Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tKCckAqFeL0CnQTek6f_MEfTj4M.cer
File: tKCckAqFeL0CnQTek6f_MEfTj4M.cer (raw, json)
Hash identifier: Dmjq11l7bRpqs0+3z45VRhcdGCM+uC0ZSwk8bz6/ukw=
Subject key identifier: B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B82ECE2DF9C3244BDF383C1DF693D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/tKCckAqFeL0CnQTek6f_MEfTj4M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:08 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 94.143.226.0/24
IP: 2a12:8f80::/29
Validation: Failed, certificate revoked on Wed 07 Feb 2024 08:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:2e:ce:2d:f9:c3:24:4b:df:38:3c:1d:f6:93:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4a09c900a8578bd029d04de93a7ff3047d38f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:40:0f:ac:5a:73:20:f7:3d:4d:f1:c8:42:
f2:fa:04:09:1c:8d:66:69:70:e9:9b:a8:f5:ad:ab:
74:7a:c4:b7:0a:27:07:28:3f:7b:6d:1c:32:db:e7:
d2:12:de:6d:ba:36:b3:72:cd:ee:74:55:d9:2c:d5:
d0:66:7e:e4:59:80:2b:26:17:5b:39:b2:dd:85:e7:
7b:66:26:cf:9e:e8:fe:d4:3c:6a:77:bf:8c:21:f5:
af:83:41:7c:ee:2e:79:cb:df:aa:7d:49:1d:67:eb:
62:c7:fc:22:b1:eb:dc:a9:b1:77:09:49:c9:ff:42:
1a:3e:ae:2e:ef:b3:4d:6e:2b:57:9c:4e:06:b5:58:
09:56:e8:92:95:87:92:d9:0d:b3:0d:03:da:6e:af:
73:e0:9b:08:43:8c:9a:8a:2d:b7:fc:b3:9f:33:b8:
90:1e:c0:8a:8a:2b:36:29:d0:d4:04:c2:88:4e:89:
40:27:26:41:87:19:08:0a:f4:a9:cf:55:63:09:ba:
bf:b1:a1:96:44:d0:1a:5c:c7:4a:b6:34:08:bf:27:
e1:93:9e:96:d3:62:45:b4:c6:c7:0b:96:7f:a8:75:
07:47:1f:64:d6:2c:6f:ec:5a:60:29:7d:ae:14:38:
43:68:b1:74:40:e0:5d:7c:0d:db:dc:46:d9:33:c0:
14:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A0:9C:90:0A:85:78:BD:02:9D:04:DE:93:A7:FF:30:47:D3:8F:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1327e9-6a8e-4d90-8fcd-6c8c3c041629/1/tKCckAqFeL0CnQTek6f_MEfTj4M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.226.0/24
IPv6:
2a12:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
63:eb:41:89:79:9b:93:13:15:41:d0:58:a9:55:4f:1b:ff:45:
76:a6:68:32:f9:7d:14:e2:8d:07:f9:f0:cd:d1:09:17:c4:30:
f1:64:25:84:cf:77:9f:2c:29:8d:07:8e:47:fa:7c:50:f4:15:
a8:aa:bd:ca:97:93:e9:cd:c7:e5:90:cb:81:24:6e:df:9c:c2:
17:c7:d0:06:91:64:35:d3:41:c8:c4:88:57:b4:22:90:31:43:
68:da:f9:a8:34:a0:c7:33:36:3e:8f:cb:f6:c8:a4:fe:ee:d1:
2f:9b:e5:fd:c5:07:d4:09:78:2e:bc:06:5b:c7:66:d7:40:7f:
af:4a:0e:2c:b0:cf:30:7b:66:13:18:fd:2a:e3:3b:bf:a6:8e:
77:20:f3:b0:63:22:b7:0a:23:43:4b:89:c6:5a:87:3a:92:95:
f7:54:4d:ac:3c:ff:06:69:c1:ff:d1:ff:4e:8e:d1:3c:ad:9f:
b8:3d:fc:c7:0b:bc:00:69:93:90:b0:f6:49:31:8f:ae:5e:21:
c3:c7:5d:fd:16:3e:7c:e6:8d:39:83:95:46:b5:62:75:d8:fe:
d6:8f:f5:4b:fe:47:31:6e:ca:f4:f4:95:89:3e:ca:35:b4:6f:
36:cc:68:01:d8:4d:7e:b5:82:9e:c9:8d:f0:f7:24:5f:13:d1:
8f:0d:c9:9f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzGuC7OLfnDJEvfODwd9pPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGEwOWM5MDBhODU3OGJkMDI5ZDA0ZGU5M2E3ZmYzMDQ3ZDM4ZjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfdAD6xacyD3PU3xyELy+gQJHI1m
aXDpm6j1rat0esS3CicHKD97bRwy2+fSEt5tujazcs3udFXZLNXQZn7kWYArJhdb
ObLdhed7ZibPnuj+1Dxqd7+MIfWvg0F87i55y9+qfUkdZ+tix/wisevcqbF3CUnJ
/0IaPq4u77NNbitXnE4GtVgJVuiSlYeS2Q2zDQPabq9z4JsIQ4yaii23/LOfM7iQ
HsCKiis2KdDUBMKITolAJyZBhxkICvSpz1VjCbq/saGWRNAaXMdKtjQIvyfhk56W
02JFtMbHC5Z/qHUHRx9k1ixv7FpgKX2uFDhDaLF0QOBdfA3b3EbZM8AU7QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLSgnJAKhXi9Ap0E3pOn/zBH04+DMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzEzMjdl
OS02YThlLTRkOTAtOGZjZC02YzhjM2MwNDE2MjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvMTMyN2U5
LTZhOGUtNGQ5MC04ZmNkLTZjOGMzYzA0MTYyOS8xL3RLQ2NrQXFGZUwwQ25RVGVr
NmZfTUVmVGo0TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXo/iMA0EAgACMAcDBQMqEo+AMA0GCSqGSIb3
DQEBCwUAA4IBAQBj60GJeZuTExVB0FipVU8b/0V2pmgy+X0U4o0H+fDN0QkXxDDx
ZCWEz3efLCmNB45H+nxQ9BWoqr3Kl5PpzcflkMuBJG7fnMIXx9AGkWQ100HIxIhX
tCKQMUNo2vmoNKDHMzY+j8v2yKT+7tEvm+X9xQfUCXguvAZbx2bXQH+vSg4ssM8w
e2YTGP0q4zu/po53IPOwYyK3CiNDS4nGWoc6kpX3VE2sPP8GacH/0f9OjtE8rZ+4
PfzHC7wAaZOQsPZJMY+uXiHDx139Fj585o05g5VGtWJ12P7Wj/VL/kcxbsr09JWJ
Pso1tG82zGgB2E1+tYKeyY3w9yRfE9GPDcmf
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:21 2024 by rpki-client on console-fra.rpki-client.org