Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
File: caUN148DxxEE1dGiYFipIHJOhZ4.cer (raw, json)
Hash identifier: gcAKegMZIlDpUq773OcoCEV0AEUEhduPwvc+QEUW9cM=
Subject key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B781A42607BD0D1D460F946668CD0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 6843
IP: 185.120.36.0/22
IP: 2a06:8f00::/29
Validation: Failed, certificate revoked on Thu 08 Feb 2024 21:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:81:a4:26:07:bd:0d:1d:46:0f:94:66:68:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71a50dd78f03c71104d5d1a26058a920724e859e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:e7:a0:fa:58:71:fe:2b:2a:ca:77:3d:f1:
13:6a:08:5c:a8:d5:c1:22:34:ee:6e:65:fd:52:34:
f1:f5:11:bf:7f:ac:6e:17:72:c8:2c:62:37:8a:2a:
9e:3a:4f:90:e9:63:d0:f2:1a:94:4c:ce:83:69:5e:
3d:d1:23:b7:24:72:e8:e3:66:5b:77:5e:7a:ff:0e:
aa:ca:07:eb:39:c1:8e:10:52:d0:b7:40:c0:4b:ec:
1c:43:02:27:c7:29:c8:2e:79:b6:5b:a5:aa:83:9f:
65:f8:fb:ff:62:79:c6:20:d7:74:f3:9b:37:33:ee:
a2:fa:8c:71:0f:17:92:71:10:16:0d:80:55:89:e4:
cb:a5:89:e4:4c:4b:9c:8b:bb:69:68:ab:ee:a2:89:
5e:62:87:20:24:da:bb:56:af:80:25:60:47:60:f5:
db:d9:0e:e2:a4:75:53:98:07:9a:c8:83:52:8f:a9:
1b:70:18:17:44:79:1c:55:b1:ae:f0:0d:61:2b:62:
98:e3:c9:83:ad:27:c5:18:c9:73:ce:ec:6a:db:63:
67:ec:d5:18:1b:53:4d:52:b0:17:ed:26:ac:7b:2c:
13:5e:c1:06:94:ff:d6:d6:cf:11:be:5d:e3:d0:22:
61:dd:a6:e1:4c:ad:00:79:26:4c:f3:e1:f8:ae:a1:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.36.0/22
IPv6:
2a06:8f00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6843
Signature Algorithm: sha256WithRSAEncryption
4e:b1:11:a8:e1:32:a0:ad:a1:e3:dd:61:27:68:32:48:c3:5a:
90:83:f0:bf:95:8c:e8:cc:79:4b:c4:e5:b0:2f:a9:c3:a2:f1:
a7:9e:f8:e3:73:01:ef:de:00:4f:76:32:8f:2b:9f:06:1a:05:
b0:6e:25:37:84:74:8d:9e:99:84:ef:bd:99:0e:81:05:6e:4b:
18:b8:b7:4e:4c:72:83:0b:a1:ab:32:7e:71:80:a9:06:0f:3c:
72:db:fc:50:16:d7:be:f1:83:e2:fc:46:63:ce:f3:f6:45:97:
c1:89:a7:0d:96:f4:8b:ce:f0:98:63:e7:91:0e:d2:0a:31:07:
67:6e:23:3a:ee:d9:16:13:38:1d:2d:b9:51:c8:3f:09:57:b0:
0a:0a:3b:54:c0:68:c7:6c:b9:2c:2e:bf:52:00:f3:ed:3c:36:
15:ce:c8:88:26:80:d8:be:57:75:0e:73:0c:5d:b8:2e:de:5e:
ec:c1:3a:0c:8f:47:2f:c4:de:90:5b:44:ef:73:42:7a:82:94:
82:7b:a2:6d:58:19:61:5d:2f:b7:10:c4:4f:08:a3:1a:8f:3c:
96:d2:a8:f0:c5:67:ee:01:0e:6f:4a:c7:38:a2:b3:88:42:ad:
35:7a:01:fa:63:dd:6c:eb:70:99:60:75:ad:a1:3c:d8:cb:11:
29:7b:06:84
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYzGt4GkJge9DR1GD5RmaM0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMjAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWE1MGRkNzhmMDNjNzExMDRkNWQxYTI2MDU4YTkyMDcyNGU4NTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7u7noPpYcf4rKsp3PfETaghcqNXB
IjTubmX9UjTx9RG/f6xuF3LILGI3iiqeOk+Q6WPQ8hqUTM6DaV490SO3JHLo42Zb
d156/w6qygfrOcGOEFLQt0DAS+wcQwInxynILnm2W6Wqg59l+Pv/YnnGINd085s3
M+6i+oxxDxeScRAWDYBVieTLpYnkTEuci7tpaKvuooleYocgJNq7Vq+AJWBHYPXb
2Q7ipHVTmAeayINSj6kbcBgXRHkcVbGu8A1hK2KY48mDrSfFGMlzzuxq22Nn7NUY
G1NNUrAX7SaseywTXsEGlP/W1s8Rvl3j0CJh3abhTK0AeSZM8+H4rqETMwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFHGlDdePA8cRBNXRomBYqSByToWeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VjL2ZjZWM1
Yy04OGVmLTRkMTEtOTc1NC1mZGJmYTViNmIzNzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMvZmNlYzVj
LTg4ZWYtNGQxMS05NzU0LWZkYmZhNWI2YjM3My8xL2NhVU4xNDhEeHhFRTFkR2lZ
RmlwSUhKT2haNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuXgkMA0EAgACMAcDBQMqBo8AMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAhq7MA0GCSqGSIb3DQEBCwUAA4IBAQBOsRGo4TKgraHj
3WEnaDJIw1qQg/C/lYzozHlLxOWwL6nDovGnnvjjcwHv3gBPdjKPK58GGgWwbiU3
hHSNnpmE772ZDoEFbksYuLdOTHKDC6GrMn5xgKkGDzxy2/xQFte+8YPi/EZjzvP2
RZfBiacNlvSLzvCYY+eRDtIKMQdnbiM67tkWEzgdLblRyD8JV7AKCjtUwGjHbLks
Lr9SAPPtPDYVzsiIJoDYvld1DnMMXbgu3l7swToMj0cvxN6QW0Tvc0J6gpSCe6Jt
WBlhXS+3EMRPCKMajzyW0qjwxWfuAQ5vSsc4orOIQq01egH6Y91s63CZYHWtoTzY
yxEpewaE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:59 2024 by rpki-client on console-fra.rpki-client.org