Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/smHE2mY-NKyJDf31N_Dn6RLz_8w.cer
File: smHE2mY-NKyJDf31N_Dn6RLz_8w.cer (raw, json)
Hash identifier: loaFLfjZnYHLUxJZpjCTQmDjZIIiBM4PoClU8+KReGQ=
Subject key identifier: B2:61:C4:DA:66:3E:34:AC:89:0D:FD:F5:37:F0:E7:E9:12:F3:FF:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED2D550D23B887719820A6A01D5D076
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/smHE2mY-NKyJDf31N_Dn6RLz_8w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:33:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 203450
IP: 185.134.160.0/22
IP: 2a06:ed40::/29
Validation: Failed, certificate revoked on Mon 13 Feb 2023 14:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d2:d5:50:d2:3b:88:77:19:82:0a:6a:01:d5:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b261c4da663e34ac890dfdf537f0e7e912f3ffcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:fb:eb:6b:1f:ba:f1:8f:60:f9:00:d1:a3:
7f:e2:e7:1f:bb:bd:63:a2:c2:3a:7c:af:7d:fa:ad:
4c:45:c0:94:0d:b6:80:a7:b8:82:9d:2a:20:73:9b:
e8:70:fd:f1:f2:bb:99:7a:41:5f:c7:82:f6:24:19:
fa:35:e2:ec:d4:fb:db:71:d1:c5:13:05:5a:58:b6:
e3:e7:91:db:ae:aa:c4:de:7f:ee:c2:37:31:6b:0d:
1e:fc:c5:7c:65:7a:53:d3:9e:30:b8:12:3c:5c:7c:
7c:6f:be:ee:d5:00:ce:1d:d9:65:b0:55:22:52:ad:
0f:63:96:9f:12:e1:de:2a:6f:11:06:86:59:26:d1:
4a:be:67:b5:39:c5:7e:59:86:dc:ac:88:8e:44:18:
38:bd:36:34:6b:2f:85:da:2e:7e:0d:ea:2d:23:a0:
2d:1f:f2:d6:f8:e2:f7:f9:37:a8:91:e5:44:4a:26:
ee:64:ae:77:ad:7d:27:c0:4e:20:82:a0:cb:6c:5a:
20:39:e8:5d:dd:dd:5b:23:d3:9c:a8:0b:ca:56:a5:
51:67:24:8f:60:c7:1a:d2:60:ed:d4:4b:16:30:a1:
d5:34:79:f1:1f:01:c9:f0:28:7e:26:41:22:45:5a:
15:93:13:7d:59:4a:b7:7f:ad:9c:04:93:81:1c:4a:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:61:C4:DA:66:3E:34:AC:89:0D:FD:F5:37:F0:E7:E9:12:F3:FF:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b756-3622-4d61-845c-7de2b81df2a7/1/smHE2mY-NKyJDf31N_Dn6RLz_8w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.160.0/22
IPv6:
2a06:ed40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203450
Signature Algorithm: sha256WithRSAEncryption
3a:0c:1a:97:72:84:b5:20:3e:5b:c2:49:7e:d6:73:13:87:15:
1b:6f:ed:14:f1:5f:46:c6:73:a9:90:2f:dc:0e:e7:e5:f6:8a:
4c:fb:6d:e1:36:1a:85:f2:80:16:5e:b8:ad:43:12:79:b2:b1:
04:6c:51:a7:35:cd:55:56:54:71:38:74:d4:4b:e3:95:5e:87:
81:01:fa:0c:bb:9d:03:d9:d6:e1:06:f6:a5:23:c6:65:7e:95:
1c:79:95:ef:3b:ae:04:c6:1d:02:2e:c5:5a:c9:64:56:84:0a:
a0:6b:26:ad:89:bc:dd:c3:bb:b8:fd:4f:bf:66:92:5f:08:6e:
d8:24:ea:0f:69:d5:c0:2f:d1:6d:87:6d:d9:1c:e0:34:61:ab:
ae:65:13:16:ca:83:9a:93:56:5c:69:93:15:5c:f0:5b:f6:02:
44:70:e5:46:dd:8d:7f:36:7c:d6:09:42:90:d0:d3:5d:50:d5:
38:d2:f2:5e:8e:79:12:1f:1a:a9:78:5d:bf:38:82:15:a5:1d:
e8:e7:61:00:a8:3c:1f:e8:b4:7d:41:a3:ee:96:50:a2:24:98:
2e:6f:2b:f8:82:4b:76:cd:e5:a8:bf:49:51:9d:de:f4:d1:43:
2d:41:64:8e:40:fa:2c:d8:2a:57:4a:c0:82:67:dd:66:b7:c9:
67:a2:aa:58
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAYVu0tVQ0juIdxmCCmoB1dB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzMzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjYxYzRkYTY2M2UzNGFjODkwZGZkZjUzN2YwZTdlOTEyZjNmZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWf762sfuvGPYPkA0aN/4ucfu71j
osI6fK99+q1MRcCUDbaAp7iCnSogc5vocP3x8ruZekFfx4L2JBn6NeLs1PvbcdHF
EwVaWLbj55HbrqrE3n/uwjcxaw0e/MV8ZXpT054wuBI8XHx8b77u1QDOHdllsFUi
Uq0PY5afEuHeKm8RBoZZJtFKvme1OcV+WYbcrIiORBg4vTY0ay+F2i5+DeotI6At
H/LW+OL3+TeokeVESibuZK53rX0nwE4ggqDLbFogOehd3d1bI9OcqAvKVqVRZySP
YMca0mDt1EsWMKHVNHnxHwHJ8Ch+JkEiRVoVkxN9WUq3f62cBJOBHEoIPQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLJhxNpmPjSsiQ399Tfw5+kS8//MMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2U0Yjc1
Ni0zNjIyLTRkNjEtODQ1Yy03ZGUyYjgxZGYyYTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZTRiNzU2
LTM2MjItNGQ2MS04NDVjLTdkZTJiODFkZjJhNy8xL3NtSEUybVktTkt5SkRmMzFO
X0RuNlJMel84dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYagMA0EAgACMAcDBQMqBu1AMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMaujANBgkqhkiG9w0BAQsFAAOCAQEAOgwal3KEtSA+
W8JJftZzE4cVG2/tFPFfRsZzqZAv3A7n5faKTPtt4TYahfKAFl64rUMSebKxBGxR
pzXNVVZUcTh01EvjlV6HgQH6DLudA9nW4Qb2pSPGZX6VHHmV7zuuBMYdAi7FWslk
VoQKoGsmrYm83cO7uP1Pv2aSXwhu2CTqD2nVwC/RbYdt2RzgNGGrrmUTFsqDmpNW
XGmTFVzwW/YCRHDlRt2NfzZ81glCkNDTXVDVONLyXo55Eh8aqXhdvziCFaUd6Odh
AKg8H+i0fUGj7pZQoiSYLm8r+IJLds3lqL9JUZ3e9NFDLUFkjkD6LNgqV0rAgmfd
ZrfJZ6KqWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:16 2024 by rpki-client on console-fra.rpki-client.org