Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t0CwOFwd0BUygOCj5kRLJPlv_zA.cer
File: t0CwOFwd0BUygOCj5kRLJPlv_zA.cer (raw, json)
Hash identifier: EaTj3GQyGBn8nj1+D406ZCOz04uq41TFY03LC+ZlFIg=
Subject key identifier: B7:40:B0:38:5C:1D:D0:15:32:80:E0:A3:E6:44:4B:24:F9:6F:FF:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018737F45569894BCF4E2D188413501EB8B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 31 Mar 2023 13:56:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.140.36.0/22
Validation: Failed, certificate revoked on Wed 05 Apr 2023 06:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:f4:55:69:89:4b:cf:4e:2d:18:84:13:50:1e:b8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 13:56:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b740b0385c1dd0153280e0a3e6444b24f96fff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:ca:74:a4:3b:dd:9f:e1:28:c5:74:a2:ad:
7c:f4:18:d3:c0:21:67:2d:0c:c3:02:a4:17:a8:14:
a6:29:24:8b:8f:95:89:96:7d:0b:0a:1a:b8:64:13:
82:e0:2a:72:d4:b9:a2:44:f4:d8:43:11:1b:e4:50:
47:06:65:7c:cd:80:28:4e:1d:08:99:7a:85:20:ff:
51:a0:dd:14:32:cc:4c:3c:5d:9a:7c:47:39:5c:09:
ea:9d:77:6b:83:b0:93:94:6b:23:6b:4b:a7:fc:b2:
bf:ce:1a:f5:fb:db:fc:e7:3f:04:0d:d1:dc:c7:f5:
69:f6:d0:f1:4d:47:c3:c4:ad:28:cb:1f:6b:ca:54:
cb:43:ad:4a:02:78:fc:1a:58:ce:72:62:a7:0f:d5:
58:3d:fd:c4:a5:1b:5d:8d:27:20:20:2b:a6:8d:c6:
3d:8a:25:78:cf:7b:15:60:30:32:c4:cd:af:d3:64:
6a:ac:bb:10:c8:48:52:a3:9e:ad:ae:55:6c:9e:e2:
dd:ff:e0:37:b7:46:13:88:5e:fe:4c:76:25:09:9e:
fa:6d:fd:ea:93:26:53:9d:e2:13:ce:b7:bd:84:32:
26:3c:dc:99:2e:24:b3:7b:d8:90:84:83:4f:96:f0:
69:e1:14:ae:76:39:ba:52:7a:a5:68:31:18:56:14:
c3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:40:B0:38:5C:1D:D0:15:32:80:E0:A3:E6:44:4B:24:F9:6F:FF:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/43e56663-9a28-4208-9fd2-c275c768a326/0/B740B0385C1DD0153280E0A3E6444B24F96FFF30.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.36.0/22
Signature Algorithm: sha256WithRSAEncryption
54:c9:53:21:3c:10:96:07:76:41:cb:79:e6:12:e1:94:dc:a2:
ec:77:c2:2b:f7:58:5d:1e:d7:f5:e0:27:af:06:47:8a:b6:4b:
cf:a1:1c:9b:42:02:9e:42:ef:5f:31:14:48:31:d4:a8:d5:db:
c1:23:ce:8e:77:a8:b8:68:3c:7a:78:f8:a5:b1:ff:c5:c8:b8:
15:9a:92:c0:39:08:b8:1a:50:79:4d:c9:60:25:36:49:19:2e:
60:f2:03:6d:43:f0:8b:0f:52:f0:04:bc:dd:0e:0d:86:59:6e:
e1:7e:53:8c:c7:69:a0:84:7b:e2:f2:d0:a8:9a:33:73:4c:d7:
bc:1a:dd:71:25:ac:80:95:5c:b6:b8:c5:38:60:66:96:fa:ac:
77:38:53:68:3e:43:c6:2b:2e:34:f5:ff:cd:8e:92:b1:6a:22:
8e:86:c1:ae:f6:e2:88:d6:a8:94:43:d2:18:0c:ee:69:a3:8f:
c9:d2:07:f3:8a:ef:e4:72:94:85:0b:3f:55:00:d3:f7:c0:6c:
98:5d:c3:2e:fc:4a:5b:5f:6b:77:0a:b3:f9:f3:54:26:e0:de:
5c:c0:dc:8a:54:34:23:bf:06:f1:cf:fa:2c:c9:06:1c:e4:0b:
b5:d1:48:95:76:f8:63:17:93:27:86:6a:c7:53:ce:2a:ca:11:
f1:59:e6:b7
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYc39FVpiUvPTi0YhBNQHrizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMzMxMTM1NjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzQwYjAzODVjMWRkMDE1MzI4MGUwYTNlNjQ0NGIyNGY5NmZmZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XLKdKQ73Z/hKMV0oq189BjTwCFn
LQzDAqQXqBSmKSSLj5WJln0LChq4ZBOC4Cpy1LmiRPTYQxEb5FBHBmV8zYAoTh0I
mXqFIP9RoN0UMsxMPF2afEc5XAnqnXdrg7CTlGsja0un/LK/zhr1+9v85z8EDdHc
x/Vp9tDxTUfDxK0oyx9rylTLQ61KAnj8GljOcmKnD9VYPf3EpRtdjScgICumjcY9
iiV4z3sVYDAyxM2v02RqrLsQyEhSo56trlVsnuLd/+A3t0YTiF7+THYlCZ76bf3q
kyZTneITzre9hDImPNyZLiSze9iQhINPlvBp4RSudjm6UnqlaDEYVhTD4wIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFLdAsDhcHdAVMoDgo+ZESyT5b/8wMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE+BggrBgEFBQcBCwSCATAwggEsMF4GCCsGAQUFBzAFhlJy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzQzZTU2
NjYzLTlhMjgtNDIwOC05ZmQyLWMyNzVjNzY4YTMyNi8wMIGLBggrBgEFBQcwCoZ/
cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80M2U1
NjY2My05YTI4LTQyMDgtOWZkMi1jMjc1Yzc2OGEzMjYvMC9CNzQwQjAzODVDMURE
MDE1MzI4MEUwQTNFNjQ0NEIyNEY5NkZGRjMwLm1mdDA8BggrBgEFBQcwDYYwaHR0
cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1sMFkG
A1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LYwkMA0GCSqGSIb3DQEBCwUAA4IBAQBUyVMhPBCWB3ZBy3nmEuGU3KLsd8Ir91hd
Htf14CevBkeKtkvPoRybQgKeQu9fMRRIMdSo1dvBI86Od6i4aDx6ePilsf/FyLgV
mpLAOQi4GlB5TclgJTZJGS5g8gNtQ/CLD1LwBLzdDg2GWW7hflOMx2mghHvi8tCo
mjNzTNe8Gt1xJayAlVy2uMU4YGaW+qx3OFNoPkPGKy409f/NjpKxaiKOhsGu9uKI
1qiUQ9IYDO5po4/J0gfziu/kcpSFCz9VANP3wGyYXcMu/EpbX2t3CrP581Qm4N5c
wNyKVDQjvwbxz/osyQYc5Au10UiVdvhjF5MnhmrHU84qyhHxWea3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:19 2024 by rpki-client on console-fra.rpki-client.org