Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
File: UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer (raw, json)
Hash identifier: L+hvhozyot4V3mR+NPk1EIskaWSungVihPwCxu4Q83c=
Subject key identifier: 52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8DF51EA64F55C504673A539E6C7E04B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 06:32:07 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 195.64.110.0/24
IP: 2a12:ee80::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 09:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:51:ea:64:f5:5c:50:46:73:a5:39:e6:c7:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 06:32:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:96:17:64:44:97:68:d5:a8:a5:52:d9:fb:
66:f1:76:d4:04:43:07:06:83:73:33:21:c3:e6:d8:
c8:79:1a:30:3c:fe:0c:be:be:74:ed:4e:32:45:52:
46:c7:28:2a:9b:6c:ae:b4:67:6c:67:b0:c7:60:59:
27:6a:dc:94:75:15:6f:31:ef:a2:ab:ce:a9:64:f6:
77:f2:29:e7:29:5e:b2:ac:e5:4a:2b:ed:e7:c5:c0:
fc:00:e5:ef:4c:d2:f1:56:ee:32:60:f7:3f:ab:40:
c1:89:5e:07:d2:04:29:72:58:79:48:64:85:dd:81:
30:02:60:cc:f3:8c:9a:5f:ea:74:88:ff:fb:bd:37:
52:0b:cc:5a:1f:9d:ba:fc:02:b6:0f:74:93:63:6b:
9f:2e:c6:48:b5:7d:46:a3:ec:04:6c:9f:62:f1:13:
37:5c:f8:5f:53:e2:d7:12:12:b8:a7:ac:fd:2c:bd:
7b:95:38:8f:72:f0:df:a2:ce:8e:a4:f8:a0:a2:06:
d8:98:1c:24:d8:78:fb:e7:2b:44:e3:f1:7e:e7:a6:
a2:aa:cc:b9:ec:80:25:27:9f:d8:86:5e:06:0c:f8:
68:35:77:3e:45:fd:c8:a6:7d:bf:5e:1f:73:32:8b:
84:59:30:96:f2:02:b8:58:63:09:34:7f:8a:61:a4:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.110.0/24
IPv6:
2a12:ee80::/29
Signature Algorithm: sha256WithRSAEncryption
09:e2:1c:9c:6d:ce:e1:a9:69:e5:8c:05:a4:6d:b9:b0:1c:78:
a5:ae:38:aa:4a:57:27:27:0e:92:d0:7f:15:12:94:49:c7:a4:
e3:47:3b:66:d3:ef:61:c6:c4:ba:a0:ee:0b:3c:16:69:b4:8c:
5a:3a:27:69:34:ef:a0:48:af:52:53:b2:1a:ed:13:91:9c:54:
09:e7:78:40:29:c0:df:cf:73:d5:86:e2:51:4c:2c:5d:16:12:
37:8b:ef:b2:7a:4a:b4:80:59:6b:f7:40:c5:eb:a4:ab:77:98:
3c:07:4d:74:60:75:2e:2d:0a:17:fb:65:80:85:7a:c2:5b:80:
4e:94:87:54:ba:25:d9:eb:4b:5e:70:4d:59:cc:1a:64:1a:18:
40:b1:b8:6d:45:a3:fa:25:4f:73:43:fd:16:9d:d2:2c:61:96:
10:fa:d7:7b:cc:7b:09:bc:41:d1:9c:8a:42:d1:2d:d0:64:29:
7d:74:68:05:d1:33:13:6d:80:04:7d:22:f1:e4:d6:44:0e:dc:
47:fb:40:9c:79:02:10:bb:ab:cf:c6:99:84:bd:3f:52:d9:6e:
37:1a:f9:d2:fb:43:2a:e2:cb:95:3d:22:82:b2:d2:a0:22:5b:
2d:5b:35:ef:c4:bd:5e:b3:54:59:94:12:87:6b:ab:d4:12:f6:
eb:fe:49:3f
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzI31HqZPVcUEZzpTnmx+BLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDYzMjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjUxY2VkYzkzODdjNmIzZDM3ZmQ1NjQ2MTAxOWNhNTIxMThhYTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTiWF2REl2jVqKVS2ftm8XbUBEMH
BoNzMyHD5tjIeRowPP4Mvr507U4yRVJGxygqm2yutGdsZ7DHYFknatyUdRVvMe+i
q86pZPZ38innKV6yrOVKK+3nxcD8AOXvTNLxVu4yYPc/q0DBiV4H0gQpclh5SGSF
3YEwAmDM84yaX+p0iP/7vTdSC8xaH526/AK2D3STY2ufLsZItX1Go+wEbJ9i8RM3
XPhfU+LXEhK4p6z9LL17lTiPcvDfos6OpPigogbYmBwk2Hj75ytE4/F+56aiqsy5
7IAlJ5/Yhl4GDPhoNXc+Rf3Ipn2/Xh9zMouEWTCW8gK4WGMJNH+KYaQHYwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFFJRztyTh8az03/VZGEBnKUhGKpzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzBiOGE3
Mi03ZjdjLTQ0ZTUtYWQxOC0zZDQ3NWU4ZTZjNjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvMGI4YTcy
LTdmN2MtNDRlNS1hZDE4LTNkNDc1ZThlNmM2OC8xL1VsSE8zSk9IeHJQVGY5VmtZ
UUdjcFNFWXFuTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAw0BuMA0EAgACMAcDBQMqEu6AMA0GCSqGSIb3
DQEBCwUAA4IBAQAJ4hycbc7hqWnljAWkbbmwHHilrjiqSlcnJw6S0H8VEpRJx6Tj
Rztm0+9hxsS6oO4LPBZptIxaOidpNO+gSK9SU7Ia7RORnFQJ53hAKcDfz3PVhuJR
TCxdFhI3i++yekq0gFlr90DF66Srd5g8B010YHUuLQoX+2WAhXrCW4BOlIdUuiXZ
60tecE1ZzBpkGhhAsbhtRaP6JU9zQ/0WndIsYZYQ+td7zHsJvEHRnIpC0S3QZCl9
dGgF0TMTbYAEfSLx5NZEDtxH+0CceQIQu6vPxpmEvT9S2W43GvnS+0Mq4suVPSKC
stKgIlstWzXvxL1es1RZlBKHa6vUEvbr/kk/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:37 2024 by rpki-client on console-ams.rpki-client.org