Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer
File: uYt5g2r-dTcKaAuxNsG5m8iNRRk.cer (raw, json)
Hash identifier: LQ8gAIdRkLJlBdZv9U/d2+epJ4JDnFtT31btk2ewafs=
Subject key identifier: B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C7D8756D46B7F6294CB32ABF5B2D2AD26
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 18 Dec 2023 15:24:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 195.191.231.0/24
IP: 2a14:4380::/29
Validation: Failed, certificate revoked on Mon 18 Dec 2023 17:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:87:56:d4:6b:7f:62:94:cb:32:ab:f5:b2:d2:ad:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 18 15:24:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b98b79836afe75370a680bb136c1b99bc88d4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:81:fe:d3:f9:05:14:6d:bf:8b:8e:ce:b6:
5b:8e:8e:c5:f7:0f:d2:c7:e1:40:ed:e5:0a:70:c5:
be:82:39:c7:b6:03:42:9f:d8:48:4d:5b:f1:ea:1c:
f1:01:ec:b7:1f:a3:67:f5:11:39:98:c9:d8:df:55:
57:c9:b4:d3:c9:d2:89:0a:15:c2:be:3b:2d:44:a5:
1b:5c:6e:f7:17:78:11:e2:3d:0f:00:62:e8:ee:77:
7d:b8:59:c6:d7:09:3a:4f:cd:62:6d:14:d3:54:5b:
07:52:6a:74:ed:79:6f:17:bb:a5:a2:65:34:3a:58:
5d:72:2f:96:54:ad:f2:96:5b:7b:47:8c:40:da:ce:
44:d0:40:0b:2f:a3:93:3c:9a:f1:ae:50:a3:c1:b8:
20:53:e9:09:d1:d5:df:45:9c:07:a5:91:c0:33:43:
11:f2:22:09:65:69:d4:6a:f6:7b:87:a5:2c:66:4e:
8a:32:2e:76:24:c9:36:14:ec:53:a8:da:1a:19:20:
c6:29:88:81:32:21:ff:fd:0d:ab:f3:82:d3:14:c9:
c4:c3:a3:a7:2d:f0:d1:08:cf:68:9f:2a:cf:b7:08:
f4:dc:7c:71:7a:b6:d9:92:b6:f5:0f:07:9d:02:30:
41:07:36:91:02:a3:20:e7:ec:37:18:18:31:16:dd:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8B:79:83:6A:FE:75:37:0A:68:0B:B1:36:C1:B9:9B:C8:8D:45:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b94242-cfd8-47b2-b00d-aac0befff4b6/1/uYt5g2r-dTcKaAuxNsG5m8iNRRk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.231.0/24
IPv6:
2a14:4380::/29
Signature Algorithm: sha256WithRSAEncryption
5a:1f:b7:33:a2:90:e8:3f:46:32:6b:b6:73:c4:df:2d:8e:0c:
1a:40:3b:bf:db:db:ec:12:f5:23:ec:20:32:06:d7:07:f8:52:
b7:df:59:27:6a:45:bd:6c:86:3e:44:f0:83:d5:a0:fc:5f:99:
30:a7:ce:01:d4:df:71:02:84:e5:68:e2:f8:81:32:cc:3c:5f:
44:bb:d8:f0:b5:4f:f0:90:2a:e1:0e:b9:f1:4e:f4:34:56:85:
73:a0:4c:41:8b:66:65:5b:2c:26:c9:0f:61:0c:36:33:14:3f:
1e:40:0a:40:27:89:a2:4c:11:b9:c9:98:46:f4:5a:4e:f8:d2:
b6:57:3a:aa:70:d3:13:97:7c:b9:00:90:81:90:fe:6e:6d:1f:
fc:fb:78:4f:81:cc:c2:1b:50:59:aa:1c:6f:5a:2b:50:11:6c:
4a:41:ec:6e:d7:94:32:14:19:cd:f0:87:de:89:df:8e:8e:23:
5e:a2:d2:75:fb:ce:52:da:58:c0:8b:c4:04:15:b8:f0:5a:f4:
02:ea:ce:77:64:9a:28:fa:1e:1f:5a:29:57:c1:f5:b8:55:33:
7b:54:14:92:5f:e5:72:f5:f4:3b:40:a7:59:39:72:c7:27:df:
a0:3d:ba:ad:bb:12:43:c0:86:8a:67:6d:2e:bb:71:75:6e:03:
13:6d:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:32 2024 by rpki-client on console-fra.rpki-client.org