Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vGljOa246Ii-lQQOHIPaf5W7s4U.cer
File: vGljOa246Ii-lQQOHIPaf5W7s4U.cer (raw, json)
Hash identifier: XHCVRCKHkbp5LfufH6CgLcQ0vbS80GI3YdbADwVpKHg=
Subject key identifier: BC:69:63:39:AD:B8:E8:88:BE:95:04:0E:1C:83:DA:7F:95:BB:B3:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7934B899A7247D43E7551400B0D16E9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:29:28 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.205.192.0/23
Validation: Failed, certificate revoked on Fri 23 Feb 2024 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4b:89:9a:72:47:d4:3e:75:51:40:0b:0d:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc696339adb8e888be95040e1c83da7f95bbb385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:de:5d:e8:69:67:fa:71:01:36:6a:77:2f:
e8:c7:73:d1:d9:4d:61:91:8c:36:06:a5:fd:fc:69:
b0:d5:61:8f:43:0a:64:39:8f:36:e9:a0:69:0b:e4:
16:40:10:e7:7f:5f:42:5f:65:8f:d7:9d:95:b7:0f:
a7:0b:d7:b2:24:9f:df:0e:23:f3:e3:d5:4a:ed:95:
d5:45:4d:97:86:2c:ec:db:7a:ab:47:64:f9:d4:cf:
40:a9:c6:a7:64:e1:e8:e8:b0:df:96:f1:71:46:f6:
d8:08:f4:54:a9:bc:47:ed:92:bb:ae:4c:dd:79:c5:
f3:c6:99:de:89:f7:a5:23:ef:eb:70:40:38:0e:9e:
df:26:65:f0:f0:a0:25:45:bb:25:2f:da:5f:c8:15:
a3:95:33:50:f1:56:c6:01:73:e6:02:b3:7e:60:33:
07:43:48:3b:fd:48:76:db:ee:7f:37:6d:8d:13:c4:
8f:85:e5:80:05:67:0f:79:91:0d:7d:da:f0:c5:37:
03:3d:95:e5:29:e3:d1:ab:55:de:86:44:bf:1c:58:
84:a1:f0:d4:a7:1b:b9:04:4f:4b:d8:7b:7b:8c:11:
5a:88:26:84:bf:13:f0:c2:7e:b5:b8:cb:29:ef:2c:
87:9d:0f:d5:77:0e:78:8a:b4:06:71:be:f8:e7:a9:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:69:63:39:AD:B8:E8:88:BE:95:04:0E:1C:83:DA:7F:95:BB:B3:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6ce644-0256-45a7-af1c-c60e9a4a5d34/1/vGljOa246Ii-lQQOHIPaf5W7s4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
71:ac:74:25:68:d2:de:02:50:4f:54:c3:b6:06:06:6a:8f:ed:
25:af:25:d0:3c:ba:24:24:cc:8e:1c:c1:d8:d9:17:ae:4d:03:
54:b9:9b:1b:71:6d:94:a5:4b:53:21:ef:27:44:e3:7d:51:56:
65:ce:40:a7:9f:b1:b0:3d:9f:d0:a6:11:01:b1:e3:32:1b:5e:
eb:f8:f8:4f:f1:4f:07:78:4d:19:84:b9:d8:3f:8e:d3:21:68:
cb:3a:bb:b6:94:4c:d3:03:44:7c:9d:2e:89:a5:fc:33:06:2d:
72:d6:b4:57:70:b2:09:97:e9:9a:2f:06:ee:61:d6:f7:d6:7d:
48:4f:3d:de:e3:a9:ae:c0:eb:04:d0:19:17:58:0a:8f:55:a8:
64:47:38:3d:c5:79:c9:52:e4:83:a9:4e:ec:b6:25:1e:28:64:
3e:90:e1:5e:27:ee:98:5f:74:68:90:a2:63:b4:3f:85:9b:4a:
ea:97:ff:e3:ad:14:eb:3b:86:39:f7:10:00:e8:6a:3a:43:35:
ed:7d:de:25:96:84:d8:d5:6e:dd:a8:5e:5b:da:84:6e:2a:d7:
69:d3:be:ee:1f:e0:70:1c:26:c8:b5:4e:b1:46:26:1d:0a:9f:
39:3c:1a:8c:63:f0:79:20:22:cd:ab:58:5f:da:01:f6:71:5a:
b1:d4:41:af
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzHk0uJmnJH1D51UUALDRbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzY5NjMzOWFkYjhlODg4YmU5NTA0MGUxYzgzZGE3Zjk1YmJiMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA177eXehpZ/pxATZqdy/ox3PR2U1h
kYw2BqX9/Gmw1WGPQwpkOY826aBpC+QWQBDnf19CX2WP152Vtw+nC9eyJJ/fDiPz
49VK7ZXVRU2Xhizs23qrR2T51M9AqcanZOHo6LDflvFxRvbYCPRUqbxH7ZK7rkzd
ecXzxpneifelI+/rcEA4Dp7fJmXw8KAlRbslL9pfyBWjlTNQ8VbGAXPmArN+YDMH
Q0g7/Uh22+5/N22NE8SPheWABWcPeZENfdrwxTcDPZXlKePRq1XehkS/HFiEofDU
pxu5BE9L2Ht7jBFaiCaEvxPwwn61uMsp7yyHnQ/Vdw54irQGcb7456nOvQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLxpYzmtuOiIvpUEDhyD2n+Vu7OFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzZjZTY0
NC0wMjU2LTQ1YTctYWYxYy1jNjBlOWE0YTVkMzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvNmNlNjQ0
LTAyNTYtNDVhNy1hZjFjLWM2MGU5YTRhNWQzNC8xL3ZHbGpPYTI0NklpLWxRUU9I
SVBhZjVXN3M0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBW83AMA0GCSqGSIb3DQEBCwUAA4IBAQBxrHQl
aNLeAlBPVMO2BgZqj+0lryXQPLokJMyOHMHY2ReuTQNUuZsbcW2UpUtTIe8nRON9
UVZlzkCnn7GwPZ/QphEBseMyG17r+PhP8U8HeE0ZhLnYP47TIWjLOru2lEzTA0R8
nS6JpfwzBi1y1rRXcLIJl+maLwbuYdb31n1ITz3e46muwOsE0BkXWAqPVahkRzg9
xXnJUuSDqU7stiUeKGQ+kOFeJ+6YX3RokKJjtD+Fm0rql//jrRTrO4Y59xAA6Go6
QzXtfd4lloTY1W7dqF5b2oRuKtdp077uH+BwHCbItU6xRiYdCp85PBqMY/B5ICLN
q1hf2gH2cVqx1EGv
-----END CERTIFICATE-----
Generated at Fri Feb 23 13:38:38 2024 by rpki-client on console-ams.rpki-client.org