Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jhPCrlK7ODNzV74iHrwXXEg4yeg.cer
File: jhPCrlK7ODNzV74iHrwXXEg4yeg.cer (raw, json)
Hash identifier: 0zz8GPR0lu7/W8z6up2xCYmxJXjLCe7n7E/kDaoNqLo=
Subject key identifier: 8E:13:C2:AE:52:BB:38:33:73:57:BE:22:1E:BC:17:5C:48:38:C9:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0325B912AE1E61B9D89CA3CF6A280
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/jhPCrlK7ODNzV74iHrwXXEg4yeg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.247.128.0/19
IP: 212.165.128.0/17
Validation: Failed, certificate revoked on Wed 06 Sep 2023 10:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:32:5b:91:2a:e1:e6:1b:9d:89:ca:3c:f6:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e13c2ae52bb38337357be221ebc175c4838c9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:92:69:cd:9a:67:62:43:c3:8a:59:9a:05:
27:33:d8:d2:41:b7:0b:d7:8f:2c:df:e6:17:03:74:
f1:48:a1:8f:61:cb:5b:00:3b:53:70:86:57:27:9b:
0c:43:7d:d8:cd:a8:8c:36:f3:82:37:5b:fd:13:1f:
af:49:44:05:32:16:2b:77:fe:7e:91:6c:a8:c6:3a:
3d:a6:21:ba:b5:e3:19:f7:e5:62:3f:60:3b:9c:6d:
78:45:0e:89:0e:e3:c8:8c:b6:bf:f1:06:07:38:18:
e4:e5:86:09:ca:03:be:41:4e:60:57:47:b4:47:86:
e5:f0:e0:c4:7e:bf:43:55:8f:02:11:b2:70:7e:1d:
fa:5d:6a:bb:cd:da:0c:23:51:0c:0f:48:f0:ea:4f:
44:92:d7:d2:ac:75:21:2b:4a:d8:b4:e8:bf:b6:a4:
fb:30:cd:d2:36:ab:8a:91:e4:05:00:78:7d:66:bb:
5f:e6:cd:a2:fa:f7:17:99:e6:02:67:40:e6:b5:1b:
1c:27:f1:9b:6c:77:57:fe:83:d5:90:a7:ef:e1:f3:
76:9d:1f:53:06:ba:2b:76:db:95:73:88:1b:3c:4b:
ee:63:18:2a:1a:f8:c0:ea:ca:3b:cf:57:f2:31:43:
e8:3e:af:c1:53:4d:49:11:d4:e9:d0:15:1c:89:2a:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:13:C2:AE:52:BB:38:33:73:57:BE:22:1E:BC:17:5C:48:38:C9:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/78995e-9422-4ada-97e4-6de19de4cf91/1/jhPCrlK7ODNzV74iHrwXXEg4yeg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.128.0/19
212.165.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9e:58:3d:97:a0:48:30:54:79:74:17:37:e4:e1:3a:b1:a4:6b:
fc:8b:d1:0f:21:a7:c3:a5:f4:b3:e9:4e:da:78:9a:89:7c:66:
35:c3:bf:b8:b7:c7:a4:fc:50:f4:a0:ae:b9:76:13:38:a5:96:
51:56:0e:93:cb:21:6f:3b:99:03:5e:43:d7:e7:a1:7a:b4:0a:
56:99:1f:c9:44:bf:8f:a6:b2:e0:41:b9:4a:f0:fd:f8:da:4e:
80:d2:28:48:31:53:85:40:86:c3:92:24:44:38:64:57:1d:e3:
41:e6:11:5d:cd:ab:a8:a1:90:07:61:2a:5f:a2:e7:55:0a:3b:
69:58:c5:af:69:7b:e4:6c:1b:b3:a0:91:6e:36:f8:da:b8:d9:
1e:64:6d:07:58:41:3b:3d:34:f2:d2:bf:6c:61:1d:9f:34:7d:
cc:24:c8:d4:ce:64:db:7f:a9:6c:1f:f8:e9:60:13:55:2f:f2:
92:c8:a1:14:c6:64:ab:96:cc:08:8c:03:42:f8:9c:a4:ce:a7:
04:b6:94:fc:1f:2c:26:93:f9:38:94:31:15:d9:0e:3f:2e:7b:
c1:a6:4a:4d:49:26:e0:35:90:3b:c5:ee:03:78:f8:84:2b:89:
cb:3f:83:a8:53:1c:72:21:df:09:3c:87:8a:79:de:98:b3:bb:
de:04:5a:3f
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAYVvsDJbkSrh5hudico89qKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTEzYzJhZTUyYmIzODMzNzM1N2JlMjIxZWJjMTc1YzQ4MzhjOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmKSac2aZ2JDw4pZmgUnM9jSQbcL
148s3+YXA3TxSKGPYctbADtTcIZXJ5sMQ33YzaiMNvOCN1v9Ex+vSUQFMhYrd/5+
kWyoxjo9piG6teMZ9+ViP2A7nG14RQ6JDuPIjLa/8QYHOBjk5YYJygO+QU5gV0e0
R4bl8ODEfr9DVY8CEbJwfh36XWq7zdoMI1EMD0jw6k9EktfSrHUhK0rYtOi/tqT7
MM3SNquKkeQFAHh9Zrtf5s2i+vcXmeYCZ0DmtRscJ/GbbHdX/oPVkKfv4fN2nR9T
BrordtuVc4gbPEvuYxgqGvjA6so7z1fyMUPoPq/BU01JEdTp0BUciSonDwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFI4Twq5Suzgzc1e+Ih68F1xIOMnoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzc4OTk1
ZS05NDIyLTRhZGEtOTdlNC02ZGUxOWRlNGNmOTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNzg5OTVl
LTk0MjItNGFkYS05N2U0LTZkZTE5ZGU0Y2Y5MS8xL2poUENybEs3T0ROelY3NGlI
cndYWEVnNHllZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQFUPeAAwQH1KWAMA0GCSqGSIb3DQEBCwUAA4IB
AQCeWD2XoEgwVHl0Fzfk4TqxpGv8i9EPIafDpfSz6U7aeJqJfGY1w7+4t8ek/FD0
oK65dhM4pZZRVg6TyyFvO5kDXkPX56F6tApWmR/JRL+PprLgQblK8P342k6A0ihI
MVOFQIbDkiREOGRXHeNB5hFdzauooZAHYSpfoudVCjtpWMWvaXvkbBuzoJFuNvja
uNkeZG0HWEE7PTTy0r9sYR2fNH3MJMjUzmTbf6lsH/jpYBNVL/KSyKEUxmSrlswI
jANC+JykzqcEtpT8Hywmk/k4lDEV2Q4/LnvBpkpNSSbgNZA7xe4DePiEK4nLP4Oo
UxxyId8JPIeKed6Ys7veBFo/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:42 2024 by rpki-client on console-ams.rpki-client.org