Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tbuiCdSxlWuVZWnXKkMVREjU3AM.cer
File: tbuiCdSxlWuVZWnXKkMVREjU3AM.cer (raw, json)
Hash identifier: oSDSXZOxdoXV+Eiq8+dkxw7hLpgzYP8F7kmaWW388xU=
Subject key identifier: B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185BB1068CB258BA58748FED369F043AFAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 16 Jan 2023 14:51:32 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 58142
IP: 2a00:6d60::/32
Validation: Failed, certificate revoked on Tue 14 Feb 2023 15:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:10:68:cb:25:8b:a5:87:48:fe:d3:69:f0:43:af:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 16 14:51:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5bba209d4b1956b956569d72a43154448d4dc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:9a:ce:2a:f8:e3:db:72:c0:d1:a1:33:d2:
1a:27:a9:d5:10:ef:b1:29:74:60:39:92:85:fb:63:
ea:f8:ef:19:2c:57:4e:00:c3:1e:58:72:fd:cf:db:
6d:cd:70:89:5a:bb:ed:58:db:ae:dc:5d:3c:0c:cf:
1b:ff:8e:3a:a9:5a:04:5f:27:1b:23:04:fd:b5:eb:
96:20:bb:ed:fb:43:d0:03:85:22:9f:15:86:b5:b5:
56:7e:69:c9:08:3b:11:b9:18:15:a7:50:16:da:d0:
f8:26:6e:da:f9:f9:55:4c:fd:61:7d:23:36:b8:03:
46:92:80:5b:bd:37:f9:da:36:82:2d:69:6c:d6:97:
50:85:84:95:32:2c:1d:85:f6:4d:b7:b4:5b:c8:5a:
b8:66:7b:25:30:cb:69:06:40:57:3f:2c:b7:05:63:
cb:9c:21:fe:ca:28:93:45:21:49:75:60:1b:d8:d8:
54:b9:ce:6e:a8:cd:98:c6:09:9a:2d:78:71:ba:e7:
5a:dd:3a:ec:14:7e:0a:d8:8c:a6:af:c6:cd:a2:90:
91:21:3d:1b:ee:99:ab:97:64:14:c4:fd:c5:46:e2:
b6:83:4f:6a:28:00:66:86:e7:d9:37:1e:f7:37:25:
b8:ea:6b:ac:84:61:cd:44:00:ce:35:3c:9b:43:77:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:A2:09:D4:B1:95:6B:95:65:69:D7:2A:43:15:44:48:D4:DC:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b49202-6904-42fb-86f7-746400ae2f5e/1/tbuiCdSxlWuVZWnXKkMVREjU3AM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:6d60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58142
Signature Algorithm: sha256WithRSAEncryption
04:62:73:e8:33:31:18:34:a0:20:31:a9:f3:6e:25:b7:de:3a:
16:79:59:25:54:00:3c:6a:94:c6:df:1c:64:83:fe:4f:dd:b5:
a8:b5:b0:46:8d:93:a0:8b:72:12:c1:28:e8:5a:c8:6f:cd:53:
a0:78:98:07:be:37:e8:d0:78:d1:82:6f:c6:77:3e:c2:26:d1:
5f:c6:60:f8:c8:0b:b4:19:ef:11:1a:f2:4c:67:fa:2c:2e:8b:
20:36:32:c9:c3:13:52:81:6c:dc:8d:db:22:f3:dc:b6:af:53:
52:23:29:17:43:49:df:89:05:e4:1d:58:40:a7:27:6f:5a:6b:
05:0b:e5:77:d7:d1:fc:92:46:26:2b:7e:e1:da:95:75:64:20:
3e:55:33:17:0f:15:72:14:4a:d0:c7:8d:13:97:7b:f8:4e:36:
8a:8e:4a:a6:3c:29:43:a2:2b:6d:c2:01:30:38:e1:aa:a6:b8:
87:e1:43:2d:b7:2d:9b:03:60:6f:ec:d7:ca:f2:b8:be:79:5d:
54:65:5d:7a:89:e0:2c:d3:0a:7a:c2:7f:04:14:e5:9c:ae:b2:
ce:db:43:c1:83:f9:eb:6f:cf:ac:5e:b4:49:3d:5b:7a:a6:d9:
ed:fe:62:48:0f:fa:43:8b:36:54:07:60:d7:ba:10:76:45:b9:
6f:13:52:2a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgISAYW7EGjLJYulh0j+02nwQ6+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTE2MTQ1MTMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWJiYTIwOWQ0YjE5NTZiOTU2NTY5ZDcyYTQzMTU0NDQ4ZDRkYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBiazir449tywNGhM9IaJ6nVEO+x
KXRgOZKF+2Pq+O8ZLFdOAMMeWHL9z9ttzXCJWrvtWNuu3F08DM8b/446qVoEXycb
IwT9teuWILvt+0PQA4UinxWGtbVWfmnJCDsRuRgVp1AW2tD4Jm7a+flVTP1hfSM2
uANGkoBbvTf52jaCLWls1pdQhYSVMiwdhfZNt7RbyFq4ZnslMMtpBkBXPyy3BWPL
nCH+yiiTRSFJdWAb2NhUuc5uqM2YxgmaLXhxuuda3TrsFH4K2Iymr8bNopCRIT0b
7pmrl2QUxP3FRuK2g09qKABmhufZNx73NyW46mushGHNRADONTybQ3cMFQIDAQAB
o4ICoTCCAp0wHQYDVR0OBBYEFLW7ognUsZVrlWVp1ypDFURI1NwDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2I0OTIw
Mi02OTA0LTQyZmItODZmNy03NDY0MDBhZTJmNWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvYjQ5MjAy
LTY5MDQtNDJmYi04NmY3LTc0NjQwMGFlMmY1ZS8xL3RidWlDZFN4bFd1VlpXblhL
a01WUkVqVTNBTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgBtYDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMA4x4wDQYJKoZIhvcNAQELBQADggEBAARic+gzMRg0oCAxqfNuJbfeOhZ5WSVU
ADxqlMbfHGSD/k/dtai1sEaNk6CLchLBKOhayG/NU6B4mAe+N+jQeNGCb8Z3PsIm
0V/GYPjIC7QZ7xEa8kxn+iwuiyA2MsnDE1KBbNyN2yLz3LavU1IjKRdDSd+JBeQd
WECnJ29aawUL5XfX0fySRiYrfuHalXVkID5VMxcPFXIUStDHjROXe/hONoqOSqY8
KUOiK23CATA44aqmuIfhQy23LZsDYG/s18ryuL55XVRlXXqJ4CzTCnrCfwQU5Zyu
ss7bQ8GD+etvz6xetEk9W3qm2e3+YkgP+kOLNlQHYNe6EHZFuW8TUio=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:24 2024 by rpki-client on console-fra.rpki-client.org