Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
File: mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer (raw, json)
Hash identifier: LqjaRELf4fJv821I9Sx6qYmK1pJrw8x2HeE1vGpBSG4=
Subject key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF51F6847A806178CC9B4596E93AE02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:07 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a09:c280::/29
Validation: Failed, certificate revoked on Mon 03 Jul 2023 08:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:1f:68:47:a8:06:17:8c:c9:b4:59:6e:93:ae:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9990e74e57375cfb6218d52dc0601416fee1f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:e2:e7:a3:04:1e:d8:73:cf:d2:a7:20:5b:
fd:e0:19:a5:27:52:16:ec:ef:bc:cd:f6:30:2b:04:
16:e6:8d:a7:bb:68:04:79:95:44:dc:85:88:00:f8:
7f:a0:83:89:46:31:ac:97:2e:bf:67:71:7c:e4:e6:
b1:e5:13:57:63:7d:d6:40:a8:27:8e:83:2b:bb:4a:
9f:6d:30:cc:21:b8:44:9a:d1:ab:60:29:64:4e:00:
b2:57:75:9a:8b:80:f2:5d:93:e9:ae:02:89:30:ff:
73:13:4c:c1:71:8c:2c:b1:16:7e:80:8e:ac:2f:7a:
31:3a:f1:7f:53:8b:86:93:cc:ff:ae:70:e2:a7:6a:
1e:c3:ee:b9:aa:bc:51:bc:65:47:4f:e2:f9:60:39:
d0:43:ac:dc:45:0f:f8:e9:b5:75:6b:9c:9d:81:a8:
7e:79:49:ec:cc:71:9d:2a:64:6d:d2:06:c4:32:4a:
50:fa:8a:f7:59:e2:ba:47:d4:5e:bd:14:19:15:c9:
81:c7:04:30:d0:01:2c:c1:0a:1f:1c:7c:82:8e:ce:
87:44:5f:9e:a0:49:39:df:32:d4:1b:b4:a1:42:68:
fe:7d:7d:9e:4a:33:80:58:bf:03:45:d8:3b:4f:6a:
21:75:92:e0:1f:80:e6:63:e9:c3:bb:56:17:5b:06:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c280::/29
Signature Algorithm: sha256WithRSAEncryption
15:68:91:01:e6:72:67:eb:72:86:ee:6f:aa:ee:01:7c:4c:0b:
84:68:f1:c6:a9:cf:90:e9:9c:b4:63:64:2c:96:f1:41:fa:29:
f0:f6:e6:3e:2c:a5:ec:c3:cf:ea:48:7c:82:79:76:c6:56:78:
26:b5:12:c2:da:37:40:b9:e5:b2:e0:20:ed:2c:25:dd:72:e4:
d6:bf:74:a7:f6:72:3b:f4:e0:f9:95:0c:ba:5a:69:c8:53:ab:
83:6f:5c:bd:c5:82:55:1c:3c:9c:93:d8:25:be:e4:3b:aa:cb:
5d:ac:c7:1f:fe:0b:3e:1a:fe:83:d0:65:78:2e:83:cb:d9:b1:
ff:40:b0:ea:e8:ce:e5:54:e9:d3:bc:c9:df:cd:1a:e8:ca:a4:
25:70:31:ea:5a:45:84:c4:c5:69:38:d6:d4:47:50:cc:1d:16:
36:57:b3:55:30:55:0a:e7:a9:3b:a3:4e:23:d4:8e:31:3f:68:
5f:9a:19:a3:3f:95:23:45:f6:73:60:40:20:88:41:3d:59:c9:
36:7b:74:46:94:ee:a5:87:45:a0:a6:6e:04:e2:2d:4b:56:47:
42:82:91:00:1a:a2:db:1c:30:82:c8:1e:72:68:3d:59:cc:0a:
42:30:1f:ed:84:12:7d:76:7e:9c:eb:c7:11:75:ed:88:65:fd:
35:96:31:1a
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYVq9R9oR6gGF4zJtFluk64CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMjA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTkwZTc0ZTU3Mzc1Y2ZiNjIxOGQ1MmRjMDYwMTQxNmZlZTFmMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCri56MEHthzz9KnIFv94BmlJ1IW
7O+8zfYwKwQW5o2nu2gEeZVE3IWIAPh/oIOJRjGsly6/Z3F85Oax5RNXY33WQKgn
joMru0qfbTDMIbhEmtGrYClkTgCyV3Wai4DyXZPprgKJMP9zE0zBcYwssRZ+gI6s
L3oxOvF/U4uGk8z/rnDip2oew+65qrxRvGVHT+L5YDnQQ6zcRQ/46bV1a5ydgah+
eUnszHGdKmRt0gbEMkpQ+or3WeK6R9RevRQZFcmBxwQw0AEswQofHHyCjs6HRF+e
oEk53zLUG7ShQmj+fX2eSjOAWL8DRdg7T2ohdZLgH4DmY+nDu1YXWwaiVwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFJmQ505XN1z7YhjVLcBgFBb+4fMoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzI3NTc1
NS1iM2QyLTRjZmMtODM4Mi1mYWM1ZTc2NDI4NjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvMjc1NzU1
LWIzZDItNGNmYy04MzgyLWZhYzVlNzY0Mjg2NS8xL21aRG5UbGMzWFB0aUdOVXR3
R0FVRnY3aDh5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKgnCgDANBgkqhkiG9w0BAQsFAAOCAQEAFWiR
AeZyZ+tyhu5vqu4BfEwLhGjxxqnPkOmctGNkLJbxQfop8PbmPiyl7MPP6kh8gnl2
xlZ4JrUSwto3QLnlsuAg7Swl3XLk1r90p/ZyO/Tg+ZUMulppyFOrg29cvcWCVRw8
nJPYJb7kO6rLXazHH/4LPhr+g9BleC6Dy9mx/0Cw6ujO5VTp07zJ380a6MqkJXAx
6lpFhMTFaTjW1EdQzB0WNlezVTBVCuepO6NOI9SOMT9oX5oZoz+VI0X2c2BAIIhB
PVnJNnt0RpTupYdFoKZuBOItS1ZHQoKRABqi2xwwgsgecmg9WcwKQjAf7YQSfXZ+
nOvHEXXtiGX9NZYxGg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:17 2024 by rpki-client on console-fra.rpki-client.org