Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer
File: uGUTWy_tkQZZ_ndaSxGlnu_qXi4.cer (raw, json)
Hash identifier: LQ3ri8NTi/gsW5YtI3p/4RlEL9fJrtaiAmCU2CJlLyA=
Subject key identifier: B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D891BB53631A6FEE22377BBAF0E3027
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.84.0/24
IP: 2a11:8e40::/29
Validation: Failed, certificate revoked on Tue 10 Oct 2023 05:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:1b:b5:36:31:a6:fe:e2:23:77:bb:af:0e:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b865135b2fed910659fe775a4b11a59eefea5e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:d5:d1:3c:f8:72:fe:c9:33:fa:d9:d8:fa:
c0:d4:8a:0c:ca:10:b7:e7:c4:e9:c8:e3:fa:30:ee:
6d:47:f5:55:9e:85:80:7b:f8:29:97:ba:b8:37:4d:
7e:73:1e:5e:47:39:c0:f1:d5:ed:17:dd:e4:e5:5e:
c3:e6:06:1b:ae:ac:f5:8a:dc:ba:63:c9:16:b1:15:
48:df:85:28:b5:9d:66:85:eb:e2:aa:00:7b:b9:24:
38:c0:0c:fd:cc:35:20:55:b8:1c:b8:c1:b1:04:39:
ff:8e:e2:1e:24:a3:67:2f:68:e2:84:54:23:bb:9e:
f5:7a:2c:93:8f:9a:19:a6:d5:61:a5:1c:cb:a7:36:
19:e4:4e:aa:d3:61:45:6c:55:b1:be:f0:38:7c:81:
25:32:9a:7a:e5:69:c0:55:aa:95:b9:5d:46:7e:80:
76:32:7b:15:58:41:48:f6:56:02:31:04:39:42:19:
82:df:b2:67:a4:8c:33:26:4c:c4:92:c9:e6:63:99:
40:2f:f7:5b:32:64:79:a3:b1:de:04:08:7e:41:cb:
d9:ed:11:08:61:ac:d2:72:47:c0:62:6c:a0:75:f7:
91:1f:04:67:6c:67:d4:07:ee:3d:b8:f3:20:bf:8f:
ee:64:c7:f8:1b:6e:11:96:c6:a8:88:a5:d8:38:1f:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:65:13:5B:2F:ED:91:06:59:FE:77:5A:4B:11:A5:9E:EF:EA:5E:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/955959-d52b-4034-b0b9-639e52d11187/1/uGUTWy_tkQZZ_ndaSxGlnu_qXi4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.84.0/24
IPv6:
2a11:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
a1:7a:f1:68:19:5c:e3:53:85:94:ac:15:11:91:51:48:36:39:
0c:17:e8:f9:b1:b0:4a:53:05:f5:8c:5b:7d:91:ad:84:08:3c:
32:ee:b0:4a:1e:9d:60:9d:14:8c:ac:73:da:6f:92:f1:61:0c:
bf:8a:87:23:80:f0:34:12:75:a6:86:72:59:52:e3:13:d6:ab:
1e:e1:b8:e9:fe:33:05:c9:42:95:bf:8c:99:6e:f5:53:7e:ba:
29:db:4a:16:92:e1:98:83:8a:af:e8:f4:b8:17:1d:77:07:ce:
df:71:85:4c:05:12:c0:ef:3a:dc:79:75:b7:81:74:9b:0b:b6:
88:4f:40:f1:1d:12:93:5f:41:2e:73:55:5e:18:5f:af:d6:db:
48:61:33:e6:4c:50:31:28:e0:1c:41:e1:bd:9b:ea:c2:87:b6:
c8:cf:4c:40:99:a6:75:6c:08:42:6b:68:fd:f9:77:7a:a4:e8:
29:06:2b:60:68:19:1b:87:da:05:b3:24:a5:ed:7e:c9:df:81:
7b:01:f3:fa:f3:b7:0f:fe:82:90:5a:f2:3f:be:2d:be:f7:da:
85:84:13:de:cd:d6:b1:66:df:11:a5:35:97:61:69:0a:1e:7a:
0a:d7:11:59:09:1f:12:b5:cd:78:e9:02:e4:44:46:b2:83:aa:
62:f6:e3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:14 2024 by rpki-client on console-ams.rpki-client.org