Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/viEN3zE8hsBuOGezxNXYASHwu-U.cer
File: viEN3zE8hsBuOGezxNXYASHwu-U.cer (raw, json)
Hash identifier: 2wQIkoZFD5DsbYkanRP2A4lcDopeIKVSYdpqauz4yis=
Subject key identifier: BE:21:0D:DF:31:3C:86:C0:6E:38:67:B3:C4:D5:D8:01:21:F0:BB:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01888C16FD4DD0E0FCBC38E91E78FFF2EBCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/BE210DDF313C86C06E3867B3C4D5D80121F0BBE5.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 05 Jun 2023 15:04:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206074
AS: 206092
AS: 206150
AS: 206164
AS: 210277
AS: 213060
AS: 213074
AS: 213085
IP: 2a13:9500::/29
Validation: Failed, certificate revoked on Wed 07 Jun 2023 08:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:16:fd:4d:d0:e0:fc:bc:38:e9:1e:78:ff:f2:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 15:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be210ddf313c86c06e3867b3c4d5d80121f0bbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e0:a6:5d:96:82:99:f7:ff:05:08:0d:54:e3:
c1:a3:5d:cd:45:79:74:2a:fa:cb:10:42:a0:94:50:
88:67:83:9e:7c:89:ce:22:63:7e:eb:79:6b:5f:15:
e3:15:e7:20:86:6e:5f:46:0b:ba:a4:dd:16:60:55:
9a:6d:d5:2e:9b:5e:3e:3e:27:7e:53:b9:85:f3:f3:
fb:40:05:7a:56:21:27:fb:79:54:61:80:a0:51:f8:
64:5a:af:46:4e:e1:7f:85:b1:8a:06:07:35:07:ac:
c4:53:0a:08:7d:00:8d:50:c2:ad:2c:7b:17:64:7c:
78:56:d1:c8:42:d6:97:52:aa:1a:34:13:d0:2a:04:
31:e2:fd:7a:3f:a0:a6:bf:45:b9:9c:98:11:c7:dc:
36:44:0f:e8:1b:54:5f:fd:bc:26:7e:f4:81:48:49:
31:d5:c0:33:28:83:38:cf:8e:36:9f:e8:c3:69:cd:
bb:5f:d8:be:fc:5d:4d:fc:0f:53:c3:dd:94:cc:9d:
b3:cc:23:f3:7a:3a:69:a9:33:2c:1f:d9:e5:2d:94:
25:90:f4:82:70:12:71:2c:f2:79:9d:f6:ac:11:b3:
cb:a3:ab:57:33:b1:2e:03:6a:43:99:66:3e:6b:26:
c8:31:70:98:c6:b9:4d:d3:93:9a:aa:69:68:44:e7:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:0D:DF:31:3C:86:C0:6E:38:67:B3:C4:D5:D8:01:21:F0:BB:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/550be275-2398-4a04-b1f5-40ed81b67ecf/0/BE210DDF313C86C06E3867B3C4D5D80121F0BBE5.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206074
206092
206150
206164
210277
213060
213074
213085
Signature Algorithm: sha256WithRSAEncryption
46:cf:4d:00:8b:da:03:07:3a:70:31:20:71:a0:84:1a:6c:fd:
2c:4d:e6:1f:43:29:11:76:98:03:32:6d:9f:08:b3:8f:78:03:
64:dc:46:3f:60:33:5f:a1:df:58:42:41:32:1a:2d:ab:4d:c3:
89:8e:31:20:aa:23:86:d0:c5:49:3a:39:56:81:30:7f:b0:80:
1a:2e:0e:b8:95:b0:b2:6b:5e:33:cd:d0:6b:2f:d3:ce:8d:bc:
4e:57:90:62:a6:1a:65:97:ff:e6:f9:07:66:0a:ac:2f:71:a7:
19:04:a5:a3:f5:77:2e:6c:6b:d1:28:91:19:21:47:0f:e1:6c:
cf:6b:1f:98:dc:20:08:d2:62:c0:f2:4c:22:45:f9:26:06:77:
28:8b:6e:0e:cf:f3:81:14:e6:4e:74:f2:79:b8:40:a3:aa:26:
e5:35:d3:26:34:90:11:03:b8:50:9d:57:51:82:b3:a2:3d:16:
1c:3d:3c:b5:ba:4c:23:d0:0d:cb:06:bf:70:12:50:09:fe:9f:
ce:20:68:fa:5c:cb:c6:8c:af:42:a6:71:1d:0d:1a:0e:22:6d:
cf:6e:20:13:34:2e:57:61:ac:8d:6f:21:29:36:f6:cd:b4:6b:
16:37:d9:50:93:66:74:22:3a:be:6d:a2:70:92:b4:ef:2c:4c:
89:23:2d:54
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAYiMFv1N0OD8vDjpHnj/8uvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNjA1MTUwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTIxMGRkZjMxM2M4NmMwNmUzODY3YjNjNGQ1ZDgwMTIxZjBiYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+CmXZaCmff/BQgNVOPBo13NRXl0
KvrLEEKglFCIZ4OefInOImN+63lrXxXjFecghm5fRgu6pN0WYFWabdUum14+Pid+
U7mF8/P7QAV6ViEn+3lUYYCgUfhkWq9GTuF/hbGKBgc1B6zEUwoIfQCNUMKtLHsX
ZHx4VtHIQtaXUqoaNBPQKgQx4v16P6Cmv0W5nJgRx9w2RA/oG1Rf/bwmfvSBSEkx
1cAzKIM4z442n+jDac27X9i+/F1N/A9Tw92UzJ2zzCPzejppqTMsH9nlLZQlkPSC
cBJxLPJ5nfasEbPLo6tXM7EuA2pDmWY+aybIMXCYxrlN05OaqmloROfHiQIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFL4hDd8xPIbAbjhns8TV2AEh8LvlMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzU1MGJl
Mjc1LTIzOTgtNGEwNC1iMWY1LTQwZWQ4MWI2N2VjZi8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTUw
YmUyNzUtMjM5OC00YTA0LWIxZjUtNDBlZDgxYjY3ZWNmLzAvQkUyMTBEREYzMTND
ODZDMDZFMzg2N0IzQzRENUQ4MDEyMUYwQkJFNS5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
AyoTlQAwPQYIKwYBBQUHAQgBAf8ELjAsoCowKAIDAyT6AgMDJQwCAwMlRgIDAyVU
AgMDNWUCAwNARAIDA0BSAgMDQF0wDQYJKoZIhvcNAQELBQADggEBAEbPTQCL2gMH
OnAxIHGghBps/SxN5h9DKRF2mAMybZ8Is494A2TcRj9gM1+h31hCQTIaLatNw4mO
MSCqI4bQxUk6OVaBMH+wgBouDriVsLJrXjPN0Gsv086NvE5XkGKmGmWX/+b5B2YK
rC9xpxkEpaP1dy5sa9EokRkhRw/hbM9rH5jcIAjSYsDyTCJF+SYGdyiLbg7P84EU
5k508nm4QKOqJuU10yY0kBEDuFCdV1GCs6I9Fhw9PLW6TCPQDcsGv3ASUAn+n84g
aPpcy8aMr0KmcR0NGg4ibc9uIBM0LldhrI1vISk29s20axY32VCTZnQiOr5tonCS
tO8sTIkjLVQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:44 2024 by rpki-client on console-fra.rpki-client.org