Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u4osiMUlVNSfa3kBN8O6toey-VY.cer
File: u4osiMUlVNSfa3kBN8O6toey-VY.cer (raw, json)
Hash identifier: 8RqPDgb+SCoBjXbVsGyx68u6CSfly+8Kh7yJii+hVPg=
Subject key identifier: BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C5F5E214CCBE3F4AAEB730E2C994D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:46 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.252.248.0/22
IP: 83.136.180.0/22
IP: 84.54.20.0/22
IP: 85.208.48.0/22
IP: 88.218.200.0/22
IP: 95.214.112.0/22
IP: 141.98.180.0/22
IP: 171.22.168.0/22
IP: 176.53.176.0/22
IP: 185.182.8.0/22
IP: 185.182.184.0/22
IP: 185.184.200.0/22
IP: 185.187.232.0/22
IP: 185.187.240.0/22
IP: 185.189.0.0/22
IP: 185.190.140.0/22
IP: 185.193.64.0/22
IP: 185.194.216.0/22
IP: 185.196.108.0/22
IP: 185.197.192.0/22
IP: 185.199.100.0/22
IP: 185.202.220.0/22
IP: 185.202.236.0/22
IP: 185.203.216.0/22
IP: 185.207.248.0/22
IP: 185.209.220.0/22
IP: 185.211.4.0/22
IP: 185.213.80.0/22
IP: 185.214.132.0/22
IP: 185.216.72.0/22
IP: 185.217.124.0/22
IP: 185.218.124.0/22
IP: 185.219.140.0/22
IP: 185.221.132.0/22
IP: 185.222.240.0/22
IP: 185.225.232.0/22
IP: 185.227.132.0/22
IP: 185.229.116.0/22
IP: 185.232.4.0/22
IP: 185.234.68.0/22
IP: 185.237.252.0/22
IP: 185.239.208.0/22
IP: 185.241.148.0/22
IP: 185.245.180.0/22
IP: 185.250.36.0/22
IP: 192.145.80.0/22
IP: 193.9.32.0/22
IP: 194.32.232.0/22
IP: 212.90.120.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:5f:5e:21:4c:cb:e3:f4:aa:eb:73:0e:2c:99:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb8a2c88c52554d49f6b790137c3bab687b2f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:3e:8f:3d:0d:59:f6:c2:e2:20:ee:f5:2b:
ac:20:66:b6:76:49:ca:dd:5e:81:8c:3f:25:48:28:
eb:5b:62:94:60:e9:fc:e4:5b:77:d5:50:73:cf:37:
68:c6:df:dd:cd:22:8a:91:83:e6:72:1f:f9:a4:79:
61:01:6b:38:73:f1:d2:2e:20:f7:33:09:2f:0d:4b:
af:2b:b7:d2:f9:b0:5b:3a:b8:79:fa:78:ae:01:7e:
1e:af:43:69:6e:49:7a:74:d7:f7:b2:09:50:8c:7d:
6c:10:e4:e6:e8:87:6b:65:d4:80:18:34:ed:bb:08:
95:27:b8:24:8e:0b:c9:47:12:e6:af:16:a9:dd:63:
19:88:4b:15:eb:eb:c8:89:80:46:66:79:b8:23:3d:
1a:1e:a3:79:3c:05:32:8f:7f:11:de:ac:1f:38:32:
3f:c6:d0:1c:5f:fa:61:93:2b:45:89:73:e0:74:4c:
a0:4c:d2:20:cc:3a:0e:19:a3:0f:e2:8e:35:52:de:
3c:bb:be:a7:51:61:01:00:cb:32:7a:c7:c3:ca:33:
72:12:d8:0f:4c:86:74:0f:ed:6a:b0:18:f2:a7:91:
a7:e1:24:b8:6d:be:0e:57:07:e4:12:74:0e:55:08:
b3:70:7d:3f:fc:76:9a:1e:f5:be:ee:b3:d7:ef:81:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:2C:88:C5:25:54:D4:9F:6B:79:01:37:C3:BA:B6:87:B2:F9:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/6/BB8A2C88C52554D49F6B790137C3BAB687B2F956.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.248.0/22
83.136.180.0/22
84.54.20.0/22
85.208.48.0/22
88.218.200.0/22
95.214.112.0/22
141.98.180.0/22
171.22.168.0/22
176.53.176.0/22
185.182.8.0/22
185.182.184.0/22
185.184.200.0/22
185.187.232.0/22
185.187.240.0/22
185.189.0.0/22
185.190.140.0/22
185.193.64.0/22
185.194.216.0/22
185.196.108.0/22
185.197.192.0/22
185.199.100.0/22
185.202.220.0/22
185.202.236.0/22
185.203.216.0/22
185.207.248.0/22
185.209.220.0/22
185.211.4.0/22
185.213.80.0/22
185.214.132.0/22
185.216.72.0/22
185.217.124.0/22
185.218.124.0/22
185.219.140.0/22
185.221.132.0/22
185.222.240.0/22
185.225.232.0/22
185.227.132.0/22
185.229.116.0/22
185.232.4.0/22
185.234.68.0/22
185.237.252.0/22
185.239.208.0/22
185.241.148.0/22
185.245.180.0/22
185.250.36.0/22
192.145.80.0/22
193.9.32.0/22
194.32.232.0/22
212.90.120.0/22
Signature Algorithm: sha256WithRSAEncryption
15:72:46:08:61:fd:39:51:e3:9f:4c:fe:48:5c:44:03:87:40:
2d:f6:0f:a0:38:6b:6f:0e:a9:30:55:95:08:21:b3:34:28:42:
bf:3e:d7:69:c5:ee:95:52:a2:4a:74:ef:d4:46:b3:19:37:3a:
13:da:22:e4:ea:27:e8:98:95:a4:3f:eb:9b:34:cb:89:eb:c7:
0b:34:31:93:3a:01:08:6c:3c:61:76:e6:67:c3:62:cc:01:15:
1a:d4:e0:57:27:a0:34:06:d5:06:85:05:c6:51:3e:f3:03:9b:
11:0f:de:4b:31:24:89:26:80:a9:76:c5:db:bf:92:75:1c:89:
bd:c8:85:f2:4f:64:e2:f9:3a:e0:83:04:e0:4d:d2:23:75:1c:
85:3c:78:51:04:50:ea:e8:03:86:94:64:63:eb:3a:37:00:ef:
2b:d5:51:b7:66:e7:b6:45:14:2f:8c:3e:c0:4e:8f:54:27:a3:
8f:a7:49:b8:bd:eb:05:a8:08:63:50:48:09:66:69:e1:20:bc:
e6:98:8f:ab:52:3e:dd:1c:df:47:10:b6:d0:e2:f2:de:68:6d:
df:39:f0:96:0a:65:ef:11:37:29:16:c8:37:fd:a3:a9:30:4d:
1f:f1:7e:26:51:7b:90:c4:52:24:a4:c4:76:8c:d0:0e:9d:5e:
60:72:34:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 12:48:46 2023 by rpki-client on console-ams.rpki-client.org