4b:61:ec:
7b:02:34:8a:11:ab:36:4a:ab:4c:43:29:93:fc:8d:af:b1:03:
06:53:70:bd:57:ec:fc:41:8d:a6:a7:35:74:f5:16:1a:f5:a2:
b1:ed:e8:34:7d:61:49:05:d5:93:a3:64:44:48:83:3c:4e:80:
d9:20:33:91:03:b0:12:9b:f3:e7:61:dd:17:11:5e:3c:18:74:
61:df:2b:d0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu+r4XRWMq3Jvshj7oO+zeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNjQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTY1MDA4ZGY4OTk1OThjN2EyYzBmOThiNzBmMjM0YmY2MTc4MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a3o9xxEnVGT3zFOM0moxAPH+Nw4
nYacSrSvB3Ww770vd94qnOimBjgctEwKKix/6H+6v3ti1D2RKVKaVOP8P0/uak0i
3sFR4CBnKjBHn7f0k9z2q5RcZR1B2yn8tCgOV3xSMHXR++Cwgb7eytOi/gJiO911
JV9iaFgwXd2mV1/PL8pRcnpu5eYJ8mP5v+hznlcUp1GDWxrx0GLMeFwj4dFcsxL9
XngYI04R5BQ6lW5M1HyHgMZ9I8EOd7W6uy5JZyRkVRUVGeyHAXZ3QkM4ObykLznX
4B34c+riF5P3CsCmWQKr6B3T0fxeALfR0ln5wYzLFQxgWDO6ePPlTKsxdQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHVlAI34mVmMeiwPmLcPI0v2F4ARMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzJlMjU4
Ny1kMjI1LTQ5ZDItYTU2My0zMThlMDBjNmQzZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMmUyNTg3
LWQyMjUtNDlkMi1hNTYzLTMxOGUwMGM2ZDNkMC8xL2RXVUFqZmlaV1l4NkxBLVl0
dzhqU19ZWGdCRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsH5vMA0EAgACMAcDBQMqEvAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCnyVKbY0FUsv4GAJgBEgY6FdBwjWu0lQ8lJg/UKKdKBdLfzqrY
Nk1/NoIz1pjhYeMgVv0UJj2917bYx3ynvYS2AiVZUUZjQb7he0fN5iFUCMot51DO
9PvL8WXRQ3gkP17u5I/soYxDcayqLCi0vTqXwNaZuHjKLbPtrAdP8tjlQH+PF4ed
YqTHoXMXhK1yk3DvtgdYt354RGBoqyoxOK8lAwrB+b7+Rm+3IV+AsxEq3u9LYex7
AjSKEas2SqtMQymT/I2vsQMGU3C9V+z8QY2mpzV09RYa9aKx7eg0fWFJBdWTo2RE
SIM8ToDZIDORA7ASm/PnYd0XEV48GHRh3yvQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:21 2024 by rpki-client on console-ams.rpki-client.org