Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
File: uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer (raw, json)
Hash identifier: oXty1K3qHTN1qo/6RBjXolbN0H02N6JJ1nmUdncbGcI=
Subject key identifier: B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB05362EAC24EF471BED9D5F10A93B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.205.223.0/24
IP: 2a11:c000::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:53:62:ea:c2:4e:f4:71:be:d9:d5:f1:0a:93:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b811f8ce6dd0cc480f097540563920aea3d66396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:e4:b3:98:b3:1b:64:d3:37:d9:9c:41:c9:
2d:ee:a4:09:44:b7:12:6d:1f:45:91:5c:f2:f7:6b:
0f:ec:ee:e0:a6:2c:05:98:b2:01:d4:42:bf:30:73:
9a:69:dd:3f:5c:3c:e1:03:9f:6c:b9:12:03:31:a4:
f2:ea:b8:c7:0a:d5:41:a1:72:86:7f:7b:d4:4c:9e:
f9:18:67:3f:aa:2e:e9:b0:a8:2d:44:50:bc:c2:ce:
bc:a3:88:fa:55:a1:a3:45:80:5f:a3:fb:5c:ca:5d:
c8:2d:a2:0f:10:81:7e:70:6e:23:b3:f4:f0:0e:29:
31:c6:7f:d8:77:f3:32:5e:66:d6:f6:92:1e:9b:b7:
e7:e8:a7:b2:d3:f3:82:4e:34:41:85:11:65:07:90:
75:77:24:77:31:49:46:99:79:bb:dc:20:1f:5f:01:
2c:57:e4:04:93:d2:50:9d:e1:f7:35:6c:f4:be:a0:
b2:c6:10:71:46:46:19:95:b9:c5:86:98:4f:b4:4e:
70:9a:2e:fe:8b:90:20:18:5f:04:43:51:dd:1d:fa:
37:53:f2:7f:e0:a9:48:c0:2e:51:aa:6e:f4:e8:6c:
f0:98:9e:3b:2c:34:eb:47:99:b1:62:a4:f4:12:26:
1b:3a:b0:ce:a6:e3:bd:2f:a4:a1:16:d3:fc:42:a1:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.223.0/24
IPv6:
2a11:c000::/29
Signature Algorithm: sha256WithRSAEncryption
33:32:38:57:45:95:7f:59:0e:38:47:d6:68:9b:d7:c9:f8:93:
d3:ea:d8:fa:a0:3d:49:f5:d2:a1:ae:6b:63:e1:87:cb:75:c8:
b8:92:ea:db:62:b3:a0:6e:b2:12:35:41:ae:71:b6:b8:ad:ce:
93:02:01:ed:e1:bf:68:ef:ad:aa:48:1e:41:ac:ff:37:35:9c:
6a:b3:56:4c:27:c1:0c:cb:57:bc:ef:aa:f1:0e:c2:79:9a:08:
53:ce:d7:94:a7:c6:d6:fb:b9:42:2b:49:bd:f7:a4:6b:af:0e:
e2:20:e6:fc:93:70:90:8f:97:fe:ba:f0:93:4c:e0:5b:8c:8c:
41:88:67:bd:f3:da:cd:ca:05:c1:48:c9:e0:af:59:08:b6:47:
e9:3d:87:cc:b0:53:33:fa:a7:28:a8:be:75:58:63:33:18:2d:
0d:76:00:04:6e:ef:0b:9e:9a:3b:67:04:36:ec:eb:7e:92:e5:
31:d4:85:fa:fe:4d:ea:a7:48:68:d7:5f:cd:b9:18:2f:7a:e7:
b1:83:06:9b:45:1e:7b:d7:4b:49:03:4b:12:4c:79:e1:bd:67:
8f:75:0a:e1:28:47:aa:cf:4d:f0:31:bd:87:02:a5:92:49:1b:
43:15:6c:3c:ce:4e:e3:6f:ba:c4:bc:28:c0:fa:48:45:d6:78:
e2:c0:62:aa
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvsFNi6sJO9HG+2dXxCpO3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODExZjhjZTZkZDBjYzQ4MGYwOTc1NDA1NjM5MjBhZWEzZDY2Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Hks5izG2TTN9mcQckt7qQJRLcS
bR9FkVzy92sP7O7gpiwFmLIB1EK/MHOaad0/XDzhA59suRIDMaTy6rjHCtVBoXKG
f3vUTJ75GGc/qi7psKgtRFC8ws68o4j6VaGjRYBfo/tcyl3ILaIPEIF+cG4js/Tw
Dikxxn/Yd/MyXmbW9pIem7fn6Key0/OCTjRBhRFlB5B1dyR3MUlGmXm73CAfXwEs
V+QEk9JQneH3NWz0vqCyxhBxRkYZlbnFhphPtE5wmi7+i5AgGF8EQ1HdHfo3U/J/
4KlIwC5Rqm706GzwmJ47LDTrR5mxYqT0EiYbOrDOpuO9L6ShFtP8QqFkSQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLgR+M5t0MxIDwl1QFY5IK6j1mOWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkL2EzN2Rh
Mi03NTc1LTRjYjgtODRhNS1mOWNjMjc4MzJmNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvYTM3ZGEy
LTc1NzUtNGNiOC04NGE1LWY5Y2MyNzgzMmY1YS8xL3VCSDR6bTNRekVnUENYVkFW
amtncnFQV1k1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAW83fMA0EAgACMAcDBQMqEcAAMA0GCSqGSIb3
DQEBCwUAA4IBAQAzMjhXRZV/WQ44R9Zom9fJ+JPT6tj6oD1J9dKhrmtj4YfLdci4
kurbYrOgbrISNUGucba4rc6TAgHt4b9o762qSB5BrP83NZxqs1ZMJ8EMy1e876rx
DsJ5mghTzteUp8bW+7lCK0m996Rrrw7iIOb8k3CQj5f+uvCTTOBbjIxBiGe989rN
ygXBSMngr1kItkfpPYfMsFMz+qcoqL51WGMzGC0NdgAEbu8Lnpo7ZwQ27Ot+kuUx
1IX6/k3qp0ho11/NuRgveuexgwabRR5710tJA0sSTHnhvWePdQrhKEeqz03wMb2H
AqWSSRtDFWw8zk7jb7rEvCjA+khF1njiwGKq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:13 2024 by rpki-client on console-ams.rpki-client.org