Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UmX5v906eFWmF9yVcie57t2kM6k.cer
File: UmX5v906eFWmF9yVcie57t2kM6k.cer (raw, json)
Hash identifier: i6Mq6sAi4uedc9VyGyo53BgsQAlRHhSfkE0grktQVTo=
Subject key identifier: 52:65:F9:BF:DD:3A:78:55:A6:17:DC:95:72:27:B9:EE:DD:A4:33:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC500766620C82C6474D963B15B448A8E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/UmX5v906eFWmF9yVcie57t2kM6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.83.0/24
IP: 2a12:a980::/29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:76:66:20:c8:2c:64:74:d9:63:b1:5b:44:8a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5265f9bfdd3a7855a617dc957227b9eedda433a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:a3:8c:05:07:e2:2c:f4:09:3f:bb:1f:30:
e3:c6:91:9c:79:96:ce:0b:b4:de:65:b4:18:94:ce:
4f:10:6e:03:a6:74:20:30:4a:ba:fc:a1:a9:dc:bf:
a2:6d:02:cd:b0:02:12:c4:41:5f:f3:96:bf:64:91:
dd:4f:57:77:4f:66:1f:e4:1e:60:60:f2:a2:ce:79:
d9:68:94:d4:e5:e3:8b:50:4b:bb:df:a8:c5:c4:2a:
5e:d8:7a:20:c2:9d:07:88:c2:4d:12:d4:0f:fe:ba:
d6:ae:23:1e:69:75:b2:35:ba:86:05:5e:b4:d5:be:
58:e1:aa:7e:0b:f0:37:60:fe:cd:01:6b:16:de:c6:
27:1e:10:25:c4:40:c0:9e:e6:4e:69:75:cb:97:79:
fd:c1:e1:14:b9:ec:fc:3c:d5:09:de:56:23:e7:73:
ab:62:6f:41:d8:05:11:7b:62:f1:6d:2c:65:f3:84:
9a:af:75:df:bb:ca:6e:7c:db:b2:34:b2:ad:61:04:
ed:6b:16:c6:7b:e9:7e:9c:a7:90:28:2c:73:f7:a4:
21:47:29:da:b8:f7:69:8e:d1:14:99:25:ea:6f:6f:
4f:f5:c3:5c:65:6e:ae:1e:f6:18:03:f1:28:f7:93:
d2:41:fb:a0:35:57:c6:1f:c9:cf:76:b3:6a:98:55:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:65:F9:BF:DD:3A:78:55:A6:17:DC:95:72:27:B9:EE:DD:A4:33:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/bbec8d-2be0-4bf4-9dce-0a22b35abc80/1/UmX5v906eFWmF9yVcie57t2kM6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.83.0/24
IPv6:
2a12:a980::/29
Signature Algorithm: sha256WithRSAEncryption
80:9f:67:9a:f5:44:58:47:38:97:ee:29:9e:12:93:f1:ac:af:
14:87:0e:56:c9:52:9e:46:2d:86:78:91:cb:64:25:28:86:a7:
21:c8:33:6d:13:47:53:d0:ee:ba:b8:d2:b4:ab:7a:87:3c:d5:
29:50:44:54:00:4e:20:ce:3f:4c:ab:db:d9:d5:18:91:b2:66:
c9:ed:4f:b7:46:ca:8f:d8:9c:24:c7:0c:fe:a5:30:e5:00:12:
89:d7:8d:dc:e3:8e:45:b0:08:0d:02:a5:16:7d:27:70:6f:a5:
f9:0e:f7:0d:d0:e5:66:28:ca:53:be:c1:ca:a6:74:9f:e5:36:
02:b9:53:d1:87:25:c4:05:3a:18:4a:22:4c:d4:5d:e1:04:ca:
8d:4e:a1:2a:89:e3:ed:5a:f8:80:2c:e4:56:4f:46:f7:7b:65:
dc:5b:d2:e0:39:c8:ef:45:03:d3:79:28:19:95:10:23:c9:69:
e2:de:e5:8c:4d:72:90:26:86:a5:fc:e9:96:c6:d2:a8:f8:74:
db:3f:40:63:b9:01:c9:39:63:e8:e7:dd:3d:10:64:6d:79:02:
31:71:d6:33:80:ab:51:b3:59:ef:a7:2d:b8:ba:a6:be:8c:d8:
ce:92:b8:62:d3:a0:db:28:32:14:93:ad:b9:9f:0f:c2:23:a4:
db:f8:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:38 2024 by rpki-client on console-ams.rpki-client.org