Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.cer
File: xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.cer (raw, json)
Hash identifier: beCq89zjXFNvX1ishl8ZOPEG/11ayGhCvNR+zW9w+vQ=
Subject key identifier: C4:85:C1:C3:92:1E:19:0F:BB:2A:40:EB:0E:0D:50:9F:74:15:A0:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B63E7C9F67690F8C6AED6AD23C0C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:18 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 62440
IP: 185.35.128.0/22
IP: 212.94.16.0/20
IP: 2a00:e5a0::/32
Validation: Failed, certificate revoked on Fri 16 Feb 2024 10:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:63:e7:c9:f6:76:90:f8:c6:ae:d6:ad:23:c0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c485c1c3921e190fbb2a40eb0e0d509f7415a0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:b0:7b:20:db:2c:69:f4:94:57:99:6d:ff:
d6:78:09:39:3b:f5:b5:4f:46:7c:15:b0:1a:16:ed:
98:77:ca:5e:98:d6:e6:5c:55:77:92:3e:0b:10:a2:
3c:61:44:1f:a2:95:fd:87:7b:0a:7a:00:ba:1d:e6:
5c:c2:cb:fa:c8:7e:f4:ec:ef:91:72:79:e3:f0:98:
78:80:57:07:2c:37:38:04:12:79:45:ac:4d:83:23:
9a:70:af:e7:96:fe:eb:ba:73:00:47:96:d5:d4:6e:
fa:12:f0:9d:33:96:cb:89:01:fc:d0:56:c2:f8:72:
80:3a:97:5b:df:71:f4:0c:89:2a:9a:3d:7b:49:7d:
17:db:67:cb:bd:11:0e:80:19:b7:72:fb:1e:c0:ae:
71:c2:e6:37:e1:4e:7a:08:01:12:3c:07:25:c8:42:
33:a8:67:a7:e3:6b:46:81:1f:1e:38:20:10:98:f3:
3d:62:f6:37:70:a0:42:8a:1d:0d:b1:eb:37:bf:5f:
47:95:94:cf:44:c2:3a:0c:e4:16:b7:93:ce:43:b6:
16:35:b7:ba:f5:04:54:6c:98:dd:7b:84:3b:c4:d3:
2d:dd:c5:85:6c:12:71:08:d4:93:e5:ea:07:5f:f5:
f1:c9:a1:f6:3d:a7:2a:ef:a5:be:82:3f:33:38:e8:
ba:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:85:C1:C3:92:1E:19:0F:BB:2A:40:EB:0E:0D:50:9F:74:15:A0:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/68f178-8cec-4745-8bd8-080eb52ef458/1/xIXBw5IeGQ-7KkDrDg1Qn3QVoOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.128.0/22
212.94.16.0/20
IPv6:
2a00:e5a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62440
Signature Algorithm: sha256WithRSAEncryption
77:8b:48:19:79:ec:64:64:cc:af:b6:cf:05:41:19:e5:1d:6f:
81:6b:81:06:d4:f9:63:c9:ba:67:88:33:0a:63:73:ed:66:47:
e9:71:ec:d9:56:78:31:62:ff:46:fc:16:c5:51:f2:1a:7d:4c:
ee:da:21:81:27:3e:0b:a2:4b:0c:ea:bd:9b:6b:82:e1:1a:f7:
e8:78:33:8e:82:38:1e:c7:bd:5d:4e:5d:62:5f:0d:e4:56:48:
73:57:b0:bf:aa:bb:42:0b:80:bf:ac:99:e8:4b:10:a5:cb:54:
81:c8:b8:77:53:7e:d5:da:63:90:65:b0:69:e6:a9:f2:f9:3a:
85:66:24:a4:f5:77:20:09:b1:6f:9b:9d:8a:3d:67:3a:62:50:
75:09:15:5d:24:2e:a4:0a:e1:b1:ac:c0:3b:37:04:99:3a:c2:
04:ad:cd:2c:ef:47:99:1e:a7:85:4f:36:72:d1:0a:4d:ed:04:
2a:b0:f2:9c:42:37:5b:82:fc:31:17:81:9e:6c:7b:d7:4f:94:
79:34:e6:7a:52:cb:9d:ea:01:27:1a:5f:77:cd:c0:7d:bf:0a:
94:8e:8f:63:28:56:c1:99:34:94:27:a9:df:eb:b9:e4:3d:66:
8e:aa:df:f8:00:54:1d:f4:02:b4:6b:a4:40:d8:ce:59:93:d6:
ff:12:9d:f2
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAYzGS2PnyfZ2kPjGrtatI8DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDg1YzFjMzkyMWUxOTBmYmIyYTQwZWIwZTBkNTA5Zjc0MTVhMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSaweyDbLGn0lFeZbf/WeAk5O/W1
T0Z8FbAaFu2Yd8pemNbmXFV3kj4LEKI8YUQfopX9h3sKegC6HeZcwsv6yH707O+R
cnnj8Jh4gFcHLDc4BBJ5RaxNgyOacK/nlv7runMAR5bV1G76EvCdM5bLiQH80FbC
+HKAOpdb33H0DIkqmj17SX0X22fLvREOgBm3cvsewK5xwuY34U56CAESPAclyEIz
qGen42tGgR8eOCAQmPM9YvY3cKBCih0Nses3v19HlZTPRMI6DOQWt5POQ7YWNbe6
9QRUbJjde4Q7xNMt3cWFbBJxCNST5eoHX/XxyaH2Pacq76W+gj8zOOi6jwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFMSFwcOSHhkPuypA6w4NUJ90FaDrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzY4ZjE3
OC04Y2VjLTQ3NDUtOGJkOC0wODBlYjUyZWY0NTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvNjhmMTc4
LThjZWMtNDc0NS04YmQ4LTA4MGViNTJlZjQ1OC8xL3hJWEJ3NUllR1EtN0trRHJE
ZzFRbjNRVm9Pcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuSOAAwQE1F4QMA0EAgACMAcDBQAqAOWgMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDz6DANBgkqhkiG9w0BAQsFAAOCAQEAd4tI
GXnsZGTMr7bPBUEZ5R1vgWuBBtT5Y8m6Z4gzCmNz7WZH6XHs2VZ4MWL/RvwWxVHy
Gn1M7tohgSc+C6JLDOq9m2uC4Rr36HgzjoI4Hse9XU5dYl8N5FZIc1ewv6q7QguA
v6yZ6EsQpctUgci4d1N+1dpjkGWwaeap8vk6hWYkpPV3IAmxb5udij1nOmJQdQkV
XSQupArhsazAOzcEmTrCBK3NLO9HmR6nhU82ctEKTe0EKrDynEI3W4L8MReBnmx7
10+UeTTmelLLneoBJxpfd83Afb8KlI6PYyhWwZk0lCep3+u55D1mjqrf+ABUHfQC
tGukQNjOWZPW/xKd8g==
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:41:44 2025 by rpki-client