Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
File: Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer (raw, json)
Hash identifier: Y5zhITBiV4xb8RQvKsUasY7UB6+YnCLbSXjnvKDQDGA=
Subject key identifier: 51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3493B3B405F37F60B121FBE4E5732C6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:30:05 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.212.169.0/24
IP: 2a12:e40::/29
Validation: Failed, certificate revoked on Mon 18 Mar 2024 15:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3b:3b:40:5f:37:f6:0b:12:1f:be:4e:57:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:e6:84:85:d0:03:d0:81:8a:2e:4d:3c:a7:
6e:2c:9b:8c:d0:63:86:d6:06:7c:28:a7:25:e7:84:
82:27:b9:2a:06:c0:92:f5:7e:a3:44:68:74:5f:08:
8a:52:5c:a6:68:76:c6:ae:c3:6d:ed:42:c0:a4:cd:
c1:1b:1a:00:05:c4:c8:06:65:ff:96:2a:ac:70:f5:
18:d5:c2:9b:46:e0:0d:81:17:f1:47:78:fe:9c:85:
93:c9:9e:4d:9d:c3:43:f1:54:2f:66:43:3d:4a:74:
15:2c:e8:95:1a:13:a3:5a:bb:b2:46:e4:1e:89:7a:
d6:c7:c2:51:a1:8c:08:d7:82:bf:02:d5:da:0b:10:
5b:97:2e:9b:32:83:ca:d2:c7:1d:c4:86:b5:9b:09:
a6:c2:7c:ad:5a:5d:63:52:b7:da:b2:67:b5:4c:eb:
5b:47:7d:f7:32:0b:ce:20:38:bd:2e:60:c8:ae:0c:
a0:6a:ae:16:49:45:13:75:79:0f:74:51:34:87:c0:
99:06:f7:1d:e0:b2:a9:5d:83:6c:19:0b:cd:94:c8:
57:df:f6:20:ea:44:f9:9a:22:10:dd:80:17:c9:36:
be:5a:39:ce:c4:79:be:4a:59:a2:56:02:7b:8c:ba:
52:29:c5:2e:d9:22:86:e1:3e:a0:ac:d9:88:26:1b:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.169.0/24
IPv6:
2a12:e40::/29
Signature Algorithm: sha256WithRSAEncryption
28:ff:93:c7:c4:47:1d:11:4b:56:bb:eb:65:83:8b:f4:3c:89:
40:19:1d:71:97:88:d7:e9:c7:be:7b:cf:67:7a:9a:78:a1:79:
ae:8b:3e:5c:cf:70:25:43:84:87:a1:7e:58:a7:d2:b4:50:3d:
59:57:7c:dd:ab:41:22:93:7e:d2:80:03:58:da:13:1a:6d:64:
75:b3:a7:c7:88:1d:96:b0:cd:1f:7d:bf:99:4d:47:21:5b:06:
1a:e8:2b:95:43:b5:19:b5:ad:47:68:e5:14:6f:a4:36:e4:6c:
84:8f:15:3c:7e:94:56:3c:0a:dd:ef:73:85:47:60:5f:8f:08:
93:30:11:74:69:8a:aa:29:43:46:3e:c1:53:63:74:74:e0:a6:
c3:84:88:1b:45:58:0b:bc:1e:bf:59:2a:0a:60:51:8b:42:8a:
a7:be:2a:64:9c:f9:aa:0a:dc:99:8d:06:7b:25:08:ff:52:08:
f0:3b:75:83:1f:ad:0f:c3:0a:ad:63:e4:70:43:b1:4b:f5:e8:
98:f3:2c:1e:87:8a:2e:91:c8:85:13:4a:ed:cf:14:f9:d3:2a:
60:96:b1:1d:be:36:62:47:2d:6c:06:52:79:a5:76:92:54:2e:
4e:af:31:82:35:c6:2c:6d:f1:44:5e:e6:0c:a5:49:12:47:9a:
72:62:65:c9
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzDSTs7QF839gsSH75OVzLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWRlYWEzZTNmNTNlYzRiNmMxMzhjNzg2NTQzNzI5MGUzMmE1YzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T3mhIXQA9CBii5NPKduLJuM0GOG
1gZ8KKcl54SCJ7kqBsCS9X6jRGh0XwiKUlymaHbGrsNt7ULApM3BGxoABcTIBmX/
liqscPUY1cKbRuANgRfxR3j+nIWTyZ5NncND8VQvZkM9SnQVLOiVGhOjWruyRuQe
iXrWx8JRoYwI14K/AtXaCxBbly6bMoPK0scdxIa1mwmmwnytWl1jUrfasme1TOtb
R333MgvOIDi9LmDIrgygaq4WSUUTdXkPdFE0h8CZBvcd4LKpXYNsGQvNlMhX3/Yg
6kT5miIQ3YAXyTa+WjnOxHm+SlmiVgJ7jLpSKcUu2SKG4T6grNmIJhvwvwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFHeqj4/U+xLbBOMeGVDcpDjKlw6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4L2NhMzNh
NC00YTYxLTQ0ZWItOTVkNC1lYTg0NTRiZjJmNGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2EzM2E0
LTRhNjEtNDRlYi05NWQ0LWVhODQ1NGJmMmY0Yy8xL1VkNnFQajlUN0V0c0U0eDRa
VU55a09NcVhEby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW9SpMA0EAgACMAcDBQMqEg5AMA0GCSqGSIb3
DQEBCwUAA4IBAQAo/5PHxEcdEUtWu+tlg4v0PIlAGR1xl4jX6ce+e89nepp4oXmu
iz5cz3AlQ4SHoX5Yp9K0UD1ZV3zdq0Eik37SgANY2hMabWR1s6fHiB2WsM0ffb+Z
TUchWwYa6CuVQ7UZta1HaOUUb6Q25GyEjxU8fpRWPArd73OFR2BfjwiTMBF0aYqq
KUNGPsFTY3R04KbDhIgbRVgLvB6/WSoKYFGLQoqnvipknPmqCtyZjQZ7JQj/Ugjw
O3WDH60PwwqtY+RwQ7FL9eiY8yweh4oukciFE0rtzxT50ypglrEdvjZiRy1sBlJ5
pXaSVC5OrzGCNcYsbfFEXuYMpUkSR5pyYmXJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:16 2024 by rpki-client on console-fra.rpki-client.org