Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
File: gWAcIhOLVxnEAn7ude90Z5zmjKk.cer (raw, json)
Hash identifier: e/VxR90SPMI3KlpC0ncsRviHMPf9hzsTcd2zy1c8rmE=
Subject key identifier: 81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856E65F8D8E8550B7BFA38D34BBC936529
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 17:34:14 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 213.109.206.0/24
IP: 2a11:72c0::/29
Validation: Failed, certificate revoked on Tue 17 Oct 2023 07:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:65:f8:d8:e8:55:0b:7b:fa:38:d3:4b:bc:93:65:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:34:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81601c22138b5719c4027eee75ef74679ce68ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:23:84:6c:97:fb:83:16:f3:05:94:68:7b:46:
52:f3:48:bd:84:41:93:75:18:4c:44:6f:aa:1b:92:
5d:da:fc:37:31:97:3c:40:b5:bd:59:7f:0c:a8:f3:
a2:a5:4c:78:23:65:23:e0:51:5f:20:90:47:f8:7b:
7c:2f:a9:2f:b9:3a:66:45:96:ff:6a:0e:22:29:ec:
06:77:a3:d2:2b:44:4b:61:58:01:2b:fc:12:3f:09:
4f:cf:fb:63:f8:a1:ad:68:dd:fb:eb:9c:dc:64:e6:
6f:ed:4a:05:c3:aa:50:a2:16:35:9d:b5:26:9b:94:
b2:1d:a8:9c:28:c4:a2:ad:ca:1e:ca:94:28:ac:49:
be:31:e2:a8:71:9b:ca:9e:8b:8e:9c:60:97:fd:c7:
fc:39:b4:d1:32:6a:88:66:1c:94:31:fd:68:41:2e:
67:fb:31:68:55:d2:2e:93:7d:e6:82:a0:9a:4d:37:
75:8f:bb:58:d0:5d:25:5b:96:fa:32:3d:82:72:f0:
41:dc:1f:01:db:bb:9a:b0:f5:c1:cf:de:5e:d6:6b:
83:f2:c8:23:33:f0:aa:2f:3a:09:bc:e4:fc:6d:31:
6e:81:a3:57:8c:a3:6e:07:0f:ad:d9:5c:43:0d:c8:
b7:71:b4:87:d4:f0:5e:c3:e3:ca:6b:25:3e:ac:7d:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.206.0/24
IPv6:
2a11:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:65:24:07:98:e1:2d:67:e9:1b:b7:24:9e:67:54:fa:63:9b:
c7:17:4a:80:87:51:a4:eb:5b:55:a5:2f:6a:e1:48:5d:b7:c8:
f5:8c:5a:d5:4e:c3:7f:a3:c5:4e:fa:cc:b0:63:b4:cc:f1:3c:
6f:b0:5f:70:a7:ae:f3:d4:0d:ea:fa:c8:7a:47:30:8d:b5:6c:
d1:88:1d:dc:28:81:ea:14:17:c4:d7:98:f4:a1:83:c3:ab:9b:
26:71:50:86:c1:5f:54:77:10:7f:99:09:d8:0f:77:bc:5b:c7:
48:52:74:08:5d:12:25:a9:ff:4a:c9:86:cf:fe:07:0d:2d:50:
3b:76:64:4e:c0:2f:00:90:39:bb:0e:2d:a8:ee:8d:85:1a:ea:
bf:68:52:1d:62:58:54:20:d9:13:0e:c1:4f:13:a0:2a:a4:84:
58:a0:8e:bb:da:f9:57:9f:dc:f5:d0:05:72:8d:6c:ae:cd:df:
38:f4:97:75:4c:3f:93:80:96:c9:96:d3:a5:f5:95:6c:08:d6:
5d:f9:34:00:7d:46:ff:1b:68:48:79:09:3e:74:e4:1a:56:cd:
e7:ee:e8:b7:fd:d3:0d:54:5c:16:50:6d:bb:8a:15:19:f6:4c:
c2:6e:aa:2f:de:07:48:cf:73:4d:60:d7:da:09:3f:73:e4:eb:
d2:52:87:e5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVuZfjY6FULe/o400u8k2UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTczNDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTYwMWMyMjEzOGI1NzE5YzQwMjdlZWU3NWVmNzQ2NzljZTY4Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSOEbJf7gxbzBZRoe0ZS80i9hEGT
dRhMRG+qG5Jd2vw3MZc8QLW9WX8MqPOipUx4I2Uj4FFfIJBH+Ht8L6kvuTpmRZb/
ag4iKewGd6PSK0RLYVgBK/wSPwlPz/tj+KGtaN3765zcZOZv7UoFw6pQohY1nbUm
m5SyHaicKMSircoeypQorEm+MeKocZvKnouOnGCX/cf8ObTRMmqIZhyUMf1oQS5n
+zFoVdIuk33mgqCaTTd1j7tY0F0lW5b6Mj2CcvBB3B8B27uasPXBz95e1muD8sgj
M/CqLzoJvOT8bTFugaNXjKNuBw+t2VxDDci3cbSH1PBew+PKayU+rH3MlQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIFgHCITi1cZxAJ+7nXvdGec5oypMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzAyZDM1
MS05YWJhLTQ5YWYtYWI3NC1hMTBmODUwNDZiZjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMDJkMzUx
LTlhYmEtNDlhZi1hYjc0LWExMGY4NTA0NmJmOC8xL2dXQWNJaE9MVnhuRUFuN3Vk
ZTkwWjV6bWpLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQA1W3OMA0EAgACMAcDBQMqEXLAMA0GCSqGSIb3
DQEBCwUAA4IBAQBMZSQHmOEtZ+kbtySeZ1T6Y5vHF0qAh1Gk61tVpS9q4Uhdt8j1
jFrVTsN/o8VO+sywY7TM8TxvsF9wp67z1A3q+sh6RzCNtWzRiB3cKIHqFBfE15j0
oYPDq5smcVCGwV9UdxB/mQnYD3e8W8dIUnQIXRIlqf9KyYbP/gcNLVA7dmROwC8A
kDm7Di2o7o2FGuq/aFIdYlhUINkTDsFPE6AqpIRYoI672vlXn9z10AVyjWyuzd84
9Jd1TD+TgJbJltOl9ZVsCNZd+TQAfUb/G2hIeQk+dOQaVs3n7ui3/dMNVFwWUG27
ihUZ9kzCbqov3gdIz3NNYNfaCT9z5OvSUofl
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:26 2024 by rpki-client on console-fra.rpki-client.org