Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hJ_yzI4LisBG96SaXjJo3UAqWQc.cer
File: hJ_yzI4LisBG96SaXjJo3UAqWQc.cer (raw, json)
Hash identifier: FJe5Gnzs51wIm15eJPTJG/OY26ot2JOso8iQBK5t5aw=
Subject key identifier: 84:9F:F2:CC:8E:0B:8A:C0:46:F7:A4:9A:5E:32:68:DD:40:2A:59:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A614D7489E4C32AA70AA7E6CE7273
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/hJ_yzI4LisBG96SaXjJo3UAqWQc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.141.0/24
IP: 2a11:5840::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 14:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:61:4d:74:89:e4:c3:2a:a7:0a:a7:e6:ce:72:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=849ff2cc8e0b8ac046f7a49a5e3268dd402a5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:a8:40:14:b7:88:cd:c1:c1:35:e1:d1:b0:
44:bc:8f:6c:2e:b2:88:48:e9:3d:f8:8a:2b:6d:e9:
63:ae:56:10:cb:9d:7d:e9:61:5c:11:d3:60:27:15:
d9:0e:e9:7d:07:b4:2f:91:ca:1c:25:70:5d:b4:f1:
55:48:b5:59:d2:26:27:e0:35:2e:1a:32:32:e6:73:
a2:bf:28:f4:63:ae:21:dd:84:9e:26:1b:fb:80:7b:
a4:9f:4d:93:0c:ef:b8:35:b6:9c:02:9f:6e:1d:a7:
5f:5e:01:a0:5d:a6:5f:c5:e7:80:44:e9:6b:b6:7a:
64:6a:c6:39:65:6f:a3:cb:8c:4e:4e:e5:08:cb:8d:
7e:f6:2f:7c:7f:b7:b4:68:63:f8:ff:a4:ef:31:1a:
12:b1:17:62:7f:dc:45:d2:2a:69:93:ad:17:f6:dc:
7c:ce:4b:6e:55:67:a2:98:23:f7:f5:8c:15:f3:ea:
c0:43:0b:96:cd:42:f0:e9:0f:6a:fa:e2:ca:39:7a:
3e:0d:0e:9b:3a:02:2d:69:07:df:03:74:13:35:94:
b4:f4:d0:ba:9a:13:da:b7:dd:17:63:46:09:3b:34:
6c:b8:c0:04:df:8b:43:f5:f0:77:72:7f:8f:93:ef:
1e:72:96:77:1b:d2:22:a2:68:93:c5:ae:88:3d:17:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:F2:CC:8E:0B:8A:C0:46:F7:A4:9A:5E:32:68:DD:40:2A:59:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4d693f-5369-411b-add3-564ae771b1a4/1/hJ_yzI4LisBG96SaXjJo3UAqWQc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.141.0/24
IPv6:
2a11:5840::/29
Signature Algorithm: sha256WithRSAEncryption
6c:f5:92:da:9c:d6:27:95:b6:0f:00:d9:c5:56:cc:1f:03:f4:
6e:68:34:c8:e7:00:80:b8:fa:0e:47:bb:7c:61:93:fe:5a:dd:
41:a4:70:f1:9f:a3:59:8f:14:46:da:b8:9b:65:3c:94:99:f2:
3e:46:48:18:42:fa:20:08:f6:71:70:b2:41:5b:be:6d:d3:25:
8b:0f:45:dc:07:bb:77:9c:de:df:38:ae:34:48:f3:ce:67:8f:
6d:42:d6:01:27:2a:c5:50:31:ae:0b:9f:fa:73:29:7a:ae:eb:
ef:75:92:66:6b:34:e8:2f:3c:7b:1d:42:9b:25:44:43:9d:10:
fc:ef:87:fe:3a:64:02:69:4b:0f:32:6f:31:d1:cc:ef:19:58:
46:a8:95:a3:c8:e8:69:2b:75:e1:b9:68:5c:3e:b0:b7:16:d1:
97:b3:52:aa:dc:c1:3a:c5:5c:65:9f:56:cd:89:a8:55:57:bf:
5d:c0:10:de:eb:73:e7:72:5b:1d:91:a7:c3:1e:3a:54:60:21:
0e:e1:29:17:47:41:10:94:d7:67:cb:9d:2e:93:53:43:f7:f6:
54:ac:8b:8a:1a:76:81:43:5c:a0:fe:ed:a2:8a:71:0b:90:17:
be:34:0c:d4:a0:62:d2:ef:68:e0:23:a0:e6:50:a9:30:53:ca:
86:57:83:66
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVtGmFNdInkwyqnCqfmznJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTEzMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDlmZjJjYzhlMGI4YWMwNDZmN2E0OWE1ZTMyNjhkZDQwMmE1OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA642oQBS3iM3BwTXh0bBEvI9sLrKI
SOk9+IorbeljrlYQy5196WFcEdNgJxXZDul9B7QvkcocJXBdtPFVSLVZ0iYn4DUu
GjIy5nOivyj0Y64h3YSeJhv7gHukn02TDO+4NbacAp9uHadfXgGgXaZfxeeAROlr
tnpkasY5ZW+jy4xOTuUIy41+9i98f7e0aGP4/6TvMRoSsRdif9xF0ippk60X9tx8
zktuVWeimCP39YwV8+rAQwuWzULw6Q9q+uLKOXo+DQ6bOgItaQffA3QTNZS09NC6
mhPat90XY0YJOzRsuMAE34tD9fB3cn+Pk+8ecpZ3G9IiomiTxa6IPRcN6wIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFISf8syOC4rARvekml4yaN1AKlkHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzRkNjkz
Zi01MzY5LTQxMWItYWRkMy01NjRhZTc3MWIxYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvNGQ2OTNm
LTUzNjktNDExYi1hZGQzLTU2NGFlNzcxYjFhNC8xL2hKX3l6STRMaXNCRzk2U2FY
akpvM1VBcVdRYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwhqNMA0EAgACMAcDBQMqEVhAMA0GCSqGSIb3
DQEBCwUAA4IBAQBs9ZLanNYnlbYPANnFVswfA/RuaDTI5wCAuPoOR7t8YZP+Wt1B
pHDxn6NZjxRG2ribZTyUmfI+RkgYQvogCPZxcLJBW75t0yWLD0XcB7t3nN7fOK40
SPPOZ49tQtYBJyrFUDGuC5/6cyl6ruvvdZJmazToLzx7HUKbJURDnRD874f+OmQC
aUsPMm8x0czvGVhGqJWjyOhpK3XhuWhcPrC3FtGXs1Kq3ME6xVxln1bNiahVV79d
wBDe63PnclsdkafDHjpUYCEO4SkXR0EQlNdny50uk1ND9/ZUrIuKGnaBQ1yg/u2i
inELkBe+NAzUoGLS72jgI6DmUKkwU8qGV4Nm
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:33 2024 by rpki-client on console-fra.rpki-client.org