Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mN7s4g8LJAhfxpz3oCr_x7EyglA.cer
File: mN7s4g8LJAhfxpz3oCr_x7EyglA.cer (raw, json)
Hash identifier: 8W0E2MpWBBGqO89f/GAiGXBzRZs7xkhhuUrQa1rzWWc=
Subject key identifier: 98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFB3B20B596906FCA96DA3EBD1B5078
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/mN7s4g8LJAhfxpz3oCr_x7EyglA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.162.135.0/24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 10:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:3b:20:b5:96:90:6f:ca:96:da:3e:bd:1b:50:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98deece20f0b24085fc69cf7a02affc7b1328250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:9e:b3:23:b8:2f:7d:3c:dc:8a:0a:9a:e4:
8b:1e:27:a4:44:f0:01:c7:5c:f1:7d:9a:f6:2c:d4:
c5:02:da:f9:33:32:03:1c:2a:fd:94:18:d9:db:4e:
1d:93:86:1e:8d:25:ea:9f:ba:c7:8b:ad:96:90:f3:
5f:87:ed:87:64:67:0e:b0:4d:f1:04:aa:7f:e1:23:
ad:3a:4a:e4:6a:cf:f5:cc:fb:ae:b5:85:4d:f8:e7:
28:12:0a:69:41:91:58:d0:3c:d0:de:e9:32:94:ab:
9e:38:a3:cc:84:e4:a4:f1:73:b6:63:6c:4a:19:cf:
d3:a9:c8:54:0b:10:43:2f:9e:4f:a6:ac:f6:64:21:
09:03:fd:ef:ba:50:d3:fb:74:73:8d:04:20:c9:c0:
55:87:22:24:1b:87:ca:00:3d:c8:fb:93:f8:c7:34:
06:a0:73:9b:90:2b:1f:f8:bb:19:34:74:00:d6:fc:
c5:4a:99:a1:c2:03:9c:e3:46:a6:bd:1d:83:10:e5:
ad:e3:c1:49:ce:dc:f5:34:bc:d0:0b:82:3a:88:74:
70:18:2a:d3:8f:ff:82:07:ed:7a:75:16:7c:85:00:
39:2d:62:af:c7:f8:61:c3:41:9d:9a:d5:60:e5:0b:
f8:a3:93:37:e2:a2:c1:ac:cf:39:aa:00:0b:17:be:
09:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:EC:E2:0F:0B:24:08:5F:C6:9C:F7:A0:2A:FF:C7:B1:32:82:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e8c-c8f4-4624-b13f-ca36748c8ff9/1/mN7s4g8LJAhfxpz3oCr_x7EyglA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a0:da:75:be:f8:88:8c:f5:c2:1e:07:5d:17:bb:bb:99:dd:
dc:ff:a4:7e:ee:d8:8c:e6:a4:07:87:a0:31:31:d3:46:99:96:
51:76:39:2e:1a:97:7d:1d:18:98:4c:37:e1:fd:d6:4f:64:98:
0e:69:81:91:80:9f:5f:02:42:83:7d:98:76:57:c8:3c:fb:33:
60:6b:e3:d2:db:33:62:59:92:8c:c0:7b:4c:00:04:37:d4:b0:
ec:0a:9d:99:7c:ef:61:c1:e5:68:b1:1f:1d:d0:14:7f:88:d5:
81:60:e3:4b:72:3f:e0:42:d0:b2:c6:dd:3c:ac:c2:67:7e:a2:
c6:09:f1:6e:8a:12:2a:4b:92:c6:cd:30:4e:6a:3f:01:34:16:
36:67:28:bc:74:4a:6d:69:81:ac:76:82:7d:88:4f:67:83:0a:
41:08:46:24:c5:53:dd:cc:34:93:82:be:ef:0d:61:19:0e:b0:
5a:fc:d8:f9:72:28:ab:1c:8a:2f:8c:f5:90:95:e3:21:c2:0f:
46:cc:95:9d:dc:e8:d6:8c:fa:89:cb:a7:98:6e:6a:a6:66:68:
ce:42:e5:33:ac:39:2b:6c:31:e7:b6:91:bb:0e:c5:62:9a:5a:
42:f9:2d:8a:f0:b5:b8:ee:a7:85:5e:c0:13:0c:1a:c2:6d:95:
e7:8f:96:14
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVu+zsgtZaQb8qW2j69G1B4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRlZWNlMjBmMGIyNDA4NWZjNjljZjdhMDJhZmZjN2IxMzI4MjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+KesyO4L3083IoKmuSLHiekRPAB
x1zxfZr2LNTFAtr5MzIDHCr9lBjZ204dk4YejSXqn7rHi62WkPNfh+2HZGcOsE3x
BKp/4SOtOkrkas/1zPuutYVN+OcoEgppQZFY0DzQ3ukylKueOKPMhOSk8XO2Y2xK
Gc/TqchUCxBDL55Ppqz2ZCEJA/3vulDT+3RzjQQgycBVhyIkG4fKAD3I+5P4xzQG
oHObkCsf+LsZNHQA1vzFSpmhwgOc40amvR2DEOWt48FJztz1NLzQC4I6iHRwGCrT
j/+CB+16dRZ8hQA5LWKvx/hhw0GdmtVg5Qv4o5M34qLBrM85qgALF74JNwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJje7OIPCyQIX8ac96Aq/8exMoJQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzQ3NWU4
Yy1jOGY0LTQ2MjQtYjEzZi1jYTM2NzQ4YzhmZjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvNDc1ZThj
LWM4ZjQtNDYyNC1iMTNmLWNhMzY3NDhjOGZmOS8xL21ON3M0ZzhMSkFoZnhwejNv
Q3JfeDdFeWdsQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwaKHMA0GCSqGSIb3DQEBCwUAA4IBAQB/oNp1
vviIjPXCHgddF7u7md3c/6R+7tiM5qQHh6AxMdNGmZZRdjkuGpd9HRiYTDfh/dZP
ZJgOaYGRgJ9fAkKDfZh2V8g8+zNga+PS2zNiWZKMwHtMAAQ31LDsCp2ZfO9hweVo
sR8d0BR/iNWBYONLcj/gQtCyxt08rMJnfqLGCfFuihIqS5LGzTBOaj8BNBY2Zyi8
dEptaYGsdoJ9iE9ngwpBCEYkxVPdzDSTgr7vDWEZDrBa/Nj5ciirHIovjPWQleMh
wg9GzJWd3OjWjPqJy6eYbmqmZmjOQuUzrDkrbDHntpG7DsVimlpC+S2K8LW47qeF
XsATDBrCbZXnj5YU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:15 2024 by rpki-client on console-fra.rpki-client.org