Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UyyAH0yFApNyGDaLTmXQ5GPXybk.cer
File: UyyAH0yFApNyGDaLTmXQ5GPXybk.cer (raw, json)
Hash identifier: r8UhK1Bbpb3IcxBD7MB7VzljXIEYyMQwh6ewY0BHEpo=
Subject key identifier: 53:2C:80:1F:4C:85:02:93:72:18:36:8B:4E:65:D0:E4:63:D7:C9:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701BC68765BF423BFF3749511E5F925C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:32:26 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.238.85.0/24
IP: 2a11:80::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 11:54:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1b:c6:87:65:bf:42:3b:ff:37:49:51:1e:5f:92:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:32:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=532c801f4c8502937218368b4e65d0e463d7c9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:56:ae:10:ba:eb:c6:2c:94:09:5b:25:ac:
0f:4e:01:6d:6f:75:8b:e6:b3:4b:97:cc:5e:bf:bb:
9e:f4:9a:63:c7:6a:2c:02:a5:0f:8d:af:0c:98:32:
af:71:3f:21:12:91:e8:19:bc:97:31:5f:b4:07:91:
e7:64:ab:2d:d3:71:6c:a3:1a:04:1e:2c:57:75:d2:
c1:13:b9:86:4b:5e:e4:e3:f2:f0:61:43:c4:08:6f:
1d:44:dd:b9:a7:54:1f:70:9b:9a:12:f8:90:04:a0:
a7:28:07:71:4e:12:d9:66:37:de:60:bf:a6:b5:4b:
a7:84:21:3f:b1:4d:ea:77:f6:bf:4a:54:fd:a7:ac:
86:b9:25:1f:1b:03:f9:52:eb:b9:1a:d1:b1:31:46:
4a:2f:08:31:c0:4a:c8:dd:70:a7:81:1c:83:57:6c:
aa:9d:1c:0a:ca:12:07:4c:16:f6:3a:56:c1:bf:f3:
eb:6d:7c:3a:2a:ee:1c:22:55:c9:a0:27:19:41:85:
8a:49:9c:19:30:f0:38:70:a7:dc:6e:f2:50:13:a5:
8a:56:b5:b8:6b:23:1f:c3:ad:83:f4:43:81:e7:ba:
be:1d:5b:66:87:28:87:79:7a:c8:e1:c0:70:12:09:
7b:2d:b1:a3:11:c0:8c:8d:c3:c0:72:6c:84:e4:5a:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:80:1F:4C:85:02:93:72:18:36:8B:4E:65:D0:E4:63:D7:C9:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7b4ecd-10d3-46a7-a298-a93ee85cb782/1/UyyAH0yFApNyGDaLTmXQ5GPXybk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.85.0/24
IPv6:
2a11:80::/29
Signature Algorithm: sha256WithRSAEncryption
a8:66:9b:54:62:e3:17:38:bc:46:d8:e6:2e:04:b2:7b:1d:a0:
f5:6e:93:02:b7:ff:71:1e:4e:50:6b:7d:50:63:c3:59:f0:89:
8b:b5:20:30:81:57:be:04:10:41:c6:11:86:39:8a:73:44:65:
9e:38:3f:f3:fc:0a:58:26:55:89:1f:9f:f1:bb:7e:03:97:b0:
3a:bd:58:68:4c:9c:7b:9c:cd:f7:ff:1f:f6:d1:22:4c:bd:a2:
c3:72:b0:30:4a:a1:0e:1a:f2:ba:18:14:91:b1:5a:03:84:70:
3f:81:d8:87:93:af:37:5c:24:68:51:4d:fc:dc:2f:84:57:95:
9f:82:35:a3:7a:ea:ae:75:b3:ce:d0:89:26:4c:13:3f:06:a3:
7e:91:1a:03:2d:f7:ea:68:14:28:91:51:bb:76:27:71:3a:58:
86:a2:6d:6c:50:b5:1d:ec:98:a6:ce:3d:bc:c1:28:2c:26:72:
fd:ba:72:f4:2f:3b:df:9c:e2:f3:70:f9:bd:0e:27:b1:73:89:
f8:5d:af:d0:27:a7:16:db:f2:cc:86:06:50:23:3e:57:64:db:
22:50:8a:30:47:6f:ff:bf:11:57:e0:86:d5:a0:e6:08:1b:9c:
3e:96:1b:91:28:6a:cf:dd:3a:9e:b2:8d:9e:5b:68:a3:22:06:
ec:45:3f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:33:41 2024 by rpki-client on console-ams.rpki-client.org