Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ikjGYZd4NukJMTcX-V9mdSzN6j0.cer
File: ikjGYZd4NukJMTcX-V9mdSzN6j0.cer (raw, json)
Hash identifier: AV6faHWzufPJtPKhzrzt3SKgCA6UMQnsD/a3oqUcH2Y=
Subject key identifier: 8A:48:C6:61:97:78:36:E9:09:31:37:17:F9:5F:66:75:2C:CD:EA:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6734534B38E1730584872010EDC80
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/8a3336-a99f-4f59-934e-064a35f8ca8c/1/ikjGYZd4NukJMTcX-V9mdSzN6j0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/8a3336-a99f-4f59-934e-064a35f8ca8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:35:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 94.247.140.0/24
IP: 2a11:8680::/29
Validation: Failed, certificate revoked on Tue 29 Aug 2023 13:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:73:45:34:b3:8e:17:30:58:48:72:01:0e:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a48c661977836e909313717f95f66752ccdea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:8f:58:12:16:c5:79:93:5f:6b:f2:ac:35:
72:e4:d1:cb:94:5d:80:34:42:ae:35:ce:54:1c:7c:
18:ac:09:06:26:be:41:a9:82:75:93:42:39:92:78:
cd:4c:dc:0c:ec:7b:86:8c:bc:11:c4:b8:25:53:90:
fa:34:e7:f3:e0:83:44:ed:ca:05:5e:00:d9:1c:bf:
8e:72:f4:98:2b:58:7b:1f:51:ca:92:a5:fc:8a:a6:
f6:d5:54:ad:e6:89:aa:e6:68:21:01:5e:d7:a2:f1:
c6:c9:aa:24:74:5d:94:0d:e9:c6:86:30:f0:32:45:
3b:fd:5c:5a:f6:d1:79:6d:70:21:46:30:68:25:72:
8a:89:c2:05:b1:dd:12:79:fd:b7:e6:7a:a3:81:2d:
eb:aa:89:73:d8:04:fa:d9:57:4b:f9:eb:01:16:09:
83:8f:d9:52:cd:1c:d2:9a:ec:d0:8b:ad:63:9c:15:
89:58:97:30:6e:51:32:b3:57:0f:c2:60:af:e8:31:
f5:c9:1b:43:fa:01:86:1f:ea:5d:72:3f:0f:f7:2a:
81:39:0b:b3:c3:36:bb:8a:72:02:9b:b4:6e:53:da:
ca:ed:c9:b9:a4:a3:e7:b7:ed:16:83:8c:48:b3:98:
4b:5d:62:1e:ae:8c:db:b5:24:c3:c3:53:8b:8f:76:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:C6:61:97:78:36:E9:09:31:37:17:F9:5F:66:75:2C:CD:EA:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/8a3336-a99f-4f59-934e-064a35f8ca8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/8a3336-a99f-4f59-934e-064a35f8ca8c/1/ikjGYZd4NukJMTcX-V9mdSzN6j0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.140.0/24
IPv6:
2a11:8680::/29
Signature Algorithm: sha256WithRSAEncryption
9a:e4:3c:41:ca:a3:0b:65:ce:fa:5a:e3:94:6e:68:37:d8:cf:
70:34:eb:4e:73:10:25:d5:21:e7:1b:58:33:bc:0d:3d:d0:dc:
a5:07:63:16:d6:df:b1:57:b6:b4:72:6d:6d:35:a3:03:4a:6a:
28:dd:99:91:1c:d4:d2:e0:5d:ce:61:04:8d:af:7c:04:0b:f2:
13:18:b7:4c:e3:16:f0:02:bd:6a:24:e1:09:f6:be:d9:03:6f:
53:36:fc:20:e2:73:5b:8e:db:08:c1:24:20:be:96:41:62:2c:
f5:d9:ad:78:e0:aa:d4:43:0c:1a:5e:83:3b:e0:99:e8:f2:05:
e1:3b:1f:83:f1:11:3f:a1:ac:54:91:40:86:e2:39:8f:2d:b6:
54:74:55:af:97:21:85:de:28:02:f7:3e:86:76:3c:ae:8d:3f:
d0:3b:b8:92:83:57:76:4a:7b:ae:37:36:28:e7:f6:0c:44:5a:
bd:9f:5c:b8:51:6c:6d:9a:7c:c3:ae:0a:2b:59:a1:60:09:6c:
be:43:21:f9:ed:3f:33:61:ad:98:39:de:cb:3f:47:33:9d:0e:
70:99:6c:75:f7:ea:d0:44:5b:f7:11:83:cc:7a:2a:1b:7f:0b:
a7:19:09:2d:d9:f9:44:9c:02:de:8a:53:e2:ad:47:0a:b0:98:
fb:38:83:6c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVx1nNFNLOOFzBYSHIBDtyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTQ4YzY2MTk3NzgzNmU5MDkzMTM3MTdmOTVmNjY3NTJjY2RlYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY6PWBIWxXmTX2vyrDVy5NHLlF2A
NEKuNc5UHHwYrAkGJr5BqYJ1k0I5knjNTNwM7HuGjLwRxLglU5D6NOfz4INE7coF
XgDZHL+OcvSYK1h7H1HKkqX8iqb21VSt5omq5mghAV7XovHGyaokdF2UDenGhjDw
MkU7/Vxa9tF5bXAhRjBoJXKKicIFsd0Sef235nqjgS3rqolz2AT62VdL+esBFgmD
j9lSzRzSmuzQi61jnBWJWJcwblEys1cPwmCv6DH1yRtD+gGGH+pdcj8P9yqBOQuz
wza7inICm7RuU9rK7cm5pKPnt+0Wg4xIs5hLXWIerozbtSTDw1OLj3ZLlQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIpIxmGXeDbpCTE3F/lfZnUszeo9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzhhMzMz
Ni1hOTlmLTRmNTktOTM0ZS0wNjRhMzVmOGNhOGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvOGEzMzM2
LWE5OWYtNGY1OS05MzRlLTA2NGEzNWY4Y2E4Yy8xL2lrakdZWmQ0TnVrSk1UY1gt
VjltZFN6TjZqMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXveMMA0EAgACMAcDBQMqEYaAMA0GCSqGSIb3
DQEBCwUAA4IBAQCa5DxByqMLZc76WuOUbmg32M9wNOtOcxAl1SHnG1gzvA090Nyl
B2MW1t+xV7a0cm1tNaMDSmoo3ZmRHNTS4F3OYQSNr3wEC/ITGLdM4xbwAr1qJOEJ
9r7ZA29TNvwg4nNbjtsIwSQgvpZBYiz12a144KrUQwwaXoM74Jno8gXhOx+D8RE/
oaxUkUCG4jmPLbZUdFWvlyGF3igC9z6GdjyujT/QO7iSg1d2SnuuNzYo5/YMRFq9
n1y4UWxtmnzDrgorWaFgCWy+QyH57T8zYa2YOd7LP0cznQ5wmWx19+rQRFv3EYPM
eiobfwunGQkt2flEnALeilPirUcKsJj7OINs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:43 2024 by rpki-client on console-fra.rpki-client.org