
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
File: _IVpUg4Np9h6poISSid01jZmteg.cer (raw, json)
Hash identifier: DxMLHf2K4VuDkiyeqhW5F5/ZlOrwYjPUnTaotx3hHPw=
Subject key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189BFD939CB35D712EBB41152E4EC35E014
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Aug 2023 09:20:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 192.144.28.0/22
IP: 194.5.8.0/22
IP: 212.81.32.0/22
IP: 2a0a:f8c0::/29
IP: 2a0b:2d80::/29
IP: 2a0c:7b80::/29
IP: 2a0c:c180::/29
IP: 2a0d:81c0::/29
IP: 2a0d:9ac0::/29
IP: 2a0d:cb40::/29
IP: 2a0d:e3c0::/29
IP: 2a0e:9fc0::/29
IP: 2a0f:8440::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:d9:39:cb:35:d7:12:eb:b4:11:52:e4:ec:35:e0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 4 09:20:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:94:5b:3b:17:8d:fc:ce:29:db:64:1c:64:
9d:f5:37:cc:5e:5a:85:a6:3b:28:9e:b6:17:a9:71:
29:45:7e:87:4e:a1:7c:66:4a:c3:cc:b3:e9:ab:30:
0d:aa:c5:56:72:1d:f4:89:95:f9:b6:d5:ae:42:a0:
95:85:d1:69:3d:2d:65:78:9c:c6:bc:ba:32:f6:04:
8f:fc:90:3b:2c:43:bb:f6:34:71:dc:46:a1:7f:5b:
5b:0d:aa:2c:e8:1f:1f:d0:8b:47:66:0e:c3:ca:f3:
d9:04:93:2f:fb:4a:c6:3c:70:c2:2f:e0:6a:1e:db:
5a:c4:d3:0c:d9:0c:97:68:6a:44:96:61:07:15:b6:
fe:7e:b9:03:40:ad:7f:36:8a:0a:29:70:7b:42:93:
b6:2d:90:9b:6d:f3:dd:10:e4:fb:d0:ea:1b:3e:e8:
ba:96:8a:6c:d3:64:4a:c5:56:38:b9:fb:5f:45:05:
11:b1:29:54:96:44:a4:95:4c:07:17:b7:5b:65:b7:
7a:f7:81:b9:b2:7c:e8:52:1f:28:d6:fa:5a:fa:9b:
d8:e7:ef:93:09:02:ff:27:3b:46:2a:e1:b7:11:13:
79:74:89:d1:10:93:27:10:5e:56:f9:1a:76:45:e7:
90:fe:4a:5b:51:90:4d:dc:1c:d5:b8:58:f4:52:b0:
bb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.28.0/22
194.5.8.0/22
212.81.32.0/22
IPv6:
2a0a:f8c0::/29
2a0b:2d80::/29
2a0c:7b80::/29
2a0c:c180::/29
2a0d:81c0::/29
2a0d:9ac0::/29
2a0d:cb40::/29
2a0d:e3c0::/29
2a0e:9fc0::/29
2a0f:8440::/29
Signature Algorithm: sha256WithRSAEncryption
09:74:b2:02:54:a3:35:09:65:ce:73:be:7d:0c:10:6d:f3:ae:
28:43:79:61:10:bb:8d:b0:a3:82:4e:14:e8:66:35:9d:57:25:
89:d5:d6:28:71:eb:98:82:58:54:90:bf:b3:b5:00:bc:20:78:
e3:28:21:fc:48:9d:05:fb:c6:34:d9:52:c1:be:b0:a9:16:a8:
2d:64:6b:5c:69:14:a1:a5:a3:96:2f:51:ef:df:b6:2a:77:0f:
1c:94:91:90:0f:06:8a:c0:50:07:4b:d0:1d:84:a1:ea:32:8f:
39:8d:34:51:a1:eb:19:32:c3:4a:e9:92:28:10:23:6d:d9:eb:
a4:ef:4b:56:41:4b:97:8c:ea:38:05:7e:55:3f:cf:83:06:5e:
87:92:70:d0:e8:1e:dc:c7:b6:21:a7:18:b4:ef:7a:c4:4c:bf:
6f:05:03:03:8b:e0:52:44:dd:5a:de:46:de:70:3a:3c:92:7a:
c1:44:15:bb:55:94:ce:43:ac:08:c9:8a:cb:f2:3a:6e:66:cb:
35:53:bb:e9:89:c9:fd:c3:d4:ed:14:f3:77:c4:52:e8:90:a1:
77:d3:74:b7:a2:c3:6f:ff:d2:71:bc:40:f0:0d:61:7f:81:96:
60:00:e8:53:32:6f:f7:87:42:11:8a:67:64:7f:96:a4:89:ec:
77:c2:7c:d5
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAYm/2TnLNdcS67QRUuTsNeAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwODA0MDkyMDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzg1Njk1MjBlMGRhN2Q4N2FhNjgyMTI0YTI3NzRkNjM2NjZiNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm6UWzsXjfzOKdtkHGSd9TfMXlqF
pjsonrYXqXEpRX6HTqF8ZkrDzLPpqzANqsVWch30iZX5ttWuQqCVhdFpPS1leJzG
vLoy9gSP/JA7LEO79jRx3Eahf1tbDaos6B8f0ItHZg7DyvPZBJMv+0rGPHDCL+Bq
HttaxNMM2QyXaGpElmEHFbb+frkDQK1/NooKKXB7QpO2LZCbbfPdEOT70OobPui6
lops02RKxVY4uftfRQURsSlUlkSklUwHF7dbZbd694G5snzoUh8o1vpa+pvY5++T
CQL/JztGKuG3ERN5dInREJMnEF5W+Rp2ReeQ/kpbUZBN3BzVuFj0UrC7BwIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFPyFaVIODafYeqaCEkondNY2ZrXoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzNiMTMx
My03MmUyLTRjNDUtODU2OC1iYTJkMWEwYWM0MmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvM2IxMzEz
LTcyZTItNGM0NS04NTY4LWJhMmQxYTBhYzQyZC8xL19JVnBVZzROcDloNnBvSVNT
aWQwMWpabXRlZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHkGCCsGAQUF
BwEHAQH/BGowaDAYBAIAATASAwQCwJAcAwQCwgUIAwQC1FEgMEwEAgACMEYDBQMq
CvjAAwUDKgstgAMFAyoMe4ADBQMqDMGAAwUDKg2BwAMFAyoNmsADBQMqDctAAwUD
Kg3jwAMFAyoOn8ADBQMqD4RAMA0GCSqGSIb3DQEBCwUAA4IBAQAJdLICVKM1CWXO
c759DBBt864oQ3lhELuNsKOCThToZjWdVyWJ1dYoceuYglhUkL+ztQC8IHjjKCH8
SJ0F+8Y02VLBvrCpFqgtZGtcaRShpaOWL1Hv37Yqdw8clJGQDwaKwFAHS9AdhKHq
Mo85jTRRoesZMsNK6ZIoECNt2euk70tWQUuXjOo4BX5VP8+DBl6HknDQ6B7cx7Yh
pxi073rETL9vBQMDi+BSRN1a3kbecDo8knrBRBW7VZTOQ6wIyYrL8jpuZss1U7vp
icn9w9TtFPN3xFLokKF303S3osNv/9JxvEDwDWF/gZZgAOhTMm/3h0IRimdkf5ak
iex3wnzV
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:44:28 2023 by rpki-client on console.sobornost.net