Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9JZXuhhEmqHpyA3gsX1ngImHoE.cer
File: s9JZXuhhEmqHpyA3gsX1ngImHoE.cer (raw, json)
Hash identifier: 2qbz8N1SsJPYzdXGF2vOMKNo//lbtvv6cIUwu3YH7vY=
Subject key identifier: B3:D2:59:5E:E8:61:12:6A:87:A7:20:37:82:C5:F5:9E:02:26:1E:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B941540DEC0122789F855C5CE4E433
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 152.89.198.0/24
IP: 2a12:d080::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 11:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:41:54:0d:ec:01:22:78:9f:85:5c:5c:e4:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3d2595ee861126a87a7203782c5f59e02261e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:25:6f:b2:58:f5:11:8b:d5:c5:87:02:60:
0c:22:81:eb:68:18:82:5c:39:98:69:9a:a6:54:79:
4c:39:9a:cc:4b:f2:32:f4:12:21:7e:9e:9f:f2:2c:
af:8e:db:82:0f:fe:b6:69:b7:bc:70:b6:14:99:5a:
30:b2:51:2e:cf:93:86:54:ac:80:45:90:4e:8b:b6:
40:6c:41:f9:64:2f:4e:8d:30:76:b8:e1:d8:9c:b9:
ed:c5:96:f6:4e:a9:cc:bb:c4:57:b9:08:9c:f2:df:
a6:12:df:0a:6a:52:f2:0a:8a:3e:cd:2a:63:1e:cc:
f0:41:e4:65:9d:26:75:87:16:0f:b2:da:b0:be:35:
80:36:42:5d:ce:f1:95:21:20:83:27:06:9d:f7:c4:
8f:87:fb:35:22:c4:c8:17:dc:01:5a:4b:5f:97:e6:
e6:61:e7:f6:e4:e5:ea:16:1c:7c:01:9c:fd:18:fc:
03:ea:08:e3:e1:ab:f3:23:16:42:75:66:18:5d:9d:
83:8b:7f:04:29:14:de:b0:11:df:d1:d5:81:11:4e:
8f:16:50:76:cc:33:38:50:55:15:b3:f6:52:71:10:
c0:24:e8:ad:f5:fb:36:fc:ad:58:c9:6b:5b:26:6c:
eb:05:ad:af:8d:10:49:8d:19:a7:76:5f:eb:87:f4:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:59:5E:E8:61:12:6A:87:A7:20:37:82:C5:F5:9E:02:26:1E:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/30b2dc-43bf-4497-8b44-2c3e3b593646/1/s9JZXuhhEmqHpyA3gsX1ngImHoE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.198.0/24
IPv6:
2a12:d080::/29
Signature Algorithm: sha256WithRSAEncryption
59:0a:ad:a3:de:07:ee:22:65:04:49:36:53:df:9a:e6:0c:e7:
c3:10:4a:92:43:4a:ca:94:f3:0e:06:c5:41:3b:f8:70:7f:59:
46:f2:bd:58:2e:55:8b:b4:28:10:02:dd:9e:03:c7:9e:96:0d:
2a:80:74:26:22:e6:ef:90:e0:56:c6:68:94:c1:f7:e3:ee:aa:
0a:a6:cf:6f:74:0f:52:36:8c:11:5d:24:9a:43:f1:49:26:28:
e2:4b:65:1b:c2:cb:c4:03:f7:d1:54:3e:b9:ef:55:56:de:54:
fa:fa:81:89:08:65:83:e2:2d:64:62:03:68:87:c9:bd:e5:b1:
af:e6:c6:6f:1e:22:91:2d:35:b6:a1:5c:3c:09:91:8d:2b:d7:
f4:c6:0f:eb:77:d8:8e:48:9e:d6:de:58:d9:29:11:e3:b7:66:
76:c6:5f:d1:a0:9c:33:08:46:ea:9f:13:59:0e:6a:b0:0a:91:
fa:cc:a6:f5:a8:53:91:bf:29:38:5f:88:02:2f:82:0e:b4:49:
84:44:e5:a6:5b:46:55:b0:6c:ec:1d:23:56:2f:f3:2a:d1:1f:
40:0c:c0:bd:35:28:2a:bf:20:65:8d:e3:e5:f3:a8:70:61:fd:
e0:02:54:d3:83:27:47:36:25:ef:af:db:df:fd:38:34:03:ea:
bd:99:90:08
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGuUFUDewBInifhVxc5OQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2QyNTk1ZWU4NjExMjZhODdhNzIwMzc4MmM1ZjU5ZTAyMjYxZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRIlb7JY9RGL1cWHAmAMIoHraBiC
XDmYaZqmVHlMOZrMS/Iy9BIhfp6f8iyvjtuCD/62abe8cLYUmVowslEuz5OGVKyA
RZBOi7ZAbEH5ZC9OjTB2uOHYnLntxZb2TqnMu8RXuQic8t+mEt8KalLyCoo+zSpj
HszwQeRlnSZ1hxYPstqwvjWANkJdzvGVISCDJwad98SPh/s1IsTIF9wBWktfl+bm
Yef25OXqFhx8AZz9GPwD6gjj4avzIxZCdWYYXZ2Di38EKRTesBHf0dWBEU6PFlB2
zDM4UFUVs/ZScRDAJOit9fs2/K1YyWtbJmzrBa2vjRBJjRmndl/rh/RGHQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLPSWV7oYRJqh6cgN4LF9Z4CJh6BMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzMwYjJk
Yy00M2JmLTQ0OTctOGI0NC0yYzNlM2I1OTM2NDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMzBiMmRj
LTQzYmYtNDQ5Ny04YjQ0LTJjM2UzYjU5MzY0Ni8xL3M5SlpYdWhoRW1xSHB5QTNn
c1gxbmdJbUhvRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAmFnGMA0EAgACMAcDBQMqEtCAMA0GCSqGSIb3
DQEBCwUAA4IBAQBZCq2j3gfuImUESTZT35rmDOfDEEqSQ0rKlPMOBsVBO/hwf1lG
8r1YLlWLtCgQAt2eA8eelg0qgHQmIubvkOBWxmiUwffj7qoKps9vdA9SNowRXSSa
Q/FJJijiS2UbwsvEA/fRVD6571VW3lT6+oGJCGWD4i1kYgNoh8m95bGv5sZvHiKR
LTW2oVw8CZGNK9f0xg/rd9iOSJ7W3ljZKRHjt2Z2xl/RoJwzCEbqnxNZDmqwCpH6
zKb1qFORvyk4X4gCL4IOtEmEROWmW0ZVsGzsHSNWL/Mq0R9ADMC9NSgqvyBljePl
86hwYf3gAlTTgydHNiXvr9vf/Tg0A+q9mZAI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:10 2024 by rpki-client on console-fra.rpki-client.org