Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UfQL--MfHjv--zY9WN6b2KJ9hxU.cer
File: UfQL--MfHjv--zY9WN6b2KJ9hxU.cer (raw, json)
Hash identifier: fcfM2Im2rEbCnuBsu2K+TE33qTHM413wTdp1SKb07mc=
Subject key identifier: 51:F4:0B:FB:E3:1F:1E:3B:FE:FB:36:3D:58:DE:9B:D8:A2:7D:87:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BFB829D52E7008628CB6D5827A1D15C72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/UfQL--MfHjv--zY9WN6b2KJ9hxU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Nov 2023 09:28:43 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.80.12.0/22
IP: 2a14:6b00::/29
Validation: Failed, certificate revoked on Thu 30 Nov 2023 09:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:82:9d:52:e7:00:86:28:cb:6d:58:27:a1:d1:5c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 23 09:28:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51f40bfbe31f1e3bfefb363d58de9bd8a27d8715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:4f:4e:aa:f8:c9:0b:ea:39:d0:ea:4c:59:
77:04:39:41:2d:ed:0a:54:03:97:bb:ea:97:6d:3a:
e6:12:94:88:39:84:2c:0c:4c:b4:32:82:a9:07:f1:
ab:bf:d9:29:2f:0e:37:78:77:34:07:7d:84:26:7b:
cd:a0:8b:7b:ec:9a:cb:85:4b:40:da:06:2b:9a:95:
02:bc:cb:87:e6:be:83:cc:05:f4:86:6e:6e:f2:fc:
90:56:13:3a:63:6e:9d:50:a8:1e:15:11:71:75:99:
4e:80:6e:7d:1d:8d:c4:af:2d:fd:d8:a2:47:5d:80:
33:d5:b3:97:a1:16:2f:b3:2c:89:a2:71:84:2c:b2:
13:31:f4:be:71:0a:a7:58:2f:aa:e9:ef:d9:95:ee:
fa:2d:f8:2a:de:f9:9f:e9:8e:fd:5d:9d:e7:38:17:
32:07:39:f4:20:c9:c8:4c:82:4a:9a:0b:f8:71:84:
79:f4:cb:28:ce:86:8e:7d:3b:6a:7b:94:e7:08:1a:
fe:52:47:ed:ec:10:a8:b6:7b:6d:94:fa:f3:02:4b:
42:d4:e4:5f:3c:e1:fd:cc:a8:b7:b4:21:0d:20:e7:
97:ad:37:91:25:ad:b6:ea:55:fa:b6:35:f6:ec:49:
4b:e6:ca:7e:53:48:83:0e:39:1c:84:21:30:35:1b:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:0B:FB:E3:1F:1E:3B:FE:FB:36:3D:58:DE:9B:D8:A2:7D:87:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/455b4b-be5c-4a6d-9927-e2498f0c687a/1/UfQL--MfHjv--zY9WN6b2KJ9hxU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.12.0/22
IPv6:
2a14:6b00::/29
Signature Algorithm: sha256WithRSAEncryption
82:91:45:ac:18:4e:64:69:c7:44:bb:20:03:bc:72:1a:77:35:
e5:9b:ed:fe:f0:76:e7:3b:d2:65:ec:e9:22:9f:5f:20:fb:93:
88:ac:82:27:44:08:b0:cb:e4:d5:52:16:7a:63:b8:16:2c:43:
4d:df:58:9c:76:dd:60:b9:70:1d:e8:1a:43:5e:96:21:1e:9c:
44:c5:5c:ff:08:c3:98:9a:e1:17:66:2f:e3:0b:a9:36:b2:7a:
33:0a:cc:0e:97:a8:a1:a9:48:1c:d1:5b:0a:ce:b4:36:50:86:
16:93:b3:88:7b:c9:5b:0a:4b:b1:0e:99:6c:c3:12:6d:b4:13:
b9:24:26:57:ab:7d:4d:90:00:f9:ee:9e:3b:e6:78:20:d7:cd:
fe:12:e7:3b:bb:17:ba:87:50:28:6e:08:0f:26:53:b5:f1:b4:
3c:f0:fc:3c:e8:66:c6:ab:5e:3c:c0:1c:60:b6:86:91:5d:02:
7f:1a:f5:8b:c2:70:9e:c3:3a:88:e4:e9:6f:76:83:33:f0:11:
84:86:2b:e3:7a:74:5a:cc:46:e4:5f:60:3d:ed:5f:e9:9b:0d:
25:33:46:f6:53:91:01:ed:0c:31:fb:40:e5:eb:41:75:6d:d9:
8b:25:5f:bf:74:99:40:33:20:bd:52:3c:0c:dc:3f:42:f5:1f:
c2:50:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:16 2024 by rpki-client on console-fra.rpki-client.org