Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jeHlmZ8TW_wpw1DoGwReee-JnO0.cer
File: jeHlmZ8TW_wpw1DoGwReee-JnO0.cer (raw, json)
Hash identifier: MQexX5+OLv7pIZwkW/c1HWkENOvB9nevqB8i9aVNfhU=
Subject key identifier: 8D:E1:E5:99:9F:13:5B:FC:29:C3:50:E8:1B:04:5E:79:EF:89:9C:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3F4A7A3F22B41DABB3B192CD82EA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/jeHlmZ8TW_wpw1DoGwReee-JnO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.72.131.0/24
IP: 2a11:2c40::/29
Validation: Failed, certificate revoked on Tue 26 Sep 2023 08:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:f4:a7:a3:f2:2b:41:da:bb:3b:19:2c:d8:2e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8de1e5999f135bfc29c350e81b045e79ef899ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:52:f6:6c:e2:3d:22:18:9f:b5:ee:e7:79:
32:f9:25:9c:fb:76:b7:21:83:28:2a:a1:6f:d1:49:
04:9b:62:db:16:d9:2d:e9:d8:fd:51:1e:ce:ac:9a:
ee:c8:af:c6:30:8f:6d:f5:4b:1a:5b:83:db:d5:a9:
be:92:d4:ce:be:5b:cd:78:f1:01:f0:88:f3:39:dd:
68:0c:d8:9a:2e:22:a4:b5:9a:c0:9e:11:0d:12:7e:
3b:38:37:5b:f5:4b:58:95:78:c5:94:fe:f7:f4:42:
c6:48:34:23:7b:fd:27:b8:fe:9c:f9:cf:55:d9:e4:
79:86:f6:df:2f:15:08:8b:57:f6:54:b1:2d:16:b8:
05:ba:f1:61:3a:2f:69:ad:08:34:78:09:4c:c6:2f:
01:02:51:d2:e3:ac:a0:c8:b9:1b:47:a7:d1:4e:7f:
c3:ea:ca:28:e7:12:34:d7:ab:8c:71:84:0d:61:be:
8a:84:e0:71:8d:7f:b7:32:f7:69:d8:fd:d9:96:51:
fd:4e:0a:aa:99:5a:63:98:da:a5:61:6a:6d:d1:75:
c2:e1:94:12:d4:55:b6:b8:fc:1e:bd:4b:bb:fe:5c:
fb:71:e0:79:57:cc:ab:7a:52:22:eb:c1:c8:23:a5:
f9:85:1e:32:56:a7:c7:7d:b3:21:25:71:6c:37:1a:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E1:E5:99:9F:13:5B:FC:29:C3:50:E8:1B:04:5E:79:EF:89:9C:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1221b4-1940-428c-86f8-f5f3a89b1d66/1/jeHlmZ8TW_wpw1DoGwReee-JnO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.131.0/24
IPv6:
2a11:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
46:e6:41:88:5f:7d:63:57:12:f5:ce:1c:e4:a0:9d:b0:28:a2:
ef:83:91:cd:e3:3b:f3:ad:46:d4:3d:66:f4:e9:0e:d1:10:14:
1e:0e:02:0a:31:1d:16:aa:e6:c5:ab:31:ac:c3:c0:06:28:ca:
8a:2d:82:d3:b3:5d:dc:7b:a8:8f:d5:7a:db:47:aa:fe:26:d8:
3d:88:27:26:23:1b:72:e1:2d:38:62:13:9d:1f:06:82:98:0e:
33:3f:8a:6b:74:26:17:c6:e4:67:ad:0c:67:d4:4c:41:c5:3e:
68:21:1c:8c:d3:58:19:79:ad:5b:91:eb:99:23:e5:bd:81:9d:
ce:10:3a:5f:cd:b1:47:51:3d:ff:7f:63:aa:63:d2:c2:7a:21:
21:28:6a:37:e0:09:82:e1:a6:df:8a:eb:ef:bc:4c:42:5c:82:
80:0e:c6:51:b6:82:ab:c6:54:0d:dd:71:b8:92:b9:88:4a:e4:
bf:cb:7b:f0:49:85:37:4d:25:10:08:7e:36:c7:fc:47:2c:68:
9c:09:a7:57:0d:6a:85:ce:f9:ba:19:89:b1:83:7d:3d:3d:c1:
b7:6b:e7:f8:65:46:d4:12:84:c7:d0:61:70:0b:7f:fb:55:d2:
6a:ba:f4:d4:26:73:27:b2:21:4e:a0:83:b9:39:81:75:2a:54:
91:53:22:ab
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu0/Sno/IrQdq7Oxks2C6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGUxZTU5OTlmMTM1YmZjMjljMzUwZTgxYjA0NWU3OWVmODk5Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsztS9mziPSIYn7Xu53ky+SWc+3a3
IYMoKqFv0UkEm2LbFtkt6dj9UR7OrJruyK/GMI9t9UsaW4Pb1am+ktTOvlvNePEB
8IjzOd1oDNiaLiKktZrAnhENEn47ODdb9UtYlXjFlP739ELGSDQje/0nuP6c+c9V
2eR5hvbfLxUIi1f2VLEtFrgFuvFhOi9prQg0eAlMxi8BAlHS46ygyLkbR6fRTn/D
6soo5xI016uMcYQNYb6KhOBxjX+3Mvdp2P3ZllH9TgqqmVpjmNqlYWpt0XXC4ZQS
1FW2uPwevUu7/lz7ceB5V8yrelIi68HII6X5hR4yVqfHfbMhJXFsNxo1AQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFI3h5ZmfE1v8KcNQ6BsEXnnviZztMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzEyMjFi
NC0xOTQwLTQyOGMtODZmOC1mNWYzYTg5YjFkNjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTIyMWI0
LTE5NDAtNDI4Yy04NmY4LWY1ZjNhODliMWQ2Ni8xL2plSGxtWjhUV193cHcxRG9H
d1JlZWUtSm5PMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAJUiDMA0EAgACMAcDBQMqESxAMA0GCSqGSIb3
DQEBCwUAA4IBAQBG5kGIX31jVxL1zhzkoJ2wKKLvg5HN4zvzrUbUPWb06Q7REBQe
DgIKMR0WqubFqzGsw8AGKMqKLYLTs13ce6iP1XrbR6r+Jtg9iCcmIxty4S04YhOd
HwaCmA4zP4prdCYXxuRnrQxn1ExBxT5oIRyM01gZea1bkeuZI+W9gZ3OEDpfzbFH
UT3/f2OqY9LCeiEhKGo34AmC4abfiuvvvExCXIKADsZRtoKrxlQN3XG4krmISuS/
y3vwSYU3TSUQCH42x/xHLGicCadXDWqFzvm6GYmxg309PcG3a+f4ZUbUEoTH0GFw
C3/7VdJquvTUJnMnsiFOoIO5OYF1KlSRUyKr
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:51 2024 by rpki-client on console-fra.rpki-client.org