Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nH1O8Ae-W5AxcnfxwWhACmhhJNg.cer
File: nH1O8Ae-W5AxcnfxwWhACmhhJNg.cer (raw, json)
Hash identifier: fwkge/3dMA6YJvLT4+wcb86lv/vu3p3NzZ0DCHpUZN0=
Subject key identifier: 9C:7D:4E:F0:07:BE:5B:90:31:72:77:F1:C1:68:40:0A:68:61:24:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01877AFD195EA524520ADC10BC1291232E91
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 13 Apr 2023 14:20:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2001:67c:c48::/48
Validation: Failed, certificate revoked on Tue 07 Nov 2023 08:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:fd:19:5e:a5:24:52:0a:dc:10:bc:12:91:23:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 13 14:20:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c7d4ef007be5b90317277f1c168400a686124d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:e0:6d:6c:54:c1:25:09:10:62:60:d8:02:
30:e4:19:ef:1c:74:c6:38:34:84:3a:49:78:7c:ca:
83:c4:74:08:ef:eb:6d:c0:99:c4:38:a0:08:4e:e4:
b6:14:e1:5c:40:f4:80:2b:73:c7:a4:59:87:1d:5d:
5b:18:49:22:5d:ff:88:1d:1c:a3:c3:13:e4:55:d5:
bf:79:79:d8:d2:c8:81:17:78:ce:c2:b9:bf:0e:5a:
de:9e:08:51:30:40:ab:84:fa:72:7d:33:c8:b3:3e:
d4:79:74:48:7b:7e:f7:34:c3:7c:e3:75:2c:67:c0:
c4:98:53:5b:0c:43:99:ac:51:90:be:29:4d:4a:90:
82:50:02:69:bc:77:a3:ff:db:fb:98:81:c8:3f:e4:
b7:74:c4:80:fc:80:65:13:d0:af:25:7c:06:09:3a:
76:1f:80:c4:02:f0:8b:a3:f1:8a:ed:dd:4f:1b:cf:
9e:ca:cd:85:6e:b6:cc:93:cc:96:3a:39:70:94:e2:
75:65:28:ba:82:c8:eb:c5:f2:ce:e0:a7:4d:6a:7b:
12:22:76:26:12:0a:5e:1d:23:55:4d:53:9c:1a:f7:
4e:51:63:44:62:12:a3:9c:c6:d3:4a:b3:d9:be:c4:
4a:eb:87:27:5e:5d:0b:e9:0e:98:22:7b:be:c0:24:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7D:4E:F0:07:BE:5B:90:31:72:77:F1:C1:68:40:0A:68:61:24:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3fde74-5108-4414-86df-9ea311ee81bf/1/nH1O8Ae-W5AxcnfxwWhACmhhJNg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c48::/48
Signature Algorithm: sha256WithRSAEncryption
34:e8:ae:28:a5:ed:9a:42:5a:6c:56:1a:83:bd:f4:ad:7c:55:
0e:54:47:64:8e:99:d4:c3:b1:64:7a:41:96:9d:d0:e4:18:09:
f8:65:d9:be:25:d6:ee:34:30:a8:48:67:6a:20:51:e3:f1:99:
59:c3:4c:7b:0e:2e:52:72:6d:6e:ed:47:38:a6:7b:f2:5e:e7:
48:68:18:e0:ce:60:d5:12:d9:9f:27:71:e2:a9:1c:5e:6d:7c:
1b:40:d4:b5:03:f7:d0:99:de:f8:43:14:fc:e7:fc:5a:a1:00:
d6:c5:d9:48:a7:f2:9f:50:b4:e7:d3:65:83:4f:d3:04:3b:ef:
e7:3e:de:ad:fd:36:8b:a1:d4:4b:d5:6d:1c:b8:50:ad:e9:07:
9c:83:7b:8b:46:f9:e6:48:56:e0:ed:62:8a:88:53:ae:98:a1:
d2:65:15:70:0e:c7:be:ce:c4:c3:ae:d3:5e:87:a0:fd:ee:2c:
84:99:f3:aa:e7:30:d9:da:4b:e0:54:ea:02:e6:f4:b1:29:eb:
c6:b0:9f:38:2f:1d:0b:98:c3:46:70:b5:29:4d:58:7d:3d:ef:
9c:4a:c3:1d:6c:37:e1:a0:8d:5b:ad:fd:b1:64:ef:8d:50:7f:
db:5e:b9:c3:ff:3e:9b:75:48:ec:47:83:3d:43:db:6a:1d:e9:
14:c1:2f:ed
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAYd6/RlepSRSCtwQvBKRIy6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNDEzMTQyMDIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzdkNGVmMDA3YmU1YjkwMzE3Mjc3ZjFjMTY4NDAwYTY4NjEyNGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEXgbWxUwSUJEGJg2AIw5BnvHHTG
ODSEOkl4fMqDxHQI7+ttwJnEOKAITuS2FOFcQPSAK3PHpFmHHV1bGEkiXf+IHRyj
wxPkVdW/eXnY0siBF3jOwrm/DlrenghRMECrhPpyfTPIsz7UeXRIe373NMN843Us
Z8DEmFNbDEOZrFGQvilNSpCCUAJpvHej/9v7mIHIP+S3dMSA/IBlE9CvJXwGCTp2
H4DEAvCLo/GK7d1PG8+eys2FbrbMk8yWOjlwlOJ1ZSi6gsjrxfLO4KdNansSInYm
EgpeHSNVTVOcGvdOUWNEYhKjnMbTSrPZvsRK64cnXl0L6Q6YInu+wCTIzwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFJx9TvAHvluQMXJ38cFoQApoYSTYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzNmZGU3
NC01MTA4LTQ0MTQtODZkZi05ZWEzMTFlZTgxYmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvM2ZkZTc0
LTUxMDgtNDQxNC04NmRmLTllYTMxMWVlODFiZi8xL25IMU84QWUtVzVBeGNuZnh3
V2hBQ21oaEpOZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAxIMA0GCSqGSIb3DQEBCwUAA4IBAQA0
6K4ope2aQlpsVhqDvfStfFUOVEdkjpnUw7FkekGWndDkGAn4Zdm+JdbuNDCoSGdq
IFHj8ZlZw0x7Di5Scm1u7Uc4pnvyXudIaBjgzmDVEtmfJ3HiqRxebXwbQNS1A/fQ
md74QxT85/xaoQDWxdlIp/KfULTn02WDT9MEO+/nPt6t/TaLodRL1W0cuFCt6Qec
g3uLRvnmSFbg7WKKiFOumKHSZRVwDse+zsTDrtNeh6D97iyEmfOq5zDZ2kvgVOoC
5vSxKevGsJ84Lx0LmMNGcLUpTVh9Pe+cSsMdbDfhoI1brf2xZO+NUH/bXrnD/z6b
dUjsR4M9Q9tqHekUwS/t
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:25 2024 by rpki-client on console-fra.rpki-client.org