Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
File: xmBI6dItZx7nLrNzrjVr1a19Zk8.cer (raw, json)
Hash identifier: SMpg3Vb4vNMrx9X/1qDB3aaKR2sBNLl9f4YWNBdQuG0=
Subject key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAFE41B44C83A059B113E183C3B97D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:41 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.81.68.0/24
IP: 2a12:e380::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 13:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fe:41:b4:4c:83:a0:59:b1:13:e1:83:c3:b9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:1c:8d:2e:7c:c9:3b:ee:78:87:15:a1:a2:
fa:27:fb:a6:dd:eb:4c:a1:93:96:bc:a9:a4:12:3c:
7a:c7:9c:96:71:fc:a3:13:d3:50:35:c8:14:54:d5:
5e:7c:49:e0:af:59:25:db:9f:e3:6f:c3:3f:06:78:
f0:be:3b:ea:30:95:95:37:cc:c0:e1:15:10:7f:15:
99:33:46:15:8d:13:4f:50:b6:f3:c5:8c:42:48:81:
96:11:02:1c:e8:7d:b5:64:be:d4:27:a3:cc:2e:d0:
f0:47:fa:8f:ed:d2:17:91:4d:2a:03:d7:0c:5c:ac:
2c:27:ce:6d:8a:28:bd:08:c4:f6:07:c6:05:a7:af:
97:92:61:57:4d:4b:e4:a1:64:cb:da:3b:21:df:68:
aa:97:7b:08:d1:5a:56:3a:43:37:7e:d7:20:b5:b6:
e2:71:d4:f9:8c:9a:a2:0a:8c:58:8c:67:a1:79:71:
5f:0c:81:c0:cc:d3:f7:c0:c7:c0:ad:4a:97:cc:fa:
4f:8c:f0:c4:88:ca:12:28:42:25:86:c7:cd:cf:ad:
2c:26:c8:4f:ef:c0:7a:c2:c8:62:8e:74:0c:42:2d:
b7:bf:3d:3c:1c:2b:ed:95:d1:78:34:1c:f6:83:6a:
e6:66:6c:95:e5:67:6d:51:f2:e2:95:92:2f:9f:4d:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.68.0/24
IPv6:
2a12:e380::/29
Signature Algorithm: sha256WithRSAEncryption
07:49:2b:99:e4:3c:60:98:e9:55:c7:17:4c:76:f5:ce:92:07:
60:4f:fb:7e:f7:d3:46:a7:2d:56:d2:cb:48:79:a7:db:3b:c4:
b6:38:d0:6b:f4:d6:1d:3e:c2:7e:83:c6:a6:31:ba:43:45:3d:
65:26:83:44:44:76:f4:a1:78:33:88:30:e9:eb:90:06:7e:6a:
bf:42:ff:bd:fb:57:e0:09:b7:e4:4d:de:ef:0f:3a:78:5e:9c:
f4:02:67:95:ef:40:d2:09:1c:4d:98:e6:08:56:37:b5:a1:6e:
64:02:96:5d:f5:42:48:36:34:d5:de:2e:40:07:b2:7b:9d:be:
ff:0a:f7:3d:e7:34:55:9a:26:b8:82:5e:3a:d3:b6:61:e1:f3:
84:1d:42:73:c8:5c:45:50:da:7d:4e:f4:f9:3a:4e:c6:8e:b7:
e5:8b:c7:b0:42:7e:e2:7e:1a:75:a1:ff:94:eb:7a:95:ab:14:
70:36:ad:68:3f:a4:52:a7:74:8b:cf:e7:fb:62:53:a5:f2:1b:
7b:81:05:ff:ed:af:6f:24:e0:88:3c:c7:f9:b0:07:fd:45:a4:
8b:5a:48:36:13:a9:31:af:09:f9:34:cd:ea:e0:c5:96:dd:9a:
65:6e:ba:20:6c:f0:a1:81:1b:57:09:1b:19:28:4e:95:b7:65:
36:14:4d:4b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzC2v5BtEyDoFmxE+GDw7l9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjYwNDhlOWQyMmQ2NzFlZTcyZWIzNzNhZTM1NmJkNWFkN2Q2NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVccjS58yTvueIcVoaL6J/um3etM
oZOWvKmkEjx6x5yWcfyjE9NQNcgUVNVefEngr1kl25/jb8M/BnjwvjvqMJWVN8zA
4RUQfxWZM0YVjRNPULbzxYxCSIGWEQIc6H21ZL7UJ6PMLtDwR/qP7dIXkU0qA9cM
XKwsJ85tiii9CMT2B8YFp6+XkmFXTUvkoWTL2jsh32iql3sI0VpWOkM3ftcgtbbi
cdT5jJqiCoxYjGeheXFfDIHAzNP3wMfArUqXzPpPjPDEiMoSKEIlhsfNz60sJshP
78B6wshijnQMQi23vz08HCvtldF4NBz2g2rmZmyV5WdtUfLilZIvn01ulwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMZgSOnSLWce5y6zc641a9WtfWZPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwLzhiNjgx
Ny05YjA0LTRmYTItODhhZS00ZWI4OWVlMDJmMzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvOGI2ODE3
LTliMDQtNGZhMi04OGFlLTRlYjg5ZWUwMmYzMy8xL3htQkk2ZEl0Wng3bkxyTnpy
alZyMWExOVprOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAuVFEMA0EAgACMAcDBQMqEuOAMA0GCSqGSIb3
DQEBCwUAA4IBAQAHSSuZ5DxgmOlVxxdMdvXOkgdgT/t+99NGpy1W0stIeafbO8S2
ONBr9NYdPsJ+g8amMbpDRT1lJoNERHb0oXgziDDp65AGfmq/Qv+9+1fgCbfkTd7v
Dzp4Xpz0AmeV70DSCRxNmOYIVje1oW5kApZd9UJINjTV3i5AB7J7nb7/Cvc95zRV
mia4gl4607Zh4fOEHUJzyFxFUNp9TvT5Ok7Gjrfli8ewQn7ifhp1of+U63qVqxRw
Nq1oP6RSp3SLz+f7YlOl8ht7gQX/7a9vJOCIPMf5sAf9RaSLWkg2E6kxrwn5NM3q
4MWW3ZplbrogbPChgRtXCRsZKE6Vt2U2FE1L
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:14 2024 by rpki-client on console-ams.rpki-client.org