Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9qaNcyylkSOi1ZWhhMUraUltmY.cer
File: u9qaNcyylkSOi1ZWhhMUraUltmY.cer (raw, json)
Hash identifier: fVrD93UhTnEgf979zF6bmlfwMrCKApDBN5MtDhhO4lw=
Subject key identifier: BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF07B0AA3D419FD6F397101C395F90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.204.33.0/24
IP: 2a11:90c0::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:07:b0:aa:3d:41:9f:d6:f3:97:10:1c:39:5f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbda9a35ccb296448e8b5656861314ada525b666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:1c:2a:ca:6a:2b:8a:33:84:45:63:5a:eb:
c2:be:e0:d1:65:2d:ea:9c:36:ff:4e:08:e3:9e:9c:
80:ed:ac:2c:d3:9a:c1:9f:8b:73:9d:b6:50:34:13:
e2:58:ed:1b:59:4d:f7:4e:01:eb:4b:e2:46:f8:38:
e9:46:05:6a:8a:12:9f:c1:04:9c:57:0e:bd:76:ec:
73:00:1a:10:af:54:c5:37:05:88:d3:76:3f:29:36:
26:45:58:69:8b:53:ba:76:b4:e5:bf:92:08:37:1a:
43:ef:47:74:1e:8a:8c:9e:7f:e8:b9:84:86:50:6c:
8e:d4:13:c0:6c:38:6d:0c:55:df:ac:45:bb:90:f4:
d1:df:c5:bf:d0:72:f9:8b:d0:1f:b9:dc:96:f2:df:
a1:1a:ac:c9:5f:f4:51:31:a4:80:d2:e3:0f:c3:23:
1c:39:f3:9c:c2:ab:89:22:3a:57:ab:36:77:88:19:
0b:ef:43:05:43:49:15:2b:ea:20:2f:cd:fb:48:59:
f1:7b:01:3a:fd:90:b8:b6:29:8c:68:13:50:c6:2a:
ba:94:c2:0b:b7:46:84:b9:b7:b6:23:2e:b5:59:99:
7e:9f:46:33:39:86:3c:e8:c7:8e:b4:70:34:d9:04:
a0:22:f9:ea:45:e7:f3:b7:85:cf:4d:b4:17:c0:d4:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:9A:35:CC:B2:96:44:8E:8B:56:56:86:13:14:AD:A5:25:B6:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9c8051-f02c-4de8-a69d-d376ebe6a4da/1/u9qaNcyylkSOi1ZWhhMUraUltmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.33.0/24
IPv6:
2a11:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
75:9d:72:a9:28:81:24:bb:25:45:6e:05:14:81:66:65:c9:95:
0d:2c:ca:98:fd:cb:af:74:a3:ce:35:83:1a:74:e4:a5:5b:ac:
64:24:2b:ec:8a:2f:a5:d6:a3:99:a0:35:1e:07:45:2e:95:7b:
6b:22:66:d2:a3:60:89:69:17:bc:dc:11:a8:6a:19:58:15:bc:
b4:ba:92:ae:05:19:43:59:06:b2:de:3d:cc:31:db:01:30:ff:
2d:2f:50:4e:ff:18:e1:05:3a:19:a6:ab:44:5f:3d:98:05:2c:
08:6c:60:f6:cb:d8:ce:07:ab:b4:14:c4:b8:89:5f:b3:f6:85:
de:50:b4:31:7f:ad:a3:f2:db:38:bf:36:e9:bd:19:dd:a9:68:
1a:52:f0:63:66:3c:ad:50:ab:cf:b4:2a:51:d5:19:80:33:bb:
6c:ad:03:f8:6e:3a:98:5b:10:38:a5:dc:c8:e1:a0:48:2f:3d:
33:92:35:72:fe:8d:0f:47:20:c9:73:60:ab:1a:2b:ea:92:9f:
d5:60:9a:25:8b:b5:86:e7:52:6a:67:a2:f5:96:98:70:1e:2e:
75:b8:f5:9d:2f:99:c8:d5:ff:17:da:45:bc:81:03:b2:f6:07:
64:d0:72:0f:0c:30:22:0a:58:9e:e0:45:cd:87:7a:f6:8f:98:
97:c5:1e:26
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 3 10:31:42 2023 by rpki-client on console-fra.rpki-client.org