Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uII8cNzucRU27uMMTITe-MWjxyY.cer
File: uII8cNzucRU27uMMTITe-MWjxyY.cer (raw, json)
Hash identifier: LFKF6+jA3AVrCnly8rXQP3+WqlmCDyZpNNFsWBj7VyI=
Subject key identifier: B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED3BEE76CC8A94A40C611F026DABDAA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.69.0/24
IP: 2a12:7b00::/29
Validation: Failed, certificate revoked on Wed 15 Nov 2023 14:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d3:be:e7:6c:c8:a9:4a:40:c6:11:f0:26:da:bd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8823c70dcee711536eee30c4c84def8c5a3c726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:9c:50:8c:37:1a:c0:5c:88:8f:08:88:3c:
f6:a3:11:b6:c9:ff:87:5f:9a:e1:27:65:74:59:d5:
34:56:db:e7:e3:c4:e8:e1:55:73:1d:aa:de:f0:7f:
88:90:54:d1:51:5c:65:cd:22:3f:a0:42:ed:83:a8:
91:40:1a:ba:7e:cc:35:f3:ad:47:a4:ec:14:23:86:
86:dc:2b:75:4d:42:ef:04:5f:a4:8e:50:b9:14:fc:
88:83:68:8f:58:6e:45:c6:dd:75:25:ca:a4:75:bf:
33:01:19:9f:47:e9:94:ae:ae:31:2e:2c:d4:e9:27:
dd:29:b6:17:83:a8:62:03:ae:11:f8:49:60:b5:6d:
dd:11:73:7e:01:dd:27:48:af:92:c4:6c:2a:2a:52:
88:fe:df:ba:1b:54:00:de:6d:3c:0b:bf:40:dd:16:
d0:52:81:cb:fd:de:ee:eb:e3:ae:ec:98:7c:68:77:
0e:39:dd:41:dc:13:3d:10:ae:8d:cc:1f:2f:05:6f:
11:31:2a:46:c0:d6:1b:88:3e:f5:17:f4:b6:35:7f:
8d:51:54:65:01:2f:fd:f7:32:6f:a4:42:e6:a8:d7:
e4:67:62:fd:46:27:18:db:76:0e:d5:b1:e5:20:7e:
da:63:16:17:11:74:e0:a5:73:4b:2b:0e:1a:7c:26:
df:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:82:3C:70:DC:EE:71:15:36:EE:E3:0C:4C:84:DE:F8:C5:A3:C7:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a69a0d-e364-4436-873f-1c98b14628c9/1/uII8cNzucRU27uMMTITe-MWjxyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.69.0/24
IPv6:
2a12:7b00::/29
Signature Algorithm: sha256WithRSAEncryption
5b:dd:06:86:d2:b3:83:45:a5:aa:78:66:f0:21:a5:9d:57:5e:
1e:2e:ba:e6:33:bc:46:60:9a:5a:50:a8:a8:83:bc:0a:a4:d0:
0c:ea:a2:e5:c7:fb:60:f6:61:7a:61:0d:ab:32:23:de:9f:80:
07:87:ff:c4:15:65:2a:85:cb:7d:46:2a:c9:c4:ea:1c:1d:05:
0f:69:c9:37:90:6a:d0:37:1e:e7:58:6d:af:5f:a1:8b:33:b1:
3c:b5:11:77:2e:f6:d0:0a:6b:91:df:43:57:07:e5:9f:c5:5e:
c3:d5:55:13:0a:d6:a0:2c:17:49:1a:e0:e1:5d:78:9c:49:4e:
11:56:5a:75:93:c1:f2:66:3a:53:11:12:67:60:8e:6a:34:22:
d3:56:08:1e:b8:90:50:86:98:a0:96:3d:a6:70:a5:c0:9f:19:
eb:61:08:07:ab:bc:e6:2c:c4:80:44:68:44:09:29:18:33:8f:
72:24:74:58:d9:9b:7a:a8:0d:e9:ef:d7:78:10:7c:72:82:3a:
8e:18:d4:30:d8:22:02:5c:0e:39:55:e1:39:b7:25:4b:dd:8f:
b9:f9:bf:0a:e0:5b:41:ca:a5:65:b2:bd:c2:d7:e8:74:c2:d3:
13:70:e8:b4:f0:2e:14:b5:b9:1d:3e:71:fa:4d:6d:c0:b8:39:
bc:85:6f:18
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu077nbMipSkDGEfAm2r2qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODgyM2M3MGRjZWU3MTE1MzZlZWUzMGM0Yzg0ZGVmOGM1YTNjNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNWcUIw3GsBciI8IiDz2oxG2yf+H
X5rhJ2V0WdU0Vtvn48To4VVzHare8H+IkFTRUVxlzSI/oELtg6iRQBq6fsw1861H
pOwUI4aG3Ct1TULvBF+kjlC5FPyIg2iPWG5Fxt11Jcqkdb8zARmfR+mUrq4xLizU
6SfdKbYXg6hiA64R+ElgtW3dEXN+Ad0nSK+SxGwqKlKI/t+6G1QA3m08C79A3RbQ
UoHL/d7u6+Ou7Jh8aHcOOd1B3BM9EK6NzB8vBW8RMSpGwNYbiD71F/S2NX+NUVRl
AS/99zJvpELmqNfkZ2L9RicY23YO1bHlIH7aYxYXEXTgpXNLKw4afCbfAQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLiCPHDc7nEVNu7jDEyE3vjFo8cmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljL2E2OWEw
ZC1lMzY0LTQ0MzYtODczZi0xYzk4YjE0NjI4YzkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvYTY5YTBk
LWUzNjQtNDQzNi04NzNmLTFjOThiMTQ2MjhjOS8xL3VJSThjTnp1Y1JVMjd1TU1U
SVRlLU1Xanh5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhNFMA0EAgACMAcDBQMqEnsAMA0GCSqGSIb3
DQEBCwUAA4IBAQBb3QaG0rODRaWqeGbwIaWdV14eLrrmM7xGYJpaUKiog7wKpNAM
6qLlx/tg9mF6YQ2rMiPen4AHh//EFWUqhct9RirJxOocHQUPack3kGrQNx7nWG2v
X6GLM7E8tRF3LvbQCmuR30NXB+WfxV7D1VUTCtagLBdJGuDhXXicSU4RVlp1k8Hy
ZjpTERJnYI5qNCLTVggeuJBQhpiglj2mcKXAnxnrYQgHq7zmLMSARGhECSkYM49y
JHRY2Zt6qA3p79d4EHxygjqOGNQw2CICXA45VeE5tyVL3Y+5+b8K4FtByqVlsr3C
1+h0wtMTcOi08C4UtbkdPnH6TW3AuDm8hW8Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:15 2024 by rpki-client on console-ams.rpki-client.org