Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
File: noiJAQJOjGsnF02p4D3IoJ3LiDM.cer (raw, json)
Hash identifier: 155EKt8V/TRY+4Hrt1JUnzZF+0D+ro+65fxSlf3x2uU=
Subject key identifier: 9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C1F816CFC877C4C357A552F53EE9AF8C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/noiJAQJOjGsnF02p4D3IoJ3LiDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Nov 2023 09:13:44 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 207723
IP: 185.248.56.0 -- 185.248.58.255
IP: 2a0d:2bc0::/29
Validation: Failed, certificate revoked on Thu 07 Dec 2023 10:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:81:6c:fc:87:7c:4c:35:7a:55:2f:53:ee:9a:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 30 09:13:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:c3:fc:4b:9b:7c:3d:88:2c:77:34:a6:71:
92:60:c4:8b:a4:ad:a9:34:ac:23:ce:a0:a0:5e:92:
3d:5c:bd:d5:29:bc:e0:35:11:f5:8e:22:48:53:bc:
ca:0e:a9:fc:73:11:75:d3:71:a7:a7:4c:6f:39:56:
aa:31:f3:4a:ae:5a:71:82:70:dc:a4:e3:f7:37:1f:
54:18:f2:76:45:9b:44:8f:77:c4:ca:e5:06:9c:ec:
f4:86:5a:5b:df:9b:58:8b:e1:fc:ce:44:53:ea:7c:
b4:a8:1e:01:53:58:9b:94:df:94:5a:16:54:a0:f5:
54:d4:c7:37:03:c5:07:98:86:66:b5:95:70:a8:8c:
cd:d7:4e:bd:82:a4:a0:87:91:5b:c7:dd:85:7f:6c:
6c:4a:a7:86:02:03:23:30:b9:68:89:3a:80:77:07:
49:19:dc:28:38:06:b7:27:13:07:e2:c4:6b:48:75:
43:48:d7:6f:d4:4a:87:2b:07:e5:df:c3:4e:d1:8a:
08:d1:79:da:9a:78:0d:71:08:aa:4a:39:ad:73:27:
2c:a2:36:51:6d:88:74:89:c4:87:51:b9:63:2f:c9:
dd:f0:e5:38:94:4e:6a:14:c1:a3:29:fa:cb:2d:ef:
c8:22:a7:49:e7:02:12:09:76:90:ae:f8:ea:da:b9:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/noiJAQJOjGsnF02p4D3IoJ3LiDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.56.0-185.248.58.255
IPv6:
2a0d:2bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207723
Signature Algorithm: sha256WithRSAEncryption
63:39:c9:ce:00:4f:a6:74:17:0f:b2:e5:7e:4c:95:5c:f1:b4:
34:8f:31:9c:c4:58:f9:68:b6:44:63:8a:79:93:e0:75:9a:71:
7e:0b:e3:ed:06:38:2a:60:e0:1b:47:24:8f:51:88:9e:1a:f5:
c3:59:b5:40:7f:90:84:d9:bc:a7:84:79:52:18:4a:19:d8:6d:
1c:50:20:df:80:d5:7a:24:4a:3d:0f:be:09:33:c0:11:88:e4:
29:c7:ad:75:eb:a6:3c:aa:8e:3e:5f:01:19:28:1f:14:1b:85:
72:c1:8a:ff:82:89:63:88:d3:77:ce:29:1e:9c:4a:71:4f:4d:
d3:c5:14:9b:8e:e7:91:10:0a:99:48:9d:6a:9f:c0:02:ba:a4:
88:a2:db:7e:5b:9b:f6:76:79:ba:b4:e2:58:d5:df:c6:77:48:
61:31:14:8c:41:e5:7a:17:68:50:7a:c0:3b:5b:69:bb:5f:14:
52:15:a5:9e:e2:aa:f2:77:5b:69:67:0e:86:d8:9b:2c:8a:71:
86:e1:b3:01:33:0a:4e:0e:17:d2:9d:7a:da:4f:2c:d2:ac:3c:
61:36:eb:cc:d8:32:cc:db:7c:af:13:0c:34:dc:4f:ff:c6:3e:
d4:cd:b1:fc:e0:76:c6:b2:bb:7e:c5:97:97:df:1c:1b:4e:07:
d4:fe:d8:a4
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAYwfgWz8h3xMNXpVL1PumvjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMTMwMDkxMzQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTg4ODkwMTAyNGU4YzZiMjcxNzRkYTllMDNkYzhhMDlkY2I4ODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6TD/EubfD2ILHc0pnGSYMSLpK2p
NKwjzqCgXpI9XL3VKbzgNRH1jiJIU7zKDqn8cxF103Gnp0xvOVaqMfNKrlpxgnDc
pOP3Nx9UGPJ2RZtEj3fEyuUGnOz0hlpb35tYi+H8zkRT6ny0qB4BU1iblN+UWhZU
oPVU1Mc3A8UHmIZmtZVwqIzN1069gqSgh5Fbx92Ff2xsSqeGAgMjMLloiTqAdwdJ
GdwoOAa3JxMH4sRrSHVDSNdv1EqHKwfl38NO0YoI0XnamngNcQiqSjmtcycsojZR
bYh0icSHUbljL8nd8OU4lE5qFMGjKfrLLe/IIqdJ5wISCXaQrvjq2rlheQIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFJ6IiQECToxrJxdNqeA9yKCdy4gzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzA0ODJj
OC02ZmJmLTQ4MWMtYjVjYi1hMTNiMmYxMTY1MjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMDQ4MmM4
LTZmYmYtNDgxYy1iNWNiLWExM2IyZjExNjUyMS8xL25vaUpBUUpPakdzbkYwMnA0
RDNJb0ozTGlETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTAUBAIAATAOMAwDBAO5+DgDBAC5+DowDQQCAAIwBwMFAyoNK8Aw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAytrMA0GCSqGSIb3DQEBCwUAA4IBAQBj
OcnOAE+mdBcPsuV+TJVc8bQ0jzGcxFj5aLZEY4p5k+B1mnF+C+PtBjgqYOAbRySP
UYieGvXDWbVAf5CE2bynhHlSGEoZ2G0cUCDfgNV6JEo9D74JM8ARiOQpx61166Y8
qo4+XwEZKB8UG4VywYr/goljiNN3zikenEpxT03TxRSbjueREAqZSJ1qn8ACuqSI
ott+W5v2dnm6tOJY1d/Gd0hhMRSMQeV6F2hQesA7W2m7XxRSFaWe4qryd1tpZw6G
2JssinGG4bMBMwpODhfSnXraTyzSrDxhNuvM2DLM23yvEww03E//xj7UzbH84HbG
srt+xZeX3xwbTgfU/tik
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:29 2024 by rpki-client on console-fra.rpki-client.org