Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
File: tn3W9bzpj3vDFpsdufoOW5zvLrs.cer (raw, json)
Hash identifier: 7ffLDj/n7OHqw3xUNF1zp36TQSq7juhYWmk1Z4fS4sM=
Subject key identifier: B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716571A62A7DB2B41BFCA20EEF840C75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:32:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.251.23.0/24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 15:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:65:71:a6:2a:7d:b2:b4:1b:fc:a2:0e:ef:84:0c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:32:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:09:5b:25:61:70:ee:9c:77:7a:38:b1:ca:
f4:05:c0:dc:20:b3:55:05:69:51:bb:b4:92:af:48:
45:17:2c:1b:80:ad:65:e1:c7:d1:3d:82:02:d1:ff:
12:e8:56:de:8e:f7:1d:33:65:1f:56:3e:b9:e8:04:
05:51:5b:bb:4d:c1:d9:e0:ed:16:36:6f:d5:ac:02:
35:d5:af:04:b9:d3:e2:e7:a5:ac:b2:3d:25:c4:96:
fa:c1:99:a1:0a:9f:ff:e3:c2:8c:16:8a:fc:87:a4:
86:59:6b:88:b8:3b:35:a4:67:74:20:ad:00:ad:f1:
7c:43:af:55:28:ab:6b:af:03:a3:60:0d:8a:8e:9b:
ca:6f:f8:70:39:d3:c1:59:de:f6:40:c8:60:2f:14:
51:0a:d9:c1:61:03:02:f8:3d:f1:12:bf:1f:a3:38:
4a:ca:f8:e4:b4:10:c7:c8:2e:ae:06:6f:df:2a:95:
83:eb:24:9f:81:a5:f9:85:8a:c8:06:a1:e6:80:a9:
15:41:89:8b:d9:25:a2:90:1b:b5:a7:e9:66:b1:f9:
7e:ad:19:59:ed:05:58:e4:37:f8:6b:bc:0a:f5:01:
10:54:48:19:10:01:7d:be:78:bc:b2:75:6d:11:b0:
b8:76:15:29:1a:29:dc:44:73:30:d8:c3:7b:49:23:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:eb:cb:8c:c6:16:df:df:a5:13:fb:c5:7a:f7:30:55:40:23:
d8:44:87:0f:50:fe:59:4a:86:18:2d:12:31:2f:95:cb:4f:06:
47:99:87:ff:16:05:45:91:1a:aa:e6:02:e1:86:cd:8c:ec:42:
10:c9:b5:87:98:c8:f0:50:1e:46:46:e5:e8:0e:48:70:56:3d:
77:09:6d:ab:26:01:dd:93:2e:12:72:fc:b2:5b:e5:71:95:5f:
84:a7:17:2c:56:1c:42:5f:5f:9d:ed:d3:53:35:84:ec:34:1b:
69:14:f2:87:66:52:31:08:76:4d:bd:cd:89:e8:e1:7e:12:b9:
5c:ee:f8:0e:1e:81:60:c6:77:7c:b8:1c:17:10:62:08:a1:77:
f8:03:2f:0a:9c:ce:90:e4:24:1d:53:49:8a:6a:d7:b6:95:43:
99:94:c5:db:69:b4:a6:76:26:8b:f4:21:0b:94:91:4b:1d:59:
c8:dd:bc:f9:f6:07:8b:3a:a4:13:ad:33:d5:b6:fc:17:e0:f2:
6b:2d:cb:ec:00:39:6d:f1:8f:1d:31:fe:14:a8:da:1a:a9:b0:
45:24:7c:a3:72:eb:04:b6:8a:0a:47:77:c7:ca:87:04:db:37:
d0:35:a3:4b:0e:61:56:a9:62:09:8c:ee:29:c6:b0:00:61:a0:
e5:97:dc:92
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVxZXGmKn2ytBv8og7vhAx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDczMjMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjdkZDZmNWJjZTk4ZjdiYzMxNjliMWRiOWZhMGU1YjljZWYyZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5AJWyVhcO6cd3o4scr0BcDcILNV
BWlRu7SSr0hFFywbgK1l4cfRPYIC0f8S6FbejvcdM2UfVj656AQFUVu7TcHZ4O0W
Nm/VrAI11a8EudPi56Wssj0lxJb6wZmhCp//48KMFor8h6SGWWuIuDs1pGd0IK0A
rfF8Q69VKKtrrwOjYA2KjpvKb/hwOdPBWd72QMhgLxRRCtnBYQMC+D3xEr8fozhK
yvjktBDHyC6uBm/fKpWD6ySfgaX5hYrIBqHmgKkVQYmL2SWikBu1p+lmsfl+rRlZ
7QVY5Df4a7wK9QEQVEgZEAF9vni8snVtEbC4dhUpGincRHMw2MN7SSObXwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLZ91vW86Y97wxabHbn6Dluc7y67MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzk0MzU4
NS1jMTI0LTRiYWMtODg4YS0zZTU5Y2YxYWVjNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvOTQzNTg1
LWMxMjQtNGJhYy04ODhhLTNlNTljZjFhZWM0NC8xL3RuM1c5YnpwajN2REZwc2R1
Zm9PVzV6dkxycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAufsXMA0GCSqGSIb3DQEBCwUAA4IBAQCL68uM
xhbf36UT+8V69zBVQCPYRIcPUP5ZSoYYLRIxL5XLTwZHmYf/FgVFkRqq5gLhhs2M
7EIQybWHmMjwUB5GRuXoDkhwVj13CW2rJgHdky4ScvyyW+VxlV+EpxcsVhxCX1+d
7dNTNYTsNBtpFPKHZlIxCHZNvc2J6OF+Erlc7vgOHoFgxnd8uBwXEGIIoXf4Ay8K
nM6Q5CQdU0mKate2lUOZlMXbabSmdiaL9CELlJFLHVnI3bz59geLOqQTrTPVtvwX
4PJrLcvsADlt8Y8dMf4UqNoaqbBFJHyjcusEtooKR3fHyocE2zfQNaNLDmFWqWIJ
jO4pxrAAYaDll9yS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:08 2024 by rpki-client on console-ams.rpki-client.org