Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
File: uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer (raw, json)
Hash identifier: BhwK5bQ0+b64a7e8bRYwcUFX1SbHGnRor7yhazxrOrM=
Subject key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A94D5ED6D19452C56D7F3470CC3D18A14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.mft
caRepository: rsync://0.sb/repo/sb/2/
Notify URL: https://0.sb/rrdp/notification.xml
Certificate not before: Thu 14 Sep 2023 17:56:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.19.0/24
IP: 2a12:a300::/29
Validation: Failed, certificate revoked on Thu 28 Dec 2023 10:47:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:94:d5:ed:6d:19:45:2c:56:d7:f3:47:0c:c3:d1:8a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 14 17:56:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:81:62:cb:84:97:ac:df:f1:77:8a:54:6a:
30:bd:17:9b:da:b4:50:a5:d0:ae:b6:03:43:b7:5d:
79:19:53:c2:b0:26:a0:de:7c:0c:8e:cf:e3:01:a6:
02:fd:de:80:5c:f6:55:8d:4f:b3:a5:a4:ef:05:f3:
23:e8:76:ef:db:91:1c:bf:f4:78:43:27:d8:37:0a:
80:cb:de:9f:17:ab:57:ab:4e:f5:2b:93:19:36:2e:
4f:b2:26:38:72:e0:0b:70:15:6a:9d:3d:e9:b6:15:
8e:00:4b:a0:fa:49:d1:c1:a4:6c:d5:aa:9a:a1:ad:
e0:ad:19:c7:b0:66:e8:db:7e:af:09:b2:10:e5:a7:
d4:6b:24:2c:0b:ce:b5:c5:01:33:69:d0:2b:8e:01:
29:49:10:3a:1f:c0:12:82:b1:24:42:8f:f5:fb:bf:
cb:c4:74:16:c8:e5:51:6e:62:11:53:3e:81:6f:59:
2e:a1:37:ab:ac:eb:67:15:bf:0a:00:72:fc:8e:b2:
99:92:c5:d2:fd:22:c8:68:a4:32:55:63:97:db:68:
9f:44:20:27:ac:a6:cc:a1:45:d0:22:ea:0f:c0:cd:
9b:da:01:d2:56:bc:08:a3:8f:e7:88:4d:fb:31:49:
3c:a8:ed:b5:96:22:24:5a:8b:97:f9:9a:e2:d5:36:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://0.sb/repo/sb/2/
RPKI Manifest - URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.mft
RPKI Notify - URI:https://0.sb/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.19.0/24
IPv6:
2a12:a300::/29
Signature Algorithm: sha256WithRSAEncryption
54:bb:e4:76:9d:6c:28:55:cd:20:66:6b:95:9d:26:3e:cf:50:
e1:2d:3b:f5:40:c3:a3:c0:b4:0c:59:a4:ff:82:f5:65:91:f2:
dd:51:3e:92:5e:e4:aa:67:4e:6e:a4:8b:d9:6f:49:6e:ad:b2:
88:ac:f4:71:23:7c:ca:6c:27:6b:87:f3:48:8f:b5:d6:5b:14:
2c:5b:23:08:6a:88:1e:f4:ef:4a:f2:57:84:d2:94:76:54:3f:
73:22:b2:5c:2d:bb:9c:34:d1:1e:52:d4:25:52:b5:83:72:48:
04:48:3e:7e:7d:96:9b:f6:80:11:4c:b4:35:f0:e2:a9:f9:6b:
5b:fa:af:7a:6f:85:f7:65:75:94:1a:fc:2e:6e:e1:5c:ce:2c:
2e:b6:71:44:db:ba:2f:59:5e:e8:56:e4:a5:2d:2e:8c:11:f7:
e1:f4:85:3e:65:ad:c5:35:05:7e:0b:91:4d:a7:65:a5:21:09:
7d:06:13:4b:c9:73:dd:7c:e7:56:5a:fe:72:9f:d0:55:20:fe:
5c:6d:b9:40:e2:67:1c:d8:02:d6:44:72:0e:e8:58:d7:5f:27:
99:09:fb:f8:81:fe:83:cf:99:43:ba:04:64:66:6b:8f:e6:71:
77:54:2f:d4:d5:9d:79:5e:52:f6:b6:1c:7b:ca:2b:5a:24:be:
e7:91:35:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYqU1e1tGUUsVtfzRwzD0YoUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwOTE0MTc1NjAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGRiYWJmZDkyNzQwMDcwOWJmNDJjYTZiZDViNjFjZmU2M2QxYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8WBYsuEl6zf8XeKVGowvReb2rRQ
pdCutgNDt115GVPCsCag3nwMjs/jAaYC/d6AXPZVjU+zpaTvBfMj6Hbv25Ecv/R4
QyfYNwqAy96fF6tXq071K5MZNi5PsiY4cuALcBVqnT3pthWOAEug+knRwaRs1aqa
oa3grRnHsGbo236vCbIQ5afUayQsC861xQEzadArjgEpSRA6H8ASgrEkQo/1+7/L
xHQWyOVRbmIRUz6Bb1kuoTerrOtnFb8KAHL8jrKZksXS/SLIaKQyVWOX22ifRCAn
rKbMoUXQIuoPwM2b2gHSVrwIo4/niE37MUk8qO21liIkWouX+Zri1TaA0QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLjbq/2SdABwm/Qspr1bYc/mPRvAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgbYGCCsGAQUFBwELBIGpMIGmMCMGCCsGAQUFBzAFhhdyc3lu
YzovLzAuc2IvcmVwby9zYi8yLzBPBggrBgEFBQcwCoZDcnN5bmM6Ly8wLnNiL3Jl
cG8vc2IvMi9COERCQUJGRDkyNzQwMDcwOUJGNDJDQTZCRDVCNjFDRkU2M0QxQkMw
Lm1mdDAuBggrBgEFBQcwDYYiaHR0cHM6Ly8wLnNiL3JyZHAvbm90aWZpY2F0aW9u
LnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVw
b3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmww
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQC
AAEwBgMEAJITEzANBAIAAjAHAwUDKhKjADANBgkqhkiG9w0BAQsFAAOCAQEAVLvk
dp1sKFXNIGZrlZ0mPs9Q4S079UDDo8C0DFmk/4L1ZZHy3VE+kl7kqmdObqSL2W9J
bq2yiKz0cSN8ymwna4fzSI+11lsULFsjCGqIHvTvSvJXhNKUdlQ/cyKyXC27nDTR
HlLUJVK1g3JIBEg+fn2Wm/aAEUy0NfDiqflrW/qvem+F92V1lBr8Lm7hXM4sLrZx
RNu6L1le6FbkpS0ujBH34fSFPmWtxTUFfguRTadlpSEJfQYTS8lz3XznVlr+cp/Q
VSD+XG25QOJnHNgC1kRyDuhY118nmQn7+IH+g8+ZQ7oEZGZrj+Zxd1Qv1NWdeV5S
9rYce8orWiS+55E1Og==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:16 2024 by rpki-client on console-ams.rpki-client.org