Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zK-HPhjkpVANv4AZT2-9mfsmY-4.cer
File: zK-HPhjkpVANv4AZT2-9mfsmY-4.cer (raw, json)
Hash identifier: xj/GFF8pJpQrEfMwBsu0Se2KsxOk1YpQwJJRScGJf2w=
Subject key identifier: CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CF51D16660DA97C31EABF6487397DBDCC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 10 Jan 2024 20:42:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 205498
IP: 45.85.16.0/22
IP: 185.215.140.0/22
Validation: Failed, certificate revoked on Fri 12 Jan 2024 14:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f5:1d:16:66:0d:a9:7c:31:ea:bf:64:87:39:7d:bd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 20:42:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccaf873e18e4a5500dbf80194f6fbd99fb2663ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:e8:a0:59:10:8e:91:40:ff:0d:bf:b5:68:
15:cb:fe:79:ca:1f:51:3c:6b:42:bf:1b:09:b6:bb:
ca:da:cf:82:28:38:a5:59:20:55:1c:e6:05:e9:27:
56:33:fd:c5:29:08:02:a9:cd:f5:42:f4:80:ae:14:
47:f5:01:91:df:e4:d3:ab:6d:9e:74:35:7a:6d:1f:
76:69:cb:ac:98:0e:5b:47:f1:cd:83:69:b2:2f:78:
da:13:72:08:96:93:71:f8:2b:b1:c3:02:47:19:e6:
26:85:5d:b8:19:6e:06:73:a0:0e:a6:c0:08:db:8a:
a9:dd:db:0e:aa:15:52:32:11:fa:14:24:74:12:fe:
06:13:35:15:b1:49:8b:55:ca:56:fc:2f:64:5d:2a:
98:0e:05:3f:28:a4:2f:0f:e5:4e:a4:ca:1f:59:da:
bc:31:e3:32:de:f0:02:75:f0:23:1a:f8:d2:6e:65:
c1:cb:61:53:41:bb:60:52:12:6c:66:26:e2:e9:36:
29:83:b1:37:6c:36:f5:d8:75:f6:9c:b9:74:02:a1:
5b:74:34:c8:31:08:7b:0e:46:08:ae:45:f8:55:65:
47:06:9c:09:08:e1:44:de:02:8f:ef:e0:2f:f7:9d:
8c:11:7f:ac:cb:df:4e:95:67:83:1d:46:23:c4:48:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AF:87:3E:18:E4:A5:50:0D:BF:80:19:4F:6F:BD:99:FB:26:63:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/13/CCAF873E18E4A5500DBF80194F6FBD99FB2663EE.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.16.0/22
185.215.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205498
Signature Algorithm: sha256WithRSAEncryption
41:74:b1:17:a0:b4:7c:d3:5c:1d:99:79:59:af:fa:27:c4:b5:
97:36:e0:7f:5b:9e:3e:93:f2:72:8f:55:de:a9:0f:e1:b0:2f:
bf:1c:6e:70:f6:5e:1b:8b:2f:ac:d4:7a:19:fc:f4:6f:15:b7:
5c:af:77:ea:b5:a4:fa:a8:c0:b9:f1:eb:5a:07:80:e7:10:76:
a9:02:c9:36:b4:ee:71:8f:de:eb:f2:c4:72:06:72:94:28:38:
c0:87:10:bc:01:3d:2f:cb:76:df:27:aa:54:03:48:92:0f:6d:
59:4a:f1:60:14:cf:88:7e:2b:64:e1:f7:23:39:db:b4:6d:46:
9a:59:ff:6e:70:fd:ab:7d:b5:56:43:b1:de:9e:fd:e5:a6:a7:
93:46:ed:27:54:75:17:1a:91:7c:43:16:08:d2:e3:70:39:c4:
f9:ba:7f:be:bb:50:ee:f0:22:13:46:ab:b1:33:c9:cb:07:08:
1e:76:d8:d5:cd:fb:32:5f:7d:2f:e2:73:db:29:2f:5d:53:1b:
80:3f:dd:a7:34:77:31:d4:31:f6:a6:0f:31:ca:96:42:15:a3:
7f:f8:27:3a:4c:6f:e3:6c:07:33:73:30:1d:db:ba:4e:a0:8b:
e0:48:49:e7:1a:d8:7d:78:8f:8d:42:c1:a6:1f:95:bc:b8:81:
6a:44:46:35
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgISAYz1HRZmDal8Meq/ZIc5fb3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTEwMjA0MjUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2FmODczZTE4ZTRhNTUwMGRiZjgwMTk0ZjZmYmQ5OWZiMjY2M2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6LooFkQjpFA/w2/tWgVy/55yh9R
PGtCvxsJtrvK2s+CKDilWSBVHOYF6SdWM/3FKQgCqc31QvSArhRH9QGR3+TTq22e
dDV6bR92acusmA5bR/HNg2myL3jaE3IIlpNx+CuxwwJHGeYmhV24GW4Gc6AOpsAI
24qp3dsOqhVSMhH6FCR0Ev4GEzUVsUmLVcpW/C9kXSqYDgU/KKQvD+VOpMofWdq8
MeMy3vACdfAjGvjSbmXBy2FTQbtgUhJsZibi6TYpg7E3bDb12HX2nLl0AqFbdDTI
MQh7DkYIrkX4VWVHBpwJCOFE3gKP7+Av952MEX+sy99OlWeDHUYjxEhL2wIDAQAB
o4ICxDCCAsAwHQYDVR0OBBYEFMyvhz4Y5KVQDb+AGU9vvZn7JmPuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggFBBggrBgEFBQcBCwSCATMwggEvMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y5MjM1
MDU1LTE5MDQtNDRiNC05OThiLWZmMWM5ZTMxMWM0OS8xMzCBjQYIKwYBBQUHMAqG
gYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y5
MjM1MDU1LTE5MDQtNDRiNC05OThiLWZmMWM5ZTMxMWM0OS8xMy9DQ0FGODczRTE4
RTRBNTUwMERCRjgwMTk0RjZGQkQ5OUZCMjY2M0VFLm1mdDA8BggrBgEFBQcwDYYw
aHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBlLm5ldC9ub3RpZmljYXRpb24ueG1s
MFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNybDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQCLVUQAwQCudeMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMiujANBgkqhkiG
9w0BAQsFAAOCAQEAQXSxF6C0fNNcHZl5Wa/6J8S1lzbgf1uePpPyco9V3qkP4bAv
vxxucPZeG4svrNR6Gfz0bxW3XK936rWk+qjAufHrWgeA5xB2qQLJNrTucY/e6/LE
cgZylCg4wIcQvAE9L8t23yeqVANIkg9tWUrxYBTPiH4rZOH3IznbtG1Gmln/bnD9
q321VkOx3p795aank0btJ1R1FxqRfEMWCNLjcDnE+bp/vrtQ7vAiE0arsTPJywcI
HnbY1c37Ml99L+Jz2ykvXVMbgD/dpzR3MdQx9qYPMcqWQhWjf/gnOkxv42wHM3Mw
Hdu6TqCL4EhJ5xrYfXiPjULBph+VvLiBakRGNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:17 2024 by rpki-client on console-fra.rpki-client.org