Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p6liQrSRliK_KZSdJxOPZBKjbxc.cer
File: p6liQrSRliK_KZSdJxOPZBKjbxc.cer (raw, json)
Hash identifier: VJK/ZsyTfdxb4bWzuBCnfQQjz/8jD9KaGteU+aq8xt0=
Subject key identifier: A7:A9:62:42:B4:91:96:22:BF:29:94:9D:27:13:8F:64:12:A3:6F:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4E8C965F92E1F790AD8860CB15354
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/p6liQrSRliK_KZSdJxOPZBKjbxc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.36.144.0/22
IP: 2a00:e920::/32
Validation: Failed, certificate revoked on Mon 17 Jul 2023 10:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:e8:c9:65:f9:2e:1f:79:0a:d8:86:0c:b1:53:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7a96242b4919622bf29949d27138f6412a36f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:40:1d:7f:86:11:cd:1e:6b:27:58:ea:45:
68:f0:aa:6e:11:65:14:d1:01:45:43:33:61:af:ea:
f9:40:f5:8d:06:0a:8b:66:88:63:97:61:a0:d2:de:
e5:7c:3e:43:cd:a0:51:b6:65:07:2c:f6:18:bb:a5:
c6:21:f8:bd:e0:c4:27:a8:9c:13:df:59:97:82:2f:
89:9b:70:72:16:4d:b0:59:63:a7:2a:79:1b:55:f9:
fb:c2:8d:33:be:23:43:a4:d7:7d:05:94:33:1a:b4:
c3:dc:0f:a7:1d:03:24:c1:24:02:d5:3a:a4:8f:e0:
7a:fb:7a:60:45:22:5a:06:42:ee:3d:a4:09:11:32:
79:b6:b7:8d:a2:94:76:75:ba:e9:ed:49:f5:0a:88:
a0:5a:fb:c7:97:29:bd:33:14:59:53:04:07:06:8d:
bb:41:3d:eb:63:55:2c:14:cf:4b:e5:58:ba:13:5b:
68:08:dd:58:a0:fe:2a:54:cf:d5:6b:1a:36:37:7b:
78:9b:fa:0b:e8:82:86:94:38:3b:3f:bb:e0:07:e5:
d7:a1:da:65:99:4e:ad:95:dd:e2:dc:25:0c:77:ee:
bd:67:0a:00:80:0e:66:65:34:ac:67:f4:2d:c4:f7:
14:9f:cf:6a:5d:3e:d9:47:44:98:55:59:0b:6a:89:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A9:62:42:B4:91:96:22:BF:29:94:9D:27:13:8F:64:12:A3:6F:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/8dbf34-d49a-4e5c-80cd-6acdf4751a48/1/p6liQrSRliK_KZSdJxOPZBKjbxc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.144.0/22
IPv6:
2a00:e920::/32
Signature Algorithm: sha256WithRSAEncryption
43:b0:b6:45:c0:fd:84:9e:71:73:3a:ed:98:0b:70:11:24:2b:
ba:f5:18:b8:e6:b7:8e:2b:18:08:e7:1b:d8:c6:97:43:30:6c:
86:24:50:fb:7b:d3:23:04:f4:31:fb:04:17:0f:ae:4f:9b:0b:
a8:3b:6e:fc:5f:11:c1:3e:48:0a:f0:31:02:c6:5f:b4:b6:ae:
0a:0c:dd:fc:b7:59:64:06:d1:cc:04:6e:e5:24:c6:e7:d8:4b:
0f:1c:9b:41:2b:15:6e:fc:41:39:7b:7b:a4:ad:40:05:3a:9e:
9d:bb:c2:be:d6:1c:bb:19:ae:cd:eb:3f:57:9f:f9:a9:f3:15:
49:e1:d5:51:62:86:5e:9e:b6:52:d9:8c:c2:a8:18:b4:a7:62:
5e:17:92:78:f5:56:cf:2e:04:0d:32:02:7f:6a:e8:58:f1:ef:
97:9b:06:60:70:34:37:84:1f:6a:33:94:37:d0:be:cc:3d:20:
8b:8e:45:f0:bb:29:8a:41:4a:ed:bd:45:f7:b4:cb:59:74:f8:
15:6b:0d:d0:9e:68:d4:41:4d:c5:ca:ea:e4:69:5d:79:d7:12:
35:96:cc:dc:3e:8a:97:69:a3:e5:37:03:fb:da:8b:72:30:38:
b3:54:01:3a:6f:80:49:e5:68:59:42:20:57:91:16:21:2d:18:
4b:04:e1:b3
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVq9OjJZfkuH3kK2IYMsVNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDEzMTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2E5NjI0MmI0OTE5NjIyYmYyOTk0OWQyNzEzOGY2NDEyYTM2ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjudAHX+GEc0eaydY6kVo8KpuEWUU
0QFFQzNhr+r5QPWNBgqLZohjl2Gg0t7lfD5DzaBRtmUHLPYYu6XGIfi94MQnqJwT
31mXgi+Jm3ByFk2wWWOnKnkbVfn7wo0zviNDpNd9BZQzGrTD3A+nHQMkwSQC1Tqk
j+B6+3pgRSJaBkLuPaQJETJ5treNopR2dbrp7Un1CoigWvvHlym9MxRZUwQHBo27
QT3rY1UsFM9L5Vi6E1toCN1YoP4qVM/Vaxo2N3t4m/oL6IKGlDg7P7vgB+XXodpl
mU6tld3i3CUMd+69ZwoAgA5mZTSsZ/QtxPcUn89qXT7ZR0SYVVkLaokUKQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKepYkK0kZYivymUnScTj2QSo28XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzhkYmYz
NC1kNDlhLTRlNWMtODBjZC02YWNkZjQ3NTFhNDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvOGRiZjM0
LWQ0OWEtNGU1Yy04MGNkLTZhY2RmNDc1MWE0OC8xL3A2bGlRclNSbGlLX0taU2RK
eE9QWkJLamJ4Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuSSQMA0EAgACMAcDBQAqAOkgMA0GCSqGSIb3
DQEBCwUAA4IBAQBDsLZFwP2EnnFzOu2YC3ARJCu69Ri45reOKxgI5xvYxpdDMGyG
JFD7e9MjBPQx+wQXD65PmwuoO278XxHBPkgK8DECxl+0tq4KDN38t1lkBtHMBG7l
JMbn2EsPHJtBKxVu/EE5e3ukrUAFOp6du8K+1hy7Ga7N6z9Xn/mp8xVJ4dVRYoZe
nrZS2YzCqBi0p2JeF5J49VbPLgQNMgJ/auhY8e+XmwZgcDQ3hB9qM5Q30L7MPSCL
jkXwuymKQUrtvUX3tMtZdPgVaw3QnmjUQU3FyurkaV151xI1lszcPoqXaaPlNwP7
2otyMDizVAE6b4BJ5WhZQiBXkRYhLRhLBOGz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:55 2024 by rpki-client on console-ams.rpki-client.org