
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UoIehJbfUWAz73YZvsw9VV7MgTI.cer
File: UoIehJbfUWAz73YZvsw9VV7MgTI.cer (raw, json)
Hash identifier: oHRwdgkoSOdaJnK1N5qDtRMavOpTEG/MRC0sA/yE8dI=
Subject key identifier: 52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC802D9E636B9A4473AC345282CBBC2F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:31:19 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 211738
Validation: Failed, certificate revoked on Fri 19 Jan 2024 23:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d9:e6:36:b9:a4:47:3a:c3:45:28:2c:bb:c2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52821e8496df516033ef7619becc3d555ecc8132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:dd:9c:97:ba:6e:62:f9:82:32:b8:35:9b:
88:b0:33:43:dd:89:98:e6:41:36:05:a3:6c:b8:01:
cd:c5:a9:3d:f0:40:29:92:65:db:5a:ef:7a:d5:da:
0b:a0:2e:9d:bc:cf:31:db:6c:77:d3:19:ae:3d:dd:
a5:ac:67:6b:24:2a:b1:e5:90:6d:11:dd:a1:ee:d9:
92:0f:3e:08:21:d9:0d:d4:6b:c7:bc:c0:d8:16:e9:
f6:e3:ad:92:33:9d:90:74:b4:d5:ec:69:ab:3b:50:
4e:a2:3d:e5:65:fc:35:ee:9c:94:67:1c:07:f4:81:
47:d5:07:bc:31:58:b0:c6:03:25:15:f6:67:a8:81:
54:4b:b2:09:22:77:64:17:66:e2:fd:1a:3e:49:09:
2c:ff:cb:a0:f2:87:95:d3:7f:cb:7c:00:7b:1d:6e:
46:da:6a:e8:c1:58:2d:be:79:f5:e6:bb:a7:40:9b:
c2:72:b0:b7:4c:1e:b3:83:32:61:2a:1e:ab:5a:92:
e1:80:b5:53:a0:44:49:ba:9e:e3:9a:0f:79:05:e6:
b5:2e:aa:da:f6:bc:46:56:0a:67:ab:7b:66:07:84:
1d:36:e2:5f:0f:18:90:30:11:ff:22:7c:c2:95:b4:
f8:4e:d1:60:29:77:c3:56:f1:cc:ff:14:8b:79:f6:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211738
Signature Algorithm: sha256WithRSAEncryption
b1:5a:cd:7c:49:a7:3c:22:90:3b:15:b0:05:92:e5:80:77:be:
3b:bc:5b:e4:28:7c:8f:7c:7d:15:57:c5:d4:87:fa:e0:26:f1:
6e:ab:69:5a:55:25:01:ff:bd:78:f2:7a:ad:c3:50:ef:24:d0:
bf:32:d5:0b:a2:d2:78:b2:df:4e:e6:80:24:d9:33:e7:56:b6:
00:cb:e8:91:d8:d4:93:65:78:8b:63:e7:90:11:9c:27:48:90:
24:d7:c1:ab:96:1f:79:43:fa:7d:5a:70:f8:ed:51:f0:44:b1:
49:81:92:8b:8a:9e:e1:7e:67:a2:9b:16:e2:15:f7:96:18:19:
9d:82:5e:dd:8b:bf:cf:5a:98:84:2b:e6:d2:6e:41:f9:b1:ac:
57:1f:eb:2b:66:a7:dc:37:1c:ad:79:69:83:44:a0:f2:19:09:
d3:86:e3:ed:f8:47:30:be:ca:ba:94:8e:a3:1b:81:5a:37:42:
3b:d1:53:6c:4f:fd:27:54:bb:12:94:a3:01:13:c1:74:ee:79:
75:75:4c:c2:ce:43:f0:50:0d:2f:08:57:1a:ec:c2:0c:ba:df:
de:2f:5c:34:e8:2a:52:0e:d3:33:e5:76:c1:8b:5e:d8:b5:7b:
10:4f:f4:3d:1c:c0:f2:4d:d4:7f:24:2d:cf:57:31:94:29:55:
7b:ce:96:94
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAYzIAtnmNrmkRzrDRSgsu8L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDIzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjgyMWU4NDk2ZGY1MTYwMzNlZjc2MTliZWNjM2Q1NTVlY2M4MTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E7dnJe6bmL5gjK4NZuIsDND3YmY
5kE2BaNsuAHNxak98EApkmXbWu961doLoC6dvM8x22x30xmuPd2lrGdrJCqx5ZBt
Ed2h7tmSDz4IIdkN1GvHvMDYFun2462SM52QdLTV7GmrO1BOoj3lZfw17pyUZxwH
9IFH1Qe8MViwxgMlFfZnqIFUS7IJIndkF2bi/Ro+SQks/8ug8oeV03/LfAB7HW5G
2mrowVgtvnn15runQJvCcrC3TB6zgzJhKh6rWpLhgLVToERJup7jmg95Bea1Lqra
9rxGVgpnq3tmB4QdNuJfDxiQMBH/InzClbT4TtFgKXfDVvHM/xSLefbi3QIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFFKCHoSW31FgM+92Gb7MPVVezIEyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhL2JkMGQy
ZC02OGM0LTRiMGUtYjBmMi0xZTFlMzkwMzM1MDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvYmQwZDJk
LTY4YzQtNGIwZS1iMGYyLTFlMWUzOTAzMzUwOC8xL1VvSWVoSmJmVVdBejczWVp2
c3c5VlY3TWdUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM7GjANBgkqhkiG9w0BAQsFAAOCAQEAsVrNfEmnPCKQ
OxWwBZLlgHe+O7xb5Ch8j3x9FVfF1If64CbxbqtpWlUlAf+9ePJ6rcNQ7yTQvzLV
C6LSeLLfTuaAJNkz51a2AMvokdjUk2V4i2PnkBGcJ0iQJNfBq5YfeUP6fVpw+O1R
8ESxSYGSi4qe4X5nopsW4hX3lhgZnYJe3Yu/z1qYhCvm0m5B+bGsVx/rK2an3Dcc
rXlpg0Sg8hkJ04bj7fhHML7KupSOoxuBWjdCO9FTbE/9J1S7EpSjARPBdO55dXVM
ws5D8FANLwhXGuzCDLrf3i9cNOgqUg7TM+V2wYte2LV7EE/0PRzA8k3UfyQtz1cx
lClVe86WlA==
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:25:28 2025 by rpki-client