Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer
File: h_4pq03kqiaPfsSKHEpA5fPqIq8.cer (raw, json)
Hash identifier: BJMzjwUBm3eKy68B7HPbw3PRD8zJHdTM4L2kGIUWZqc=
Subject key identifier: 87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFE3CD75DF4AC027EB725D655EB982
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 12929
AS: 41483
IP: 46.15.0.0/16
IP: 46.212.0.0/16
IP: 89.8.0.0/15
IP: 89.254.64.0/18
IP: 176.11.0.0/16
IP: 178.232.0.0/16
IP: 193.109.210.0/24
IP: 195.191.116.0/23
IP: 212.45.160.0/19
IP: 212.169.64.0/18
Validation: Failed, certificate revoked on Tue 02 May 2023 14:50:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:e3:cd:75:df:4a:c0:27:eb:72:5d:65:5e:b9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:b8:56:96:b6:7b:1f:79:a7:64:c5:31:dc:
b3:c1:e0:c3:0d:a8:b4:4f:38:98:22:f3:57:49:b8:
44:0a:3c:02:b2:bd:33:89:89:70:73:dc:e2:69:47:
5c:f2:00:83:51:b6:50:20:a2:ed:38:f0:22:c0:dd:
15:d5:42:2a:34:b4:22:c5:36:05:63:5c:db:4f:de:
14:47:72:96:01:4d:e8:2a:9d:21:38:b2:17:58:da:
46:2f:2a:45:09:40:39:d9:d9:41:4f:56:4c:ec:b1:
26:cb:6b:ed:0c:6f:b6:4f:45:59:11:d4:73:7a:70:
62:bc:65:74:af:eb:eb:e1:df:67:b5:88:1c:c4:ba:
23:6a:b7:c1:a8:bf:88:0e:60:0c:7a:55:01:87:68:
c5:1e:41:25:0e:cb:73:f2:b4:1b:de:d2:3b:c9:24:
33:2e:07:b9:4b:d8:57:aa:fd:66:af:cc:ad:dc:27:
d4:20:fa:fb:91:bb:27:9b:8e:48:ba:e6:0a:4e:5e:
51:3d:58:fb:88:b4:c0:e0:a8:14:87:84:08:1e:1c:
18:6d:60:76:66:58:40:cd:4f:8e:c6:a2:c0:e4:01:
f4:04:40:0c:02:0a:29:b6:15:c5:5d:f6:45:9f:10:
3c:39:24:f9:2a:dd:6c:1d:d2:73:fe:c5:74:f4:49:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.15.0.0/16
46.212.0.0/16
89.8.0.0/15
89.254.64.0/18
176.11.0.0/16
178.232.0.0/16
193.109.210.0/24
195.191.116.0/23
212.45.160.0/19
212.169.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12929
41483
Signature Algorithm: sha256WithRSAEncryption
42:ef:4c:e7:6c:bd:87:f3:43:9f:f0:dd:ec:98:19:ca:04:98:
fa:e9:cd:9b:15:b4:a1:c6:5f:70:b7:8d:6e:73:ef:86:d7:06:
46:35:79:8d:e2:4a:84:eb:56:bf:34:0e:25:62:50:1b:b2:b9:
69:48:ff:84:d4:6c:34:45:ea:2e:24:b0:4c:64:04:c3:70:ab:
52:fc:79:e4:7c:10:b6:79:3d:87:1e:64:07:3f:8f:34:b5:ad:
37:22:bc:f8:b2:53:e3:bd:f1:5b:71:ea:65:fa:b9:98:d1:41:
75:1a:3c:af:77:55:5f:81:60:03:dc:2f:9e:81:25:08:cc:9c:
d2:b3:3e:3c:9b:cc:3a:fd:e3:cf:5c:e3:75:48:20:7b:92:4e:
4b:07:d2:3d:d1:c5:8a:25:44:be:23:2a:70:54:a4:75:ae:f4:
1e:db:e8:d9:d4:68:6f:17:d6:4a:a6:09:be:81:3e:ff:02:ca:
ef:8b:78:06:43:3c:f8:38:86:82:5e:36:48:c0:42:30:c3:ae:
0d:d5:ac:ca:56:5a:e0:31:bc:1c:6d:17:5e:2a:77:3c:83:47:
5e:23:59:e0:1c:82:49:75:73:fc:8e:ff:35:0a:99:15:96:54:
d3:b5:22:45:1e:cf:87:b5:d7:5e:7b:a4:97:13:08:df:09:bb:
19:e7:ac:bb
-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgISAYVvr+PNdd9KwCfrcl1lXrmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2ZlMjlhYjRkZTRhYTI2OGY3ZWM0OGExYzRhNDBlNWYzZWEyMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PK4Vpa2ex95p2TFMdyzweDDDai0
TziYIvNXSbhECjwCsr0ziYlwc9ziaUdc8gCDUbZQIKLtOPAiwN0V1UIqNLQixTYF
Y1zbT94UR3KWAU3oKp0hOLIXWNpGLypFCUA52dlBT1ZM7LEmy2vtDG+2T0VZEdRz
enBivGV0r+vr4d9ntYgcxLojarfBqL+IDmAMelUBh2jFHkElDstz8rQb3tI7ySQz
Lge5S9hXqv1mr8yt3CfUIPr7kbsnm45IuuYKTl5RPVj7iLTA4KgUh4QIHhwYbWB2
ZlhAzU+OxqLA5AH0BEAMAgopthXFXfZFnxA8OST5Kt1sHdJz/sV09EkzQwIDAQAB
o4IC1TCCAtEwHQYDVR0OBBYEFIf+KatN5Komj37EihxKQOXz6iKvMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzEzNzRi
MS0wMmYyLTRlN2UtOGNmMC1kOTI2Y2Y3NGFhY2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMTM3NGIx
LTAyZjItNGU3ZS04Y2YwLWQ5MjZjZjc0YWFjYy8xL2hfNHBxMDNrcWlhUGZzU0tI
RXBBNWZQcUlxOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF
BwEHAQH/BEEwPzA9BAIAATA3AwMALg8DAwAu1AMDAVkIAwQGWf5AAwMAsAsDAwCy
6AMEAMFt0gMEAcO/dAMEBdQtoAMEBtSpQDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJ
AgIygQIDAKILMA0GCSqGSIb3DQEBCwUAA4IBAQBC70znbL2H80Of8N3smBnKBJj6
6c2bFbShxl9wt41uc++G1wZGNXmN4kqE61a/NA4lYlAbsrlpSP+E1Gw0ReouJLBM
ZATDcKtS/HnkfBC2eT2HHmQHP480ta03Irz4slPjvfFbcepl+rmY0UF1Gjyvd1Vf
gWAD3C+egSUIzJzSsz48m8w6/ePPXON1SCB7kk5LB9I90cWKJUS+IypwVKR1rvQe
2+jZ1GhvF9ZKpgm+gT7/Asrvi3gGQzz4OIaCXjZIwEIww64N1azKVlrgMbwcbRde
Knc8g0deI1ngHIJJdXP8jv81CpkVllTTtSJFHs+Htddee6SXEwjfCbsZ56y7
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:34 2024 by rpki-client on console-fra.rpki-client.org