Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer
File: tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer (raw, json)
Hash identifier: Zo1KJ04J5p1fqFIEMtkZupfoxIANUSkJzupYumvsTyM=
Subject key identifier: B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D613B36FC20D3185615E5784050C9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 93.177.106.0/24
IP: 2a11:f9c0::/29
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:61:3b:36:fc:20:d3:18:56:15:e5:78:40:50:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b549a600df1ad7974fa80e3466b5b76441393759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:92:a2:7a:3f:48:d2:51:98:06:df:bd:3f:
af:3d:22:2a:a2:10:84:1a:11:82:6b:62:17:25:a1:
c6:36:47:e4:0d:db:a6:8d:af:b6:4c:ae:c9:7c:98:
5b:52:89:b8:71:49:25:04:39:8f:80:44:c3:42:08:
d1:a4:f7:ee:64:5e:e2:eb:b8:4f:f8:bc:54:2b:dc:
f2:45:da:b1:9e:65:55:03:29:be:dc:d4:a9:a6:ae:
7a:67:b8:91:7b:9e:a8:2e:5d:2c:e3:00:44:67:29:
93:82:97:3e:a8:69:b2:0e:1a:91:fd:6d:e1:4a:0d:
f2:fc:12:96:bb:8b:c5:d8:3e:6c:af:34:a6:b3:1e:
75:f6:88:ca:f8:f1:f4:7f:d0:8e:72:a0:92:5b:f9:
68:38:29:31:6f:7e:f9:e7:20:94:9f:9e:79:e5:90:
24:86:f7:3a:23:7d:b8:55:8e:42:42:e3:2e:77:e3:
95:09:64:4f:76:3e:11:1a:8f:dd:ab:88:ef:23:82:
50:57:71:f1:cf:20:5a:51:81:c3:88:7c:8c:ff:90:
f8:63:1d:85:9f:79:2c:36:6c:84:44:5b:9d:f8:0a:
5d:fc:9d:6b:bc:fa:7b:d7:89:bb:ff:f4:e7:62:43:
77:88:fd:dd:81:a9:41:15:02:8c:02:c7:ad:77:7d:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.106.0/24
IPv6:
2a11:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:68:1c:22:8b:99:8d:1d:ce:7d:c9:be:ec:b1:af:d9:e3:0d:
f7:bc:a8:7d:52:b9:8d:32:ba:fd:d8:95:25:5e:e9:da:15:53:
9b:0d:c1:c2:f4:5f:3f:e5:a7:c9:9d:02:df:a3:a2:53:51:32:
e3:6a:91:66:dd:52:d6:82:93:37:05:dc:82:4b:55:a6:8b:2d:
db:8f:f8:e7:9e:56:16:0c:fd:b8:13:21:31:bd:7e:b2:9c:1a:
45:d1:60:40:82:2a:54:bf:bb:c1:83:41:18:87:fb:26:42:3b:
b2:f3:cc:d2:d0:b1:b5:68:06:36:5c:78:bc:c5:29:af:5c:2a:
29:eb:e1:e7:73:75:ef:64:5b:ad:02:47:8a:2e:cb:c8:2b:0e:
d6:f0:fc:b2:86:87:a9:34:ba:5e:64:25:d9:8f:78:34:2b:49:
a0:95:37:62:39:b5:68:00:32:3a:3e:80:7f:62:3e:e7:bb:e4:
b2:26:b0:20:af:91:83:d4:c9:98:96:95:6c:b1:2f:20:c5:09:
e5:f2:c0:ec:2a:c3:d3:f0:9a:f1:06:0c:9d:42:ad:35:94:b8:
9b:a4:60:88:c1:86:05:10:ba:36:30:e4:ba:43:b5:11:04:39:
c2:bb:37:0c:9d:12:e3:81:72:cb:f1:76:31:84:8b:90:7d:d6:
07:10:2c:22
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzCbWE7Nvwg0xhWFeV4QFDJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTQ5YTYwMGRmMWFkNzk3NGZhODBlMzQ2NmI1Yjc2NDQxMzkzNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrqSono/SNJRmAbfvT+vPSIqohCE
GhGCa2IXJaHGNkfkDdumja+2TK7JfJhbUom4cUklBDmPgETDQgjRpPfuZF7i67hP
+LxUK9zyRdqxnmVVAym+3NSppq56Z7iRe56oLl0s4wBEZymTgpc+qGmyDhqR/W3h
Sg3y/BKWu4vF2D5srzSmsx519ojK+PH0f9COcqCSW/loOCkxb3755yCUn5555ZAk
hvc6I324VY5CQuMud+OVCWRPdj4RGo/dq4jvI4JQV3HxzyBaUYHDiHyM/5D4Yx2F
n3ksNmyERFud+Apd/J1rvPp714m7//TnYkN3iP3dgalBFQKMAsetd303gwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLVJpgDfGteXT6gONGa1t2RBOTdZMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2YzYTA3
Ni0yN2NhLTRjYjEtOGVmYS01ODNmYWY4MjdmYTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvZjNhMDc2
LTI3Y2EtNGNiMS04ZWZhLTU4M2ZhZjgyN2ZhMC8xL3RVbW1BTjhhMTVkUHFBNDBa
clczWkVFNU4xay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAXbFqMA0EAgACMAcDBQMqEfnAMA0GCSqGSIb3
DQEBCwUAA4IBAQAxaBwii5mNHc59yb7ssa/Z4w33vKh9UrmNMrr92JUlXunaFVOb
DcHC9F8/5afJnQLfo6JTUTLjapFm3VLWgpM3BdyCS1Wmiy3bj/jnnlYWDP24EyEx
vX6ynBpF0WBAgipUv7vBg0EYh/smQjuy88zS0LG1aAY2XHi8xSmvXCop6+Hnc3Xv
ZFutAkeKLsvIKw7W8PyyhoepNLpeZCXZj3g0K0mglTdiObVoADI6PoB/Yj7nu+Sy
JrAgr5GD1MmYlpVssS8gxQnl8sDsKsPT8JrxBgydQq01lLibpGCIwYYFELo2MOS6
Q7URBDnCuzcMnRLjgXLL8XYxhIuQfdYHECwi
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:23 2024 by rpki-client on console-fra.rpki-client.org