Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uA_vIld_483-cATEnMyPz6iCDYg.cer
File: uA_vIld_483-cATEnMyPz6iCDYg.cer (raw, json)
Hash identifier: 8gNZ3OEmrljSWBkCSHbYHpTEVTmwjgW2Bd96WWQmtz8=
Subject key identifier: B8:0F:EF:22:57:7F:E3:CD:FE:70:04:C4:9C:CC:8F:CF:A8:82:0D:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708BDA327CC89A92CF56E2BB84AEC89B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/uA_vIld_483-cATEnMyPz6iCDYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:34:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.96.145.0/24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 16:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8b:da:32:7c:c8:9a:92:cf:56:e2:bb:84:ae:c8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b80fef22577fe3cdfe7004c49ccc8fcfa8820d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:bd:e7:37:65:bb:af:73:e8:b9:67:e7:32:
cb:db:7a:cf:54:75:06:6d:45:d3:d2:9c:a7:57:26:
f7:66:5c:2a:29:3a:c3:56:c3:50:0b:fc:1a:b1:19:
fc:c3:0e:ff:35:8b:78:1b:94:46:c3:74:83:1e:9e:
31:ad:73:23:b2:3c:bb:72:f7:b8:0a:11:be:30:69:
ce:a2:96:03:82:4b:50:26:52:62:8f:47:1c:eb:71:
d9:a0:80:fd:d2:43:91:5b:01:d6:57:ab:57:37:56:
d3:3e:06:74:43:b8:50:2e:f1:1e:88:61:03:68:00:
b6:8b:e8:0d:e7:50:39:02:29:64:4d:1c:b6:6a:44:
d8:ba:0e:b2:46:4f:5b:f4:7b:cc:74:e0:c0:c9:8a:
7c:bb:3a:aa:b8:35:cc:5a:51:2c:99:98:b2:e5:c1:
fa:ee:dc:ed:d2:1a:1b:a3:19:a5:78:d4:be:85:1e:
9f:31:ad:2b:0f:79:7f:55:0a:88:67:f8:bd:79:2b:
cb:0b:3e:a3:f8:80:9e:5d:ba:c6:5e:b8:c5:d1:ad:
79:fa:21:bc:33:50:ac:a3:64:03:9b:07:73:b6:19:
34:ab:e7:bf:b3:cc:25:00:ee:54:25:10:44:77:5e:
b2:62:14:ef:53:62:3d:dc:c7:fa:48:6b:da:db:e8:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:EF:22:57:7F:E3:CD:FE:70:04:C4:9C:CC:8F:CF:A8:82:0D:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b722bd-a51e-451f-8ce6-6a8136f9ffe2/1/uA_vIld_483-cATEnMyPz6iCDYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d1:97:75:67:f3:33:d1:da:0b:6a:a3:20:b1:94:dd:76:19:
36:00:d6:d7:43:77:08:01:aa:9e:87:8a:a4:87:11:e7:a4:21:
a2:ae:88:cf:18:95:b5:9e:bf:cf:fa:d9:0e:ed:a3:c2:8c:60:
c6:9c:29:07:d0:6b:74:c0:0e:df:c6:92:2a:2d:c0:f2:38:ad:
6b:21:65:c0:55:cc:55:01:bc:84:52:da:4e:9b:32:d7:06:0a:
1a:a5:fe:39:8c:62:23:ce:64:77:af:29:c8:98:2a:4d:de:66:
79:d4:7c:a9:4b:6a:d8:6d:c9:6c:68:df:7b:43:38:7b:1c:16:
7d:45:62:22:51:19:6e:23:5e:05:15:48:1d:ed:c9:ef:42:a4:
c5:38:30:4d:4f:47:1f:39:56:38:13:99:c4:98:a1:c2:87:61:
d8:fc:5d:22:cb:d1:e2:5e:69:74:08:38:00:b6:c9:68:96:6e:
a6:0d:3c:23:aa:62:38:cd:1c:46:aa:22:00:58:07:9a:fe:49:
c3:8a:c7:06:28:07:aa:f9:fd:28:55:33:4a:e5:63:78:01:3f:
07:16:73:51:2a:d7:46:cf:b5:ee:51:56:ad:d6:cc:8a:40:47:
9a:1e:5c:92:c7:95:38:3b:af:70:8a:7d:f2:26:26:f2:db:a0:
ae:61:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:13 2024 by rpki-client on console-ams.rpki-client.org