Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
File: kWCYsCldYXSI09nn0jtZozHBXmA.cer (raw, json)
Hash identifier: W0cUOS2vqFM8QQ/7wvto+zl16mlOJtU08nYXUkRFnmg=
Subject key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC801C65DCD5F0B90D4C18930F72DDA7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 147.78.20.0/22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c6:5d:cd:5f:0b:90:d4:c1:89:30:f7:2d:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=916098b0295d617488d3d9e7d23b59a331c15e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:6c:79:56:4b:fc:58:3e:26:3c:79:0c:d4:
5b:c0:0c:24:d8:8f:17:74:a6:40:35:59:aa:44:ad:
95:03:c2:09:8c:46:aa:e9:7e:7a:82:0d:b3:86:6c:
49:61:b0:22:9f:d3:59:df:bb:aa:89:68:0e:e6:7d:
83:6b:58:ac:5e:2a:d0:55:30:dd:07:d2:fd:0a:d3:
07:f9:24:cf:77:d0:cd:61:5d:76:55:4f:9f:07:bf:
d2:e7:94:32:94:bb:4a:ed:a1:f6:e9:27:05:d7:76:
cd:1d:57:20:7c:8e:87:3d:fa:5d:86:1b:71:35:5c:
78:7b:d3:41:7a:d1:ec:0f:9d:94:fc:a5:31:95:cb:
89:17:0f:09:02:34:a1:b5:05:1e:d5:41:b6:7b:66:
5f:07:28:36:30:17:64:10:6b:dc:b9:7c:13:78:d4:
3f:1f:00:f1:d3:15:31:0e:c3:24:75:92:1e:5e:ed:
8e:79:d7:1b:b8:b7:fb:aa:1f:70:31:19:d3:56:10:
fa:4a:cf:43:70:02:35:60:b7:4d:b7:ef:fe:b8:3a:
51:77:9a:04:20:02:7e:14:c2:d7:de:e8:ae:d7:fd:
64:82:5a:02:bc:00:b4:0a:30:30:4d:91:7a:8a:5f:
9b:ae:0a:8c:c8:dd:7d:f4:43:fe:56:ef:59:5e:47:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:3b:bd:8a:de:a8:a9:27:58:96:43:ab:cd:17:22:63:8b:ed:
4b:09:63:5c:27:4f:40:0b:43:50:ce:9f:25:76:d9:79:f6:14:
d2:36:ee:21:28:58:23:b1:5c:6c:7d:ab:99:15:9d:46:bf:0e:
69:37:54:de:63:4f:62:06:86:18:10:be:dc:d6:af:85:93:95:
52:d4:a6:7c:7d:25:d8:f2:6d:ac:07:e7:57:d7:19:e7:62:8e:
46:51:a3:df:a7:ff:06:8e:8d:59:19:63:84:cb:48:d9:a6:51:
40:e3:51:04:f9:a0:51:23:4b:50:42:4a:42:18:11:b3:bf:4c:
a3:ab:c3:52:bb:9a:2b:be:14:e1:4b:12:ab:de:e6:cc:32:8a:
1c:68:f9:21:d8:1d:14:35:c0:a3:98:c0:cf:fd:b1:a3:70:d8:
f0:49:b8:4a:64:e9:28:1e:02:3a:be:a7:d7:a3:30:59:ac:7d:
af:49:ce:87:1b:93:98:d8:b0:3a:82:1d:2f:79:1a:fe:f2:a2:
cb:e1:ad:6f:9b:a4:99:0f:42:9c:de:2d:62:f3:77:9f:b7:4f:
36:66:1c:d2:64:8c:45:45:c7:4c:d9:11:82:10:89:a8:e6:5b:
e3:56:01:ab:a9:f6:23:26:fa:e6:c7:ee:bb:85:45:65:81:71:
64:ad:6f:7f
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzIAcZdzV8LkNTBiTD3Ldp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTYwOThiMDI5NWQ2MTc0ODhkM2Q5ZTdkMjNiNTlhMzMxYzE1ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU9seVZL/Fg+Jjx5DNRbwAwk2I8X
dKZANVmqRK2VA8IJjEaq6X56gg2zhmxJYbAin9NZ37uqiWgO5n2Da1isXirQVTDd
B9L9CtMH+STPd9DNYV12VU+fB7/S55QylLtK7aH26ScF13bNHVcgfI6HPfpdhhtx
NVx4e9NBetHsD52U/KUxlcuJFw8JAjShtQUe1UG2e2ZfByg2MBdkEGvcuXwTeNQ/
HwDx0xUxDsMkdZIeXu2OedcbuLf7qh9wMRnTVhD6Ss9DcAI1YLdNt+/+uDpRd5oE
IAJ+FMLX3uiu1/1kgloCvAC0CjAwTZF6il+brgqMyN199EP+Vu9ZXkcUlQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJFgmLApXWF0iNPZ59I7WaMxwV5gMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzE0Y2Uw
My0yM2YyLTRmN2ItODhjMC00MTBlMDk0Nzc2ODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvMTRjZTAz
LTIzZjItNGY3Yi04OGMwLTQxMGUwOTQ3NzY4NS8xL2tXQ1lzQ2xkWVhTSTA5bm4w
anRab3pIQlhtQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCk04UMA0GCSqGSIb3DQEBCwUAA4IBAQB7O72K
3qipJ1iWQ6vNFyJji+1LCWNcJ09AC0NQzp8ldtl59hTSNu4hKFgjsVxsfauZFZ1G
vw5pN1TeY09iBoYYEL7c1q+Fk5VS1KZ8fSXY8m2sB+dX1xnnYo5GUaPfp/8Gjo1Z
GWOEy0jZplFA41EE+aBRI0tQQkpCGBGzv0yjq8NSu5orvhThSxKr3ubMMoocaPkh
2B0UNcCjmMDP/bGjcNjwSbhKZOkoHgI6vqfXozBZrH2vSc6HG5OY2LA6gh0veRr+
8qLL4a1vm6SZD0Kc3i1i83eft082ZhzSZIxFRcdM2RGCEImo5lvjVgGrqfYjJvrm
x+67hUVlgXFkrW9/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:58 2024 by rpki-client on console-fra.rpki-client.org