Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer
File: fdK4oZYDROH2C7HrQDizNWK46hw.cer (raw, json)
Hash identifier: 8rgAMuwKd9JOR21rMY15+C41VtYkWSU37RyxXibBkw8=
Subject key identifier: 7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857089259048C6CB5137CCEA529457507C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:31:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 199652
AS: 200902
IP: 185.6.4.0/22
IP: 185.91.228.0/22
IP: 185.249.24.0/22
IP: 2a02:5bc0::/32
IP: 2a05:ee40::/29
IP: 2a0d:e780::/29
Validation: Failed, certificate revoked on Wed 04 Oct 2023 08:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:89:25:90:48:c6:cb:51:37:cc:ea:52:94:57:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:35:d2:ac:7d:47:df:f8:94:da:ae:ca:a4:
d6:8a:60:71:b3:9d:31:e9:d3:a7:ab:60:ed:8e:36:
72:10:a6:94:60:b9:da:0a:a2:66:c2:85:98:bd:36:
bf:f8:ab:73:6d:ba:24:e7:de:a8:1a:4a:6f:e5:f9:
7a:71:5b:4f:83:bd:5d:4d:58:93:0e:04:8e:1b:2f:
29:19:fd:61:04:27:46:3a:3c:a2:5e:d8:7c:d9:5e:
32:bd:3c:25:fc:2c:9d:3b:9c:b8:4a:d0:74:0e:34:
50:1d:d3:b3:d9:dd:83:06:d7:41:1c:40:86:76:ec:
e9:b7:40:f8:a6:a3:31:47:fd:d1:78:d6:81:24:93:
f8:10:bd:d7:57:17:02:5d:0b:02:9a:6d:03:20:b8:
d3:6e:ba:68:fb:69:68:45:64:4b:99:b3:d4:55:0b:
3a:16:78:00:03:20:86:88:ba:1e:5e:7a:ba:e8:e8:
60:8f:92:32:3f:f4:ea:f1:0d:29:9b:df:0f:9d:57:
d2:78:70:fa:a7:82:c6:a1:99:f6:ac:74:3d:91:a3:
26:91:97:9d:b8:f7:44:0c:f2:a1:cf:38:c6:f2:65:
d8:8a:84:35:4c:e1:b0:a6:b9:ec:42:69:1d:1a:32:
a7:2e:c3:4f:c2:19:58:62:b3:59:c3:3d:4f:84:6c:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.4.0/22
185.91.228.0/22
185.249.24.0/22
IPv6:
2a02:5bc0::/32
2a05:ee40::/29
2a0d:e780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199652
200902
Signature Algorithm: sha256WithRSAEncryption
27:de:ed:d4:26:f6:b8:bb:9d:8b:f8:49:49:e3:c7:35:2c:29:
38:1d:6d:c2:ca:d0:fa:ee:13:57:7a:bd:0e:fa:dc:3b:94:63:
25:9f:a2:94:c7:9c:2b:39:66:5e:19:c3:3f:67:e5:11:13:97:
a4:33:f8:4e:cd:8f:e8:02:28:db:3a:a7:62:9b:91:57:a6:9d:
dc:e4:78:8f:0a:64:3d:64:34:4d:e4:97:93:a8:ff:f7:06:71:
a4:df:e8:0e:0c:bd:4a:26:09:ef:32:f4:33:8e:74:47:96:17:
61:0a:6e:c3:ad:f6:84:97:36:53:43:2f:90:c9:39:12:fe:5f:
4a:54:1d:52:7b:8a:d5:85:c9:76:47:67:58:97:23:39:1f:2b:
73:47:5c:45:67:5a:8f:63:d2:26:19:1b:04:03:57:1a:5d:ee:
3a:ca:60:af:7d:3d:50:39:59:13:98:df:7e:3d:7e:fe:98:34:
30:55:1a:7c:be:cc:1b:a4:fa:c3:d2:7e:96:68:09:d8:a0:ad:
85:48:5b:73:bd:a4:8d:82:68:0d:c9:d5:95:7c:c4:af:8b:42:
42:f6:4c:df:da:67:aa:59:74:30:b4:28:64:cf:3b:c7:2f:50:
b1:d6:bf:61:91:87:48:56:12:99:f0:b7:0a:d4:21:2a:be:6a:
d3:7e:3e:7f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgISAYVwiSWQSMbLUTfM6lKUV1B8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDMzMTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGQyYjhhMTk2MDM0NGUxZjYwYmIxZWI0MDM4YjMzNTYyYjhlYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqs10qx9R9/4lNquyqTWimBxs50x
6dOnq2DtjjZyEKaUYLnaCqJmwoWYvTa/+Ktzbbok596oGkpv5fl6cVtPg71dTViT
DgSOGy8pGf1hBCdGOjyiXth82V4yvTwl/CydO5y4StB0DjRQHdOz2d2DBtdBHECG
duzpt0D4pqMxR/3ReNaBJJP4EL3XVxcCXQsCmm0DILjTbrpo+2loRWRLmbPUVQs6
FngAAyCGiLoeXnq66Ohgj5IyP/Tq8Q0pm98PnVfSeHD6p4LGoZn2rHQ9kaMmkZed
uPdEDPKhzzjG8mXYioQ1TOGwprnsQmkdGjKnLsNPwhlYYrNZwz1PhGy2vQIDAQAB
o4ICzjCCAsowHQYDVR0OBBYEFH3SuKGWA0Th9gux60A4szViuOocMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzkwMWM0
OC0wZjM2LTRmOGQtOWJhZC0yNzQ0OTllMWJjMGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvOTAxYzQ4
LTBmMzYtNGY4ZC05YmFkLTI3NDQ5OWUxYmMwYi8xL2ZkSzRvWllEUk9IMkM3SHJR
RGl6TldLNDZody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAYBAIAATASAwQCuQYEAwQCuVvkAwQCufkYMBsEAgACMBUDBQAq
AlvAAwUDKgXuQAMFAyoN54AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAwvkAgMD
EMYwDQYJKoZIhvcNAQELBQADggEBACfe7dQm9ri7nYv4SUnjxzUsKTgdbcLK0Pru
E1d6vQ763DuUYyWfopTHnCs5Zl4Zwz9n5RETl6Qz+E7Nj+gCKNs6p2KbkVemndzk
eI8KZD1kNE3kl5Oo//cGcaTf6A4MvUomCe8y9DOOdEeWF2EKbsOt9oSXNlNDL5DJ
ORL+X0pUHVJ7itWFyXZHZ1iXIzkfK3NHXEVnWo9j0iYZGwQDVxpd7jrKYK99PVA5
WROY3349fv6YNDBVGny+zBuk+sPSfpZoCdigrYVIW3O9pI2CaA3J1ZV8xK+LQkL2
TN/aZ6pZdDC0KGTPO8cvULHWv2GRh0hWEpnwtwrUISq+atN+Pn8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org