Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.cer
File: hiuIVj1oR1WPmc9I7dQAVAmx9Lw.cer (raw, json)
Hash identifier: oPxkqxHsCR2jkNGI4k+HvVEKjsIU+IvsnfRChkzWkaM=
Subject key identifier: 86:2B:88:56:3D:68:47:55:8F:99:CF:48:ED:D4:00:54:09:B1:F4:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD0E36EE2A674493C5B2951535A7903
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.157.110.0/24
IP: 2a11:7880::/29
Validation: Failed, certificate revoked on Thu 07 Sep 2023 07:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d0:e3:6e:e2:a6:74:49:3c:5b:29:51:53:5a:79:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=862b88563d6847558f99cf48edd4005409b1f4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:22:51:37:84:2c:0e:09:01:47:95:f8:1b:d0:
b2:b0:83:aa:e4:b4:4b:bf:1d:b0:0e:90:0a:13:73:
b6:50:2f:82:6a:dd:2c:91:77:3c:27:60:9b:a4:c2:
59:ba:ee:4e:0a:75:1d:53:9e:8b:93:0d:21:db:12:
cd:f8:ca:c6:ac:44:93:d2:84:b5:e6:22:64:00:c5:
69:f3:d1:f0:86:01:86:49:d6:69:6a:fe:34:74:4e:
9b:e3:45:ea:44:a1:6e:76:17:e8:c9:00:22:9c:47:
0e:05:87:c1:7c:19:b2:f4:d0:1d:50:ae:05:22:cc:
52:0b:b3:16:06:71:e7:fb:95:6e:87:52:6c:54:22:
fa:4f:a8:c3:8f:b5:4a:11:87:7f:d8:a8:6f:af:fc:
ed:14:06:04:5d:63:02:60:8a:ad:97:2c:68:d8:9b:
20:20:76:65:08:d3:d7:1d:2f:89:3a:2f:01:3b:a6:
8a:d2:91:cb:c0:49:df:f6:a1:12:b0:41:ec:b6:bc:
ac:71:67:a3:33:b7:84:cb:e3:51:22:c4:25:4b:3b:
8b:55:89:80:14:a4:a0:43:47:b3:ad:b0:fd:d7:8e:
e8:8d:07:c5:2e:48:f0:1b:32:3d:93:8d:40:27:84:
d4:42:a1:0b:b6:39:96:bf:71:86:1b:96:8f:1f:fd:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2B:88:56:3D:68:47:55:8F:99:CF:48:ED:D4:00:54:09:B1:F4:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19e025-ba6a-4a49-be32-04f5c7b19a1d/1/hiuIVj1oR1WPmc9I7dQAVAmx9Lw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.110.0/24
IPv6:
2a11:7880::/29
Signature Algorithm: sha256WithRSAEncryption
63:2b:ea:09:21:c5:f5:d3:84:7d:12:28:ce:5f:3b:cc:ba:10:
42:6a:59:25:fa:52:2c:46:2d:b3:00:59:53:e6:57:8c:7c:c7:
5b:e1:97:63:e4:61:7c:97:7f:7b:c2:32:a2:d1:60:30:a8:10:
5a:1d:1c:ce:46:cc:29:ae:fc:41:49:13:8a:da:cd:dd:96:2a:
16:77:27:3e:a8:4d:3c:9a:6b:7c:07:83:14:1b:5f:78:80:15:
f5:d7:e6:ed:8b:65:29:5f:f4:eb:7c:4f:ec:6b:31:53:f1:ab:
58:b9:f7:e5:cb:71:02:9b:83:0b:6e:1c:bc:dd:18:d9:b1:62:
55:62:b2:cc:b7:b2:d9:10:09:de:c9:a3:88:8b:96:25:87:28:
4c:d9:31:65:02:2f:6a:a0:33:6c:c3:0b:95:a0:e3:9a:70:0a:
dc:00:98:7e:4a:0a:ac:98:dc:5e:14:10:c2:75:bf:31:76:5c:
61:d5:a9:23:82:75:d6:5f:d3:6e:3a:17:8a:c6:f4:61:0d:f6:
a1:49:3b:65:e7:ec:ae:25:5f:dd:46:34:13:8c:f4:20:f6:b8:
fc:64:c9:7d:53:92:cd:2b:23:ca:a9:bd:87:27:8a:ec:0d:7d:
dc:37:4d:46:b7:76:9c:4a:65:fe:8d:ab:86:4a:0e:87:e7:75:
14:3b:8d:22
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVr0ONu4qZ0STxbKVFTWnkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjJiODg1NjNkNjg0NzU1OGY5OWNmNDhlZGQ0MDA1NDA5YjFmNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSJRN4QsDgkBR5X4G9CysIOq5LRL
vx2wDpAKE3O2UC+Cat0skXc8J2CbpMJZuu5OCnUdU56Lkw0h2xLN+MrGrEST0oS1
5iJkAMVp89HwhgGGSdZpav40dE6b40XqRKFudhfoyQAinEcOBYfBfBmy9NAdUK4F
IsxSC7MWBnHn+5Vuh1JsVCL6T6jDj7VKEYd/2Khvr/ztFAYEXWMCYIqtlyxo2Jsg
IHZlCNPXHS+JOi8BO6aK0pHLwEnf9qESsEHstryscWejM7eEy+NRIsQlSzuLVYmA
FKSgQ0ezrbD9147ojQfFLkjwGzI9k41AJ4TUQqELtjmWv3GGG5aPH/2WiQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIYriFY9aEdVj5nPSO3UAFQJsfS8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzE5ZTAy
NS1iYTZhLTRhNDktYmUzMi0wNGY1YzdiMTlhMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvMTllMDI1
LWJhNmEtNGE0OS1iZTMyLTA0ZjVjN2IxOWExZC8xL2hpdUlWajFvUjFXUG1jOUk3
ZFFBVkFteDlMdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXZ1uMA0EAgACMAcDBQMqEXiAMA0GCSqGSIb3
DQEBCwUAA4IBAQBjK+oJIcX104R9EijOXzvMuhBCalkl+lIsRi2zAFlT5leMfMdb
4Zdj5GF8l397wjKi0WAwqBBaHRzORswprvxBSROK2s3dlioWdyc+qE08mmt8B4MU
G194gBX11+bti2UpX/TrfE/sazFT8atYuffly3ECm4MLbhy83RjZsWJVYrLMt7LZ
EAneyaOIi5YlhyhM2TFlAi9qoDNswwuVoOOacArcAJh+SgqsmNxeFBDCdb8xdlxh
1akjgnXWX9NuOheKxvRhDfahSTtl5+yuJV/dRjQTjPQg9rj8ZMl9U5LNKyPKqb2H
J4rsDX3cN01Gt3acSmX+jauGSg6H53UUO40i
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:36 2024 by rpki-client on console-fra.rpki-client.org