Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.cer
File: U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.cer (raw, json)
Hash identifier: nxfbHsIkOOImpB46nBKQswi/4cRrjJl32WCgA1F8k60=
Subject key identifier: 53:42:7E:07:C6:7C:66:B1:95:E1:DA:47:0B:47:5B:1E:3D:8F:99:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF76C77DAA590F49D0498C3EE0C525
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.69.150.0/24
IP: 2a11:e200::/29
Validation: Failed, certificate revoked on Tue 25 Jul 2023 09:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:76:c7:7d:aa:59:0f:49:d0:49:8c:3e:e0:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53427e07c67c66b195e1da470b475b1e3d8f9901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:c4:01:3d:ea:66:41:44:45:bb:3c:0b:18:
a2:d4:3f:16:f4:4d:84:96:73:33:44:e0:89:7d:87:
0b:0d:6e:83:de:47:f7:10:6f:4e:3c:62:ab:5c:98:
1f:fc:76:e0:7e:e2:f4:88:4b:65:0f:5b:20:57:00:
b4:5f:e7:ef:a1:f2:e4:cc:62:fa:76:94:e6:d7:57:
e7:38:ae:4e:7a:37:2b:03:fd:7b:1b:9a:c5:6f:44:
c6:e3:2b:64:87:f2:27:c3:45:9e:df:61:0b:31:ec:
5d:1d:b9:bd:d4:18:a1:05:db:08:08:14:71:4f:fb:
f7:fc:e5:51:df:01:0e:b2:f1:c2:97:a1:be:ff:2b:
2c:0c:39:1d:13:ac:d2:c4:3e:6e:6d:b2:ad:d6:f6:
0d:02:af:c1:12:49:bd:d6:5d:e6:91:7c:c1:af:8b:
86:04:18:a9:0f:5f:49:79:32:f0:64:6a:a0:16:84:
60:75:7d:16:b4:ec:f9:74:b9:8d:e9:fe:51:8e:2d:
6f:73:16:f5:04:ee:11:55:fb:75:e9:49:d5:23:8e:
b5:14:c4:2a:71:9f:7c:cf:8f:75:fa:7d:3f:62:22:
28:99:82:1d:3c:1f:a2:df:70:bb:e9:76:47:cd:06:
ce:ef:36:c6:4c:3f:c4:5a:3c:9b:10:2e:c4:19:0f:
f3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:42:7E:07:C6:7C:66:B1:95:E1:DA:47:0B:47:5B:1E:3D:8F:99:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/413592-1645-4781-ade7-634a383c4512/1/U0J-B8Z8ZrGV4dpHC0dbHj2PmQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.150.0/24
IPv6:
2a11:e200::/29
Signature Algorithm: sha256WithRSAEncryption
83:f6:9a:05:19:44:6c:b4:e8:7d:51:9c:89:b9:28:38:08:35:
77:d9:be:2a:9c:64:21:aa:13:98:4d:14:b7:9c:4e:a0:7f:69:
b4:91:db:0f:dd:84:a3:a0:87:ae:2b:2a:ea:dc:eb:00:e0:85:
a6:92:b1:bc:30:f8:0e:4a:30:79:4f:55:a6:93:87:f4:83:c3:
b0:06:ac:73:63:c6:14:e2:da:44:fa:18:8f:41:58:99:7a:6a:
a8:80:16:e3:8b:40:7a:5b:ad:2b:04:5d:66:b8:a5:a6:0d:da:
33:85:4c:0c:1e:59:19:70:a1:aa:49:6e:cb:59:69:b6:8a:3f:
7a:05:26:85:6a:ac:cc:34:ff:33:8e:eb:54:b4:b4:16:49:eb:
ee:75:73:16:f9:79:5e:f0:53:1b:36:0b:2f:b6:9a:3c:ce:51:
13:93:8e:d1:1f:31:6f:2c:c0:54:03:98:b9:7e:ec:ed:ca:de:
84:6e:12:34:67:8b:6e:b7:18:ac:18:5f:ba:dc:5e:d9:df:9e:
87:d5:2e:2d:b7:7a:e4:4a:5f:d5:63:04:44:db:27:52:30:5b:
bb:91:88:77:10:4e:0f:31:df:31:e5:e7:94:75:77:e4:80:90:
54:cf:23:a0:02:a9:cb:76:dd:6e:1d:ab:6b:a1:d4:d8:f0:d7:
9d:fd:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:23 2024 by rpki-client on console-ams.rpki-client.org