Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dwcKmD_R9rXMVYYC-_GN75ILGvA.cer
File: dwcKmD_R9rXMVYYC-_GN75ILGvA.cer (raw, json)
Hash identifier: xMZjC9QCkmiSKqn88ezVczZ33qAeMWSNzVntJXL8yEc=
Subject key identifier: 77:07:0A:98:3F:D1:F6:B5:CC:55:86:02:FB:F1:8D:EF:92:0B:1A:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD119EA06F19E79BD29F1262A2AEDA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/dwcKmD_R9rXMVYYC-_GN75ILGvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.104.232.0/24
IP: 2a11:66c0::/29
Validation: Failed, certificate revoked on Thu 05 Oct 2023 10:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:19:ea:06:f1:9e:79:bd:29:f1:26:2a:2a:ed:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77070a983fd1f6b5cc558602fbf18def920b1af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:07:72:0d:fa:2e:d3:93:37:ea:ee:8c:23:
a1:8e:78:56:16:16:1e:50:94:42:4f:ab:8d:d8:13:
74:80:55:ec:fe:d6:f3:b8:92:35:d2:8f:f5:db:b5:
a2:74:f7:f7:fb:28:66:67:d3:2c:ab:cf:4e:8f:f1:
36:5d:c7:59:87:05:0a:18:92:f3:b9:54:19:69:3f:
ef:c7:08:23:e1:bb:d8:08:3b:c8:6a:c1:24:9c:76:
0c:0a:76:3a:ee:0b:0b:d3:7c:67:3f:93:0f:a3:3a:
0b:86:60:55:06:28:6d:79:ab:45:ab:7b:c1:d8:77:
66:4b:58:cc:c4:a3:cf:e3:42:63:e2:29:fd:65:b5:
75:33:79:0e:08:e3:e5:f1:29:55:1d:a2:e8:77:2a:
64:7c:49:e2:d8:55:f3:c2:40:70:31:53:5b:ac:ee:
3d:96:19:e9:17:e6:2f:ed:41:db:c2:02:05:40:5b:
71:58:90:51:1b:ce:12:79:8b:59:61:2b:07:f2:fd:
19:7c:8f:bf:2d:29:89:e4:99:28:b2:20:08:f7:40:
d4:fd:5a:5b:30:17:a1:e2:34:f6:27:8d:af:c4:c1:
68:54:69:26:fe:13:28:18:f1:6f:df:44:86:92:8e:
91:45:84:19:0f:ab:de:fe:3f:d6:92:a1:e4:55:ca:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:07:0A:98:3F:D1:F6:B5:CC:55:86:02:FB:F1:8D:EF:92:0B:1A:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/056800-d57a-48cc-8775-a6f327fd8d60/1/dwcKmD_R9rXMVYYC-_GN75ILGvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.232.0/24
IPv6:
2a11:66c0::/29
Signature Algorithm: sha256WithRSAEncryption
94:0d:dd:17:df:2b:58:44:de:cc:67:49:34:80:a7:4b:93:ea:
a5:5d:d5:11:af:5c:8c:a9:78:9e:8d:2f:86:f1:0f:fe:94:51:
e8:ec:31:d8:d1:6d:c1:9c:4b:22:55:ac:36:31:8d:29:3e:16:
3d:64:79:04:7a:29:2d:26:e3:0a:e4:48:58:ad:5b:89:18:8a:
06:ae:57:42:28:39:de:05:03:ce:af:55:38:3e:fa:46:e0:fe:
01:37:c6:ff:e1:77:e8:aa:50:c7:5c:7f:12:b1:b2:79:1b:f4:
d4:87:df:a4:d4:e1:bf:5a:b6:69:13:d6:7e:55:08:fa:33:8f:
3b:42:c8:32:66:62:77:cf:20:2c:82:f4:7f:8a:fd:9f:70:3f:
c2:37:1f:6b:d1:08:39:d9:46:4a:de:06:5e:89:cf:d4:7a:1f:
63:81:2f:d9:79:f9:29:cf:5e:59:54:9f:7c:db:c2:06:fc:e2:
be:c7:dc:fd:bb:9f:4b:a3:b4:67:d5:aa:8c:ee:a2:0a:f2:21:
b4:89:e6:93:3e:b2:38:20:f9:a3:9b:0e:3b:4a:3a:aa:13:a2:
89:78:3a:6e:a5:5c:51:d7:bf:70:b4:e8:a8:cc:d5:02:87:b4:
44:3b:00:3f:fb:b2:0b:69:86:09:75:e4:a7:ec:5e:7d:07:c5:
44:01:a5:25
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVr0RnqBvGeeb0p8SYqKu2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzA3MGE5ODNmZDFmNmI1Y2M1NTg2MDJmYmYxOGRlZjkyMGIxYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFUHcg36LtOTN+rujCOhjnhWFhYe
UJRCT6uN2BN0gFXs/tbzuJI10o/127WidPf3+yhmZ9Msq89Oj/E2XcdZhwUKGJLz
uVQZaT/vxwgj4bvYCDvIasEknHYMCnY67gsL03xnP5MPozoLhmBVBihteatFq3vB
2HdmS1jMxKPP40Jj4in9ZbV1M3kOCOPl8SlVHaLodypkfEni2FXzwkBwMVNbrO49
lhnpF+Yv7UHbwgIFQFtxWJBRG84SeYtZYSsH8v0ZfI+/LSmJ5JkosiAI90DU/Vpb
MBeh4jT2J42vxMFoVGkm/hMoGPFv30SGko6RRYQZD6ve/j/WkqHkVcrglwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHcHCpg/0fa1zFWGAvvxje+SCxrwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzA1Njgw
MC1kNTdhLTQ4Y2MtODc3NS1hNmYzMjdmZDhkNjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMDU2ODAw
LWQ1N2EtNDhjYy04Nzc1LWE2ZjMyN2ZkOGQ2MC8xL2R3Y0ttRF9SOXJYTVZZWUMt
X0dONzVJTEd2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwmjoMA0EAgACMAcDBQMqEWbAMA0GCSqGSIb3
DQEBCwUAA4IBAQCUDd0X3ytYRN7MZ0k0gKdLk+qlXdURr1yMqXiejS+G8Q/+lFHo
7DHY0W3BnEsiVaw2MY0pPhY9ZHkEeiktJuMK5EhYrVuJGIoGrldCKDneBQPOr1U4
PvpG4P4BN8b/4XfoqlDHXH8SsbJ5G/TUh9+k1OG/WrZpE9Z+VQj6M487QsgyZmJ3
zyAsgvR/iv2fcD/CNx9r0Qg52UZK3gZeic/Ueh9jgS/Zefkpz15ZVJ9828IG/OK+
x9z9u59Lo7Rn1aqM7qIK8iG0ieaTPrI4IPmjmw47SjqqE6KJeDpupVxR179wtOio
zNUCh7REOwA/+7ILaYYJdeSn7F59B8VEAaUl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:34 2024 by rpki-client on console-ams.rpki-client.org