Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer
File: h_cYJqExaaYp5xqJ264QhzCiqgY.cer (raw, json)
Hash identifier: wGv5TDAPQyEIZTthXQ9fB1I+aB0QqKDfox+k1dqUVMs=
Subject key identifier: 87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2985443F86603FF540012E781377FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:32:47 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.2.248.0/24
IP: 2a12:2940::/29
Validation: Failed, certificate revoked on Mon 29 Apr 2024 06:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:85:44:3f:86:60:3f:f5:40:01:2e:78:13:77:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:32:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f71826a13169a629e71a89dbae108730a2aa06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:12:bb:e6:b1:18:d7:36:79:1c:b4:a3:46:
02:88:90:9f:83:1d:fc:9d:38:2c:61:e4:cc:25:19:
2c:d1:88:d7:f2:0d:06:83:b2:60:8b:93:33:c9:df:
8f:9c:e6:b9:74:64:38:2b:a7:60:3b:c3:03:53:f2:
8c:da:e8:4f:1f:fd:4a:5b:ee:f3:3b:1a:fd:e0:01:
89:21:b8:36:e3:08:17:73:a0:5f:9a:69:1c:1e:aa:
d5:3a:cb:df:f9:2b:54:25:58:a7:d8:84:b8:4d:ef:
a1:1d:3e:1e:4a:28:59:5d:97:44:2d:67:93:97:ea:
c1:f9:4f:7e:ae:47:d1:e0:63:12:7e:88:b8:38:ba:
49:51:6e:10:9f:70:49:80:0f:bf:82:dd:0a:e9:51:
eb:3c:45:23:07:1e:87:c6:d9:3e:b0:4c:f9:50:c9:
6a:7c:5e:2d:46:b8:af:4b:95:f1:6c:48:93:1b:43:
f7:05:a2:30:0e:6f:81:74:c7:8d:8a:22:30:98:a9:
ad:78:f0:b1:b6:31:89:0e:1f:9f:35:c1:10:e8:3e:
79:62:7b:f8:0a:fb:e7:9f:fc:f7:35:4c:9c:f8:7f:
6c:ab:8b:33:90:b9:01:2e:a2:9c:09:b0:5e:7e:75:
6c:8b:79:17:42:fb:ab:16:94:8a:ca:08:49:94:9a:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.2.248.0/24
IPv6:
2a12:2940::/29
Signature Algorithm: sha256WithRSAEncryption
9d:83:e8:97:07:a4:06:b3:48:86:df:74:d0:88:63:f7:c6:2f:
74:7b:25:25:54:38:e1:a2:7f:2b:21:dd:86:26:ab:d0:0f:c3:
3e:c3:ba:dc:03:6c:a6:08:f5:32:04:ab:54:4c:ec:8a:d7:1c:
a2:a2:2f:94:3f:51:77:1d:07:c7:63:68:d0:9e:f8:80:d0:e9:
20:ca:bc:4f:4f:a1:cc:f5:23:75:1c:66:bf:27:be:ab:bd:36:
38:b4:07:60:ff:01:0f:39:91:73:af:52:a6:f0:ce:4e:6c:25:
8e:9e:77:9b:b2:b7:9f:7b:29:a0:44:73:88:82:c7:75:0a:2b:
dc:35:60:a9:50:ef:71:9b:a2:e1:07:35:f2:6a:4f:74:49:a4:
5f:0b:3b:83:25:75:1a:27:ad:4b:43:15:1c:ee:3a:c7:6b:7b:
40:fc:ce:2f:b3:fa:c2:4b:69:38:24:7d:62:f0:a3:d0:c9:5c:
eb:b8:e4:cb:18:e8:6e:03:f2:74:7d:35:8a:81:d7:1b:3e:4d:
b6:bc:e7:6b:e5:a7:ed:9f:95:9d:61:2a:61:bc:65:a6:a0:5a:
14:2f:f8:0d:71:57:26:8b:ea:64:d2:66:ce:6a:6f:89:e8:66:
49:f5:92:60:f0:1d:18:e7:61:e2:ed:e6:49:0a:dd:16:97:a6:
de:49:c5:c9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzKKYVEP4ZgP/VAAS54E3f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMTIzMjQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2Y3MTgyNmExMzE2OWE2MjllNzFhODlkYmFlMTA4NzMwYTJhYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcASu+axGNc2eRy0o0YCiJCfgx38
nTgsYeTMJRks0YjX8g0Gg7Jgi5Mzyd+PnOa5dGQ4K6dgO8MDU/KM2uhPH/1KW+7z
Oxr94AGJIbg24wgXc6BfmmkcHqrVOsvf+StUJVin2IS4Te+hHT4eSihZXZdELWeT
l+rB+U9+rkfR4GMSfoi4OLpJUW4Qn3BJgA+/gt0K6VHrPEUjBx6Hxtk+sEz5UMlq
fF4tRrivS5XxbEiTG0P3BaIwDm+BdMeNiiIwmKmtePCxtjGJDh+fNcEQ6D55Ynv4
Cvvnn/z3NUyc+H9sq4szkLkBLqKcCbBefnVsi3kXQvurFpSKyghJlJqbwwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIf3GCahMWmmKecaiduuEIcwoqoGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2YxMzQ3
Yy05ZmRlLTQwZWItYjNhOC0yZDUzMjFlNTAwNTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvZjEzNDdj
LTlmZGUtNDBlYi1iM2E4LTJkNTMyMWU1MDA1OS8xL2hfY1lKcUV4YWFZcDV4cUoy
NjRRaHpDaXFnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwwL4MA0EAgACMAcDBQMqEilAMA0GCSqGSIb3
DQEBCwUAA4IBAQCdg+iXB6QGs0iG33TQiGP3xi90eyUlVDjhon8rId2GJqvQD8M+
w7rcA2ymCPUyBKtUTOyK1xyioi+UP1F3HQfHY2jQnviA0OkgyrxPT6HM9SN1HGa/
J76rvTY4tAdg/wEPOZFzr1Km8M5ObCWOnnebsrefeymgRHOIgsd1CivcNWCpUO9x
m6LhBzXyak90SaRfCzuDJXUaJ61LQxUc7jrHa3tA/M4vs/rCS2k4JH1i8KPQyVzr
uOTLGOhuA/J0fTWKgdcbPk22vOdr5aftn5WdYSphvGWmoFoUL/gNcVcmi+pk0mbO
am+J6GZJ9ZJg8B0Y52Hi7eZJCt0Wl6beScXJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:17 2024 by rpki-client on console-ams.rpki-client.org