Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eX8qOYyhyA1u-CT4R2beC5hT52k.cer
File: eX8qOYyhyA1u-CT4R2beC5hT52k.cer (raw, json)
Hash identifier: /VBaAWxsmQzuZKez0RKsZ6VpF0EXlXZUlWVtx6L6wwY=
Subject key identifier: 79:7F:2A:39:8C:A1:C8:0D:6E:F8:24:F8:47:66:DE:0B:98:53:E7:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF539752F3CE10F5C6933ABEE57F293
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/eX8qOYyhyA1u-CT4R2beC5hT52k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.71.152.0/24
IP: 2a11:3dc0::/29
Validation: Failed, certificate revoked on Mon 09 Oct 2023 13:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:39:75:2f:3c:e1:0f:5c:69:33:ab:ee:57:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=797f2a398ca1c80d6ef824f84766de0b9853e769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:93:76:27:aa:de:8d:15:5b:aa:e7:8b:7a:
a0:45:c1:86:c3:db:29:c3:0a:cc:9b:ee:e6:c6:fe:
58:b0:ef:4b:0e:e8:74:74:e6:1e:bc:21:4b:66:22:
cd:40:3d:1f:e1:2e:a9:3e:0e:2f:7b:46:47:fc:11:
b9:2c:c4:69:a5:45:f5:84:34:30:0f:ec:90:23:c8:
6b:ca:32:be:55:0f:e0:ec:be:ad:dc:1b:5b:0c:ea:
35:e7:7b:d0:cf:fb:6e:a4:8c:9e:32:d3:87:06:19:
45:11:43:db:ee:c9:a6:8f:35:d4:c9:87:7c:41:4a:
0b:86:84:fa:ec:d3:41:ee:23:60:75:eb:04:1f:9d:
0c:13:4b:12:8d:36:61:36:56:06:81:23:d9:ea:0a:
00:a6:d5:ad:7f:f4:d8:c2:90:90:90:9c:c7:78:4d:
f8:2d:5e:85:9f:45:9b:30:1a:29:10:2e:fd:fc:e0:
e8:c7:a2:9c:75:63:0a:4e:16:da:50:51:a9:f6:cd:
e5:d6:31:bd:d6:b5:7f:e6:c9:39:a3:00:dd:23:d3:
49:82:9e:67:b6:a0:f2:45:fb:e6:41:66:f6:1b:4f:
2f:50:55:67:cc:54:05:c8:ac:53:34:3f:8f:1b:77:
91:ac:1d:df:6e:b1:7d:e6:30:37:df:39:69:12:d2:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7F:2A:39:8C:A1:C8:0D:6E:F8:24:F8:47:66:DE:0B:98:53:E7:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5cbd23-4436-4214-b582-4467463cb02b/1/eX8qOYyhyA1u-CT4R2beC5hT52k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.152.0/24
IPv6:
2a11:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
67:72:bf:e6:01:8e:0c:2c:9c:d4:37:85:b4:40:71:bd:75:46:
92:6a:21:2a:b4:a5:49:4c:14:32:ad:25:8c:3a:78:1f:e8:b3:
46:3b:1a:b5:94:93:2e:e8:53:03:39:cc:c7:e2:23:c4:15:57:
b3:be:12:ed:cf:a0:d2:a3:80:98:0e:96:7c:c0:5b:44:d6:c0:
80:c3:3c:78:32:5e:a6:6e:8b:2c:12:6b:c2:d3:8a:b0:c4:43:
f9:de:fe:a9:62:66:27:99:c5:e3:78:a3:61:e0:b8:63:f6:c3:
bc:ad:9f:36:dc:ce:4d:13:81:d8:8f:87:5f:51:40:f9:36:0f:
85:70:3f:7e:e0:1b:ee:34:a4:05:46:50:dc:17:6d:4a:a7:db:
e5:72:27:ed:63:f1:f4:d6:91:a8:62:36:a7:0b:17:ce:7f:c2:
85:96:a1:52:a2:cd:e9:36:f5:e2:7c:6a:61:03:ee:62:0d:3d:
aa:8f:48:0d:40:c7:1f:34:77:2a:90:4d:42:ec:a9:5f:45:84:
0e:99:01:26:a2:6b:aa:a6:53:33:e8:79:37:29:bb:4a:02:cf:
9b:69:1f:fc:87:be:16:5b:88:c3:cb:1e:80:89:fc:01:ea:56:
f2:01:ab:3f:25:4c:0e:44:c9:91:aa:65:b8:5f:b3:51:5c:63:
2b:bc:ce:b4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9Tl1LzzhD1xpM6vuV/KTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMjE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTdmMmEzOThjYTFjODBkNmVmODI0Zjg0NzY2ZGUwYjk4NTNlNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RSTdieq3o0VW6rni3qgRcGGw9sp
wwrMm+7mxv5YsO9LDuh0dOYevCFLZiLNQD0f4S6pPg4ve0ZH/BG5LMRppUX1hDQw
D+yQI8hryjK+VQ/g7L6t3BtbDOo153vQz/tupIyeMtOHBhlFEUPb7smmjzXUyYd8
QUoLhoT67NNB7iNgdesEH50ME0sSjTZhNlYGgSPZ6goAptWtf/TYwpCQkJzHeE34
LV6Fn0WbMBopEC79/ODox6KcdWMKThbaUFGp9s3l1jG91rV/5sk5owDdI9NJgp5n
tqDyRfvmQWb2G08vUFVnzFQFyKxTND+PG3eRrB3fbrF95jA33zlpEtLctQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHl/KjmMocgNbvgk+Edm3guYU+dpMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzVjYmQy
My00NDM2LTQyMTQtYjU4Mi00NDY3NDYzY2IwMmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNWNiZDIz
LTQ0MzYtNDIxNC1iNTgyLTQ0Njc0NjNjYjAyYi8xL2VYOHFPWXloeUExdS1DVDRS
MmJlQzVoVDUyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUEeYMA0EAgACMAcDBQMqET3AMA0GCSqGSIb3
DQEBCwUAA4IBAQBncr/mAY4MLJzUN4W0QHG9dUaSaiEqtKVJTBQyrSWMOngf6LNG
Oxq1lJMu6FMDOczH4iPEFVezvhLtz6DSo4CYDpZ8wFtE1sCAwzx4Ml6mbossEmvC
04qwxEP53v6pYmYnmcXjeKNh4Lhj9sO8rZ823M5NE4HYj4dfUUD5Ng+FcD9+4Bvu
NKQFRlDcF21Kp9vlciftY/H01pGoYjanCxfOf8KFlqFSos3pNvXifGphA+5iDT2q
j0gNQMcfNHcqkE1C7KlfRYQOmQEmomuqplMz6Hk3KbtKAs+baR/8h74WW4jDyx6A
ifwB6lbyAas/JUwORMmRqmW4X7NRXGMrvM60
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:38 2024 by rpki-client on console-ams.rpki-client.org