Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jSmkHm9QejdFiklkOnvleQdY9yY.cer
File: jSmkHm9QejdFiklkOnvleQdY9yY.cer (raw, json)
Hash identifier: TyvAyw9DOitHjGlN6RBxSan0XBvSVieGWD+1qZqv4LY=
Subject key identifier: 8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F4199B61F57BC4C9F70B6C28DD2CB8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:34:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.107.64.0/22
IP: 212.7.212.0/22
IP: 2a03:5860::/32
Validation: Failed, certificate revoked on Mon 27 Feb 2023 11:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:41:99:b6:1f:57:bc:4c:9f:70:b6:c2:8d:d2:cb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d29a41e6f507a37458a49643a7be5790758f726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:5e:7b:63:ae:c2:1a:35:35:d3:92:fc:ab:
c8:50:7f:d9:a3:a2:53:b2:ee:d2:c8:a7:d7:6c:e8:
74:04:58:ec:c3:4d:f5:fd:ff:ff:28:2a:ca:5d:4f:
2b:1f:07:b9:7a:47:d3:81:76:71:02:84:c7:91:19:
2e:9d:a6:86:91:42:13:d9:57:c6:50:68:63:af:6c:
95:ae:2d:55:a5:30:e4:81:ee:4e:c3:da:66:91:80:
14:94:b7:bc:70:30:03:27:41:e9:e6:b4:c5:76:77:
14:ee:3b:b5:91:1c:27:fc:c0:62:60:04:78:40:39:
fe:8b:20:1f:82:51:46:a0:28:73:a0:c4:72:bb:2f:
26:fb:09:8c:e0:6d:d7:98:d6:08:b4:92:66:9b:fe:
3e:06:ff:92:52:80:a2:c8:c3:09:3f:a1:33:23:e9:
70:1f:dc:f3:e1:02:51:d7:d2:3f:91:ef:90:be:79:
02:77:e9:70:35:fc:58:80:ce:a0:cd:cf:f0:6e:ce:
59:68:df:27:24:be:ed:ca:74:8c:0e:39:66:01:44:
8b:ba:4f:52:de:63:db:34:61:c3:b5:7c:0e:70:9d:
19:4b:64:95:a9:41:96:ff:f2:5d:28:dd:1e:e7:b0:
dd:e4:21:a8:8e:61:a1:ff:2b:bd:69:9a:6a:d4:eb:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:A4:1E:6F:50:7A:37:45:8A:49:64:3A:7B:E5:79:07:58:F7:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5b45d-7780-434b-a912-efb9a04d3caa/1/jSmkHm9QejdFiklkOnvleQdY9yY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.64.0/22
212.7.212.0/22
IPv6:
2a03:5860::/32
Signature Algorithm: sha256WithRSAEncryption
95:c1:12:78:1c:26:17:1d:69:f4:fc:cc:b6:ad:43:54:1d:94:
a6:56:d8:5b:00:77:88:62:4e:eb:54:27:4b:5d:47:54:2d:f7:
87:e0:fd:3c:14:0c:83:d8:6f:e8:cd:48:4d:79:71:57:0d:3a:
1d:c4:4e:04:d2:99:5a:34:d7:5c:e5:50:ea:4d:4f:0f:81:8f:
48:13:cd:04:fc:c3:4c:05:16:bf:55:fb:75:38:d0:67:6c:69:
d4:93:45:15:2a:f2:c7:24:61:8d:d8:36:0f:e3:a6:83:c1:0b:
c8:41:09:c5:4e:bc:1b:69:70:53:99:95:51:b3:b9:bd:e3:db:
a9:2f:bc:b9:d8:6b:a2:e3:39:67:83:c8:26:bd:6a:53:f0:20:
7d:e7:8c:5f:70:28:aa:df:8b:96:c9:e6:b8:96:8d:2d:3b:a9:
e1:56:74:fc:d0:d9:1b:92:c2:be:f8:34:b8:f5:f2:82:50:14:
79:11:3f:c0:e3:4c:5d:e7:ab:30:48:e6:09:f2:f3:f4:9b:c1:
ab:ca:61:45:ab:2b:8e:cc:5f:a9:6c:af:73:76:a2:fd:9a:13:
44:bd:de:29:35:96:4c:f4:bf:c1:3d:9e:86:86:f3:ab:f1:35:
df:fd:d9:1e:13:9d:10:74:7d:0a:92:33:93:90:b3:32:bb:d9:
6c:35:59:c6
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAYVvQZm2H1e8TJ9wtsKN0suLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzNDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDI5YTQxZTZmNTA3YTM3NDU4YTQ5NjQzYTdiZTU3OTA3NThmNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg1ee2Ouwho1NdOS/KvIUH/Zo6JT
su7SyKfXbOh0BFjsw031/f//KCrKXU8rHwe5ekfTgXZxAoTHkRkunaaGkUIT2VfG
UGhjr2yVri1VpTDkge5Ow9pmkYAUlLe8cDADJ0Hp5rTFdncU7ju1kRwn/MBiYAR4
QDn+iyAfglFGoChzoMRyuy8m+wmM4G3XmNYItJJmm/4+Bv+SUoCiyMMJP6EzI+lw
H9zz4QJR19I/ke+QvnkCd+lwNfxYgM6gzc/wbs5ZaN8nJL7tynSMDjlmAUSLuk9S
3mPbNGHDtXwOcJ0ZS2SVqUGW//JdKN0e57Dd5CGojmGh/yu9aZpq1OsvYwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFI0ppB5vUHo3RYpJZDp75XkHWPcmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlL2I1YjQ1
ZC03NzgwLTQzNGItYTkxMi1lZmI5YTA0ZDNjYWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvYjViNDVk
LTc3ODAtNDM0Yi1hOTEyLWVmYjlhMDRkM2NhYS8xL2pTbWtIbTlRZWpkRmlrbGtP
bnZsZVFkWTl5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuWtAAwQC1AfUMA0EAgACMAcDBQAqA1hgMA0G
CSqGSIb3DQEBCwUAA4IBAQCVwRJ4HCYXHWn0/My2rUNUHZSmVthbAHeIYk7rVCdL
XUdULfeH4P08FAyD2G/ozUhNeXFXDTodxE4E0plaNNdc5VDqTU8PgY9IE80E/MNM
BRa/Vft1ONBnbGnUk0UVKvLHJGGN2DYP46aDwQvIQQnFTrwbaXBTmZVRs7m949up
L7y52Gui4zlng8gmvWpT8CB954xfcCiq34uWyea4lo0tO6nhVnT80NkbksK++DS4
9fKCUBR5ET/A40xd56swSOYJ8vP0m8GrymFFqyuOzF+pbK9zdqL9mhNEvd4pNZZM
9L/BPZ6GhvOr8TXf/dkeE50QdH0KkjOTkLMyu9lsNVnG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:39 2024 by rpki-client on console-ams.rpki-client.org