Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer
File: xLEKBX3rjHgka9Cd6P1YFGq8Uao.cer (raw, json)
Hash identifier: vF00NSxWiC+ZkpAt+wK5fO4PuL1Bue2o3NZwleQnhjo=
Subject key identifier: C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A941B7C65375701148B1B1BE1E6DF9B8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/7/C4B10A057DEB8C78246BD09DE8FD58146ABC51AA.mft
caRepository: rsync://0.sb/repo/sb/7/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Thu 14 Sep 2023 14:32:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.116.0/24
IP: 2a12:9d00::/29
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:1b:7c:65:37:57:01:14:8b:1b:1b:e1:e6:df:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 14:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4b10a057deb8c78246bd09de8fd58146abc51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:25:cb:b3:00:fc:40:b4:8d:e6:21:ef:3a:
a8:25:6c:ac:14:4d:f7:8f:86:fb:37:dc:4e:9e:c3:
13:db:53:a1:0b:5e:9c:b0:5d:8e:a9:d4:a1:ee:14:
a6:b6:ae:d0:cc:db:01:ed:84:20:6a:be:0c:40:da:
f7:94:1f:2e:ce:86:f7:80:68:28:6b:f6:f6:93:43:
e2:03:fb:9a:93:b4:69:0a:8e:c7:a7:0f:8d:35:d1:
43:99:7a:82:1f:26:24:e7:c0:64:cc:1e:3f:f1:6e:
72:f7:f0:1b:fa:3f:4d:d3:a2:93:88:3e:d8:77:55:
d1:d3:79:c2:6e:36:d2:ac:b0:46:5b:12:aa:e4:a4:
d5:22:da:b8:ea:0f:84:bf:d8:65:ee:0d:a9:0b:58:
d3:ef:7d:28:87:86:46:37:df:c5:48:5e:9e:d4:8f:
4f:03:f9:58:fe:8a:c3:7a:7a:60:12:f3:24:f1:78:
96:77:f2:f4:9b:38:99:c8:b1:a3:70:ae:7e:f0:99:
65:88:e9:cc:64:18:01:3c:00:89:d3:f0:65:7e:19:
96:d6:ed:bb:62:f1:40:10:23:24:ad:ed:5c:89:29:
87:5b:02:49:fd:f6:28:43:1d:0e:dd:8f:34:5d:43:
c3:a0:14:8d:87:c7:ec:e7:ee:88:ee:0e:e2:82:78:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B1:0A:05:7D:EB:8C:78:24:6B:D0:9D:E8:FD:58:14:6A:BC:51:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/7/
RPKI Manifest - URI:rsync://0.sb/repo/sb/7/C4B10A057DEB8C78246BD09DE8FD58146ABC51AA.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.116.0/24
IPv6:
2a12:9d00::/29
Signature Algorithm: sha256WithRSAEncryption
64:96:04:f4:32:80:9e:8e:74:c0:51:7f:bb:0a:60:cc:e6:26:
30:6e:81:c3:9b:d1:e1:2e:e1:56:1e:50:ba:58:08:b2:fa:00:
a3:f8:6d:bf:2b:b4:ff:3c:16:51:b8:5b:66:d5:81:8d:9a:b7:
00:3c:63:52:cd:92:f9:c0:7b:ab:ec:03:45:e9:8e:f3:54:d0:
d0:63:c7:30:00:e1:a7:7b:a5:e5:49:28:a9:c7:9f:59:e1:86:
37:21:5e:e6:fb:68:c6:c5:91:00:14:b3:a0:59:da:6c:c2:12:
02:c5:32:0f:2f:03:74:61:20:39:b4:98:81:13:d6:5b:a6:53:
1a:7a:d1:f7:df:11:3e:a4:28:8d:2c:19:0c:be:38:ec:28:10:
f4:24:49:8f:d1:19:a7:2e:29:89:7c:a6:69:2d:6b:66:6b:cd:
a6:d4:08:a6:1c:0e:82:b2:77:a5:06:ee:53:33:6b:a5:e9:16:
c1:c5:60:3b:f2:11:92:80:4c:1c:c3:1b:ac:af:69:87:30:b7:
9c:82:17:b4:58:2e:b2:c3:73:53:8c:c8:3a:1e:c6:d4:87:85:
36:a5:dd:cb:19:07:c4:59:d7:bb:23:c8:6f:ed:6c:61:ed:65:
72:c5:fa:8c:f6:9e:a8:5f:07:e5:86:c7:ad:28:57:7b:6e:64:
1f:4b:6f:e1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYqUG3xlN1cBFIsbG+Hm35uMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTE0MTQzMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGIxMGEwNTdkZWI4Yzc4MjQ2YmQwOWRlOGZkNTgxNDZhYmM1MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN8ly7MA/EC0jeYh7zqoJWysFE33
j4b7N9xOnsMT21OhC16csF2OqdSh7hSmtq7QzNsB7YQgar4MQNr3lB8uzob3gGgo
a/b2k0PiA/uak7RpCo7Hpw+NNdFDmXqCHyYk58BkzB4/8W5y9/Ab+j9N06KTiD7Y
d1XR03nCbjbSrLBGWxKq5KTVItq46g+Ev9hl7g2pC1jT730oh4ZGN9/FSF6e1I9P
A/lY/orDenpgEvMk8XiWd/L0mziZyLGjcK5+8JlliOnMZBgBPACJ0/BlfhmW1u27
YvFAECMkre1ciSmHWwJJ/fYoQx0O3Y80XUPDoBSNh8fs5+6I7g7igngfBQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMSxCgV964x4JGvQnej9WBRqvFGqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgbYGCCsGAQUFBwELBIGpMIGmMCMGCCsGAQUFBzAFhhdyc3lu
YzovLzAuc2IvcmVwby9zYi83LzBPBggrBgEFBQcwCoZDcnN5bmM6Ly8wLnNiL3Jl
cG8vc2IvNy9DNEIxMEEwNTdERUI4Qzc4MjQ2QkQwOURFOEZENTgxNDZBQkM1MUFB
Lm1mdDAuBggrBgEFBQcwDYYiaHR0cHM6Ly8wLnNiL3JyZHAvbm90aWZpY2F0aW9u
LnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmww
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQC
AAEwBgMEAJITdDANBAIAAjAHAwUDKhKdADANBgkqhkiG9w0BAQsFAAOCAQEAZJYE
9DKAno50wFF/uwpgzOYmMG6Bw5vR4S7hVh5QulgIsvoAo/htvyu0/zwWUbhbZtWB
jZq3ADxjUs2S+cB7q+wDRemO81TQ0GPHMADhp3ul5UkoqcefWeGGNyFe5vtoxsWR
ABSzoFnabMISAsUyDy8DdGEgObSYgRPWW6ZTGnrR998RPqQojSwZDL447CgQ9CRJ
j9EZpy4piXymaS1rZmvNptQIphwOgrJ3pQbuUzNrpekWwcVgO/IRkoBMHMMbrK9p
hzC3nIIXtFgussNzU4zIOh7G1IeFNqXdyxkHxFnXuyPIb+1sYe1lcsX6jPaeqF8H
5YbHrShXe25kH0tv4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:05 2024 by rpki-client on console-ams.rpki-client.org