Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer
File: UbO6HEsRbsfPGTwLL2VRE5g3-tI.cer (raw, json)
Hash identifier: uHnkGev2XxSdkJIFHoJIEzdyqDNWmw147bx20fHqz4Q=
Subject key identifier: 51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6EFA8684A470BF03E7045FA1A8431
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.11.0/24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 16:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:ef:a8:68:4a:47:0b:f0:3e:70:45:fa:1a:84:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51b3ba1c4b116ec7cf193c0b2f6551139837fad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:a0:46:77:5e:92:19:8a:82:16:58:10:b4:
c7:db:59:31:41:3e:ed:a9:d0:dd:38:62:30:65:0a:
e2:9b:89:93:ac:2c:94:49:a6:da:ee:32:69:f1:59:
40:d1:79:b7:37:0e:5b:ce:78:ff:d3:f5:6c:be:d0:
9b:d0:d7:45:1f:90:9e:ad:21:9c:ea:81:c5:8d:1c:
4f:23:16:66:4a:09:b3:6d:f4:7d:56:5e:cf:76:3a:
d0:82:67:ef:a7:8c:3f:a6:22:9f:3d:1e:bb:34:0e:
f6:ae:a1:a2:81:aa:90:79:00:16:96:0b:b3:af:b3:
c1:e6:da:56:4d:6f:f8:76:74:6b:5a:12:82:76:95:
fe:71:52:d2:3b:7d:03:97:1d:d1:19:5f:61:06:2c:
a3:14:9e:6a:59:ea:ea:e2:85:3d:ed:c4:30:82:41:
e1:df:fa:40:db:db:ed:9b:37:bc:ec:59:f9:2d:d7:
b9:a6:d4:7e:22:36:d9:1c:f8:4b:05:7f:aa:1c:2e:
6b:3c:5a:e5:ef:26:6d:ea:ed:f1:f4:89:e4:67:dd:
00:fc:4d:7c:f9:a6:01:42:80:95:45:0a:c5:fd:fa:
5a:cf:98:be:ad:7d:87:45:ec:21:4c:f9:a3:dc:e6:
a7:5b:34:0b:a4:57:01:ab:43:77:10:6d:d8:5c:94:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:BA:1C:4B:11:6E:C7:CF:19:3C:0B:2F:65:51:13:98:37:FA:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9bc52e-c6f6-4a67-824a-24d9c5fe3fa4/1/UbO6HEsRbsfPGTwLL2VRE5g3-tI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.11.0/24
Signature Algorithm: sha256WithRSAEncryption
08:60:54:91:1b:b1:4a:c3:ac:93:be:86:48:d3:74:32:15:7e:
78:4a:61:21:51:89:e4:49:b5:e4:72:fb:f7:9d:34:40:7b:e9:
9e:e7:43:a2:7c:d4:12:51:45:75:c6:10:40:eb:53:6f:82:e0:
22:6f:85:6b:35:57:25:56:fc:d7:6b:23:5c:c6:cd:ec:d1:9d:
c3:f0:f8:d5:fa:fd:3e:6c:45:ee:52:4e:24:98:a5:96:d5:26:
74:42:92:2a:d8:bb:88:a7:6d:d5:4b:88:cd:8e:fd:1d:55:b6:
20:ed:83:24:46:93:1f:77:b1:f0:9d:ac:20:47:b6:6e:e4:ee:
41:f9:fd:92:0b:99:30:5e:23:a3:d8:23:b9:4d:af:91:13:a4:
f5:32:3b:c5:49:23:35:a8:d4:1e:65:37:34:52:ef:7b:1a:ef:
2c:b3:8b:7f:e8:75:ea:18:fd:07:ac:f5:ce:f8:f8:97:c8:c4:
da:36:23:16:e9:93:19:ae:aa:a1:54:51:f9:f0:9e:c3:90:51:
41:8a:7b:4a:9a:62:30:1c:96:27:dd:e4:6d:51:77:b7:5c:05:
31:02:3c:35:2a:73:7b:22:28:8e:a5:31:4c:d2:28:51:73:e4:
3c:db:d9:74:47:b3:8c:cb:7e:c8:c7:d0:05:36:dd:cb:30:f5:
aa:81:94:c8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVx1u+oaEpHC/A+cEX6GoQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWIzYmExYzRiMTE2ZWM3Y2YxOTNjMGIyZjY1NTExMzk4MzdmYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBegRndekhmKghZYELTH21kxQT7t
qdDdOGIwZQrim4mTrCyUSaba7jJp8VlA0Xm3Nw5bznj/0/VsvtCb0NdFH5CerSGc
6oHFjRxPIxZmSgmzbfR9Vl7PdjrQgmfvp4w/piKfPR67NA72rqGigaqQeQAWlguz
r7PB5tpWTW/4dnRrWhKCdpX+cVLSO30Dlx3RGV9hBiyjFJ5qWerq4oU97cQwgkHh
3/pA29vtmze87Fn5Lde5ptR+IjbZHPhLBX+qHC5rPFrl7yZt6u3x9InkZ90A/E18
+aYBQoCVRQrF/fpaz5i+rX2HRewhTPmj3OanWzQLpFcBq0N3EG3YXJQtGwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFFGzuhxLEW7Hzxk8Cy9lUROYN/rSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzliYzUy
ZS1jNmY2LTRhNjctODI0YS0yNGQ5YzVmZTNmYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvOWJjNTJl
LWM2ZjYtNGE2Ny04MjRhLTI0ZDljNWZlM2ZhNC8xL1ViTzZIRXNSYnNmUEdUd0xM
MlZSRTVnMy10SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAPgMLMA0GCSqGSIb3DQEBCwUAA4IBAQAIYFSR
G7FKw6yTvoZI03QyFX54SmEhUYnkSbXkcvv3nTRAe+me50OifNQSUUV1xhBA61Nv
guAib4VrNVclVvzXayNcxs3s0Z3D8PjV+v0+bEXuUk4kmKWW1SZ0QpIq2LuIp23V
S4jNjv0dVbYg7YMkRpMfd7HwnawgR7Zu5O5B+f2SC5kwXiOj2CO5Ta+RE6T1MjvF
SSM1qNQeZTc0Uu97Gu8ss4t/6HXqGP0HrPXO+PiXyMTaNiMW6ZMZrqqhVFH58J7D
kFFBintKmmIwHJYn3eRtUXe3XAUxAjw1KnN7IiiOpTFM0ihRc+Q829l0R7OMy37I
x9AFNt3LMPWqgZTI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:15 2024 by rpki-client on console-fra.rpki-client.org