Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/orowTZxZnvJmfMoHAzaQqir4ceQ.cer
File: orowTZxZnvJmfMoHAzaQqir4ceQ.cer (raw, json)
Hash identifier: wsInw0ZJAxqBARGLj9wy2mXbaPhEoH15Gpa6+/u9d+I=
Subject key identifier: A2:BA:30:4D:9C:59:9E:F2:66:7C:CA:07:03:36:90:AA:2A:F8:71:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD6D9A2D068E1832E17940BE381EB3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/orowTZxZnvJmfMoHAzaQqir4ceQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:33:03 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.62.18.0/24
IP: 2a11:4a00::/29
Validation: Failed, certificate revoked on Fri 18 Aug 2023 07:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:6d:9a:2d:06:8e:18:32:e1:79:40:be:38:1e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:33:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2ba304d9c599ef2667cca07033690aa2af871e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0d:ac:77:eb:ac:5f:6a:f8:cd:fd:19:4d:2c:
c3:40:17:6a:ef:01:f4:db:09:27:53:c1:be:84:16:
98:37:0e:12:29:80:66:87:bb:b4:7a:ac:ce:e8:7a:
aa:03:27:ce:f0:ff:21:5e:80:31:b8:93:c9:8a:df:
17:81:81:52:1c:f5:ec:43:21:99:b5:73:34:57:24:
4a:c6:f1:96:f0:60:59:44:bb:7f:b3:d3:2d:a8:ad:
2a:8e:83:88:36:31:f0:07:5f:87:be:5d:84:d4:00:
30:98:d2:85:6c:a8:73:b4:ae:35:87:e2:9d:c8:0e:
f1:67:ff:a5:2a:3e:76:c3:2e:6a:7d:17:f8:3d:38:
97:75:62:e3:32:f9:a5:06:98:7f:41:ad:88:c1:92:
75:b5:dd:8e:81:48:1b:ba:c5:2a:a3:0a:d0:a4:09:
17:af:de:42:59:88:33:bb:2e:a2:70:3f:7b:8c:ca:
3a:b3:a8:e1:91:46:d7:79:f4:b3:a7:47:c0:b9:27:
76:ca:e5:68:a2:4b:d2:e7:32:3c:e5:af:7f:7d:8b:
9b:f7:30:25:0c:d6:8c:c0:36:d8:35:f8:09:53:f4:
1a:63:5e:4d:2e:6c:5f:2d:09:7b:d4:c6:10:c4:82:
1d:81:19:4b:d7:68:4d:34:80:88:78:21:36:dc:3b:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:30:4D:9C:59:9E:F2:66:7C:CA:07:03:36:90:AA:2A:F8:71:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/orowTZxZnvJmfMoHAzaQqir4ceQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.18.0/24
IPv6:
2a11:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
91:e1:f9:f2:3f:0e:31:2d:b0:f1:14:9d:d2:1c:fa:2b:c2:12:
a0:e3:31:bd:3f:b1:d8:2c:c5:44:93:c7:b6:13:a2:08:b6:3b:
ec:98:49:72:9b:6c:73:c3:86:3a:97:88:7e:49:51:5d:12:ac:
a4:3b:d6:b7:16:dd:e3:ce:8c:0c:12:7a:f5:a9:80:11:7d:0b:
7f:e7:8f:fe:8f:02:a1:5d:aa:20:fb:af:0c:39:91:64:46:95:
f9:1b:ef:90:3f:f7:e3:5b:10:ca:d6:28:5f:5b:1d:0b:9b:3b:
20:22:80:1d:d4:72:0d:bf:53:09:70:b3:38:9a:25:94:a0:2b:
f8:33:50:86:86:65:0c:ea:de:88:97:94:1f:37:a9:d8:8d:43:
a1:8e:a3:45:fb:c2:93:ab:ba:df:7e:2e:ad:28:b7:d1:90:5f:
50:bb:84:04:2d:ef:10:b2:03:ba:d0:ac:ce:fb:b7:6d:23:09:
b8:50:51:05:46:2c:e1:89:0a:a8:3e:75:1f:4e:47:1d:fb:35:
84:77:86:ee:64:69:a3:d3:e9:1c:fb:14:4d:0e:7e:aa:57:e9:
78:a7:d3:fa:29:3c:a8:64:60:04:21:3d:55:45:3e:76:1a:08:
06:6c:42:50:e4:59:b6:1f:24:52:c8:5b:30:5f:27:96:3c:e2:
cb:80:f7:a6
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVsrW2aLQaOGDLheUC+OB6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDkzMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmJhMzA0ZDljNTk5ZWYyNjY3Y2NhMDcwMzM2OTBhYTJhZjg3MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w2sd+usX2r4zf0ZTSzDQBdq7wH0
2wknU8G+hBaYNw4SKYBmh7u0eqzO6HqqAyfO8P8hXoAxuJPJit8XgYFSHPXsQyGZ
tXM0VyRKxvGW8GBZRLt/s9MtqK0qjoOINjHwB1+Hvl2E1AAwmNKFbKhztK41h+Kd
yA7xZ/+lKj52wy5qfRf4PTiXdWLjMvmlBph/Qa2IwZJ1td2OgUgbusUqowrQpAkX
r95CWYgzuy6icD97jMo6s6jhkUbXefSzp0fAuSd2yuVookvS5zI85a9/fYub9zAl
DNaMwDbYNfgJU/QaY15NLmxfLQl71MYQxIIdgRlL12hNNICIeCE23DtDOwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKK6ME2cWZ7yZnzKBwM2kKoq+HHkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzMxZjgx
My1lNWMwLTQ4ODItYmQ1My1kMDlkNTMwNmE2ZDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMzFmODEz
LWU1YzAtNDg4Mi1iZDUzLWQwOWQ1MzA2YTZkNy8xL29yb3dUWnhabnZKbWZNb0hB
emFRcWlyNGNlUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwj4SMA0EAgACMAcDBQMqEUoAMA0GCSqGSIb3
DQEBCwUAA4IBAQCR4fnyPw4xLbDxFJ3SHPorwhKg4zG9P7HYLMVEk8e2E6IItjvs
mElym2xzw4Y6l4h+SVFdEqykO9a3Ft3jzowMEnr1qYARfQt/54/+jwKhXaog+68M
OZFkRpX5G++QP/fjWxDK1ihfWx0LmzsgIoAd1HINv1MJcLM4miWUoCv4M1CGhmUM
6t6Il5QfN6nYjUOhjqNF+8KTq7rffi6tKLfRkF9Qu4QELe8QsgO60KzO+7dtIwm4
UFEFRizhiQqoPnUfTkcd+zWEd4buZGmj0+kc+xRNDn6qV+l4p9P6KTyoZGAEIT1V
RT52GggGbEJQ5Fm2HyRSyFswXyeWPOLLgPem
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:40 2024 by rpki-client on console-fra.rpki-client.org