Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ufUFYV3kC7UawzYmyjY34rX_jKU.cer
File: ufUFYV3kC7UawzYmyjY34rX_jKU.cer (raw, json)
Hash identifier: HH0E2c3VqnyiO3i12KGp+9ZyuWZulJMFJsy2er4x4wM=
Subject key identifier: B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DAD755D2C72F610A02FA63D87E325C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:31 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 193.19.191.0/24
IP: 2a12:3340::/29
Validation: Failed, certificate revoked on Fri 26 Apr 2024 12:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d7:55:d2:c7:2f:61:0a:02:fa:63:d8:7e:32:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9f505615de40bb51ac33626ca3637e2b5ff8ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:13:75:78:a7:dc:d9:db:48:36:10:f9:b5:
24:a8:38:31:96:17:27:55:24:76:5e:56:c0:49:1a:
ad:ae:5d:68:95:2e:7a:0d:bb:ee:84:9a:7e:d8:68:
48:eb:05:98:1c:10:4d:c3:85:6f:0b:23:f7:e9:45:
83:0d:d4:23:f9:bb:b0:f7:80:10:b9:47:e7:38:f8:
92:c2:cb:c2:df:82:58:70:f9:3d:85:29:a8:8c:1d:
d2:78:3a:b7:2e:5b:87:57:5c:2a:72:c5:74:e9:eb:
f7:d3:42:14:c3:95:f6:62:8f:31:f5:54:7b:0f:93:
96:fa:e6:0e:a7:a6:a6:22:02:9e:7e:70:20:15:82:
24:2e:9a:5b:0a:39:e2:2a:4f:a1:bf:56:e4:21:15:
ea:2b:a1:fb:27:be:d0:26:bf:e7:3e:59:c8:58:e0:
70:be:58:26:6e:cb:05:f0:96:76:35:a6:f7:56:73:
8c:08:e8:95:64:77:fc:ea:f3:5c:0b:7c:d3:5d:f5:
84:a6:76:22:38:94:f0:d1:c5:5d:b7:32:83:64:3f:
6b:d2:2a:f8:18:a0:a5:e4:7b:a0:a1:e5:d9:c5:7a:
f2:53:52:62:ae:0a:df:ad:d6:76:5d:0a:56:45:1c:
66:36:1a:e5:87:5e:7a:35:1b:c3:cb:44:70:19:37:
65:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:05:61:5D:E4:0B:B5:1A:C3:36:26:CA:36:37:E2:B5:FF:8C:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/80677b-6479-4016-8631-3624a9872534/1/ufUFYV3kC7UawzYmyjY34rX_jKU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.191.0/24
IPv6:
2a12:3340::/29
Signature Algorithm: sha256WithRSAEncryption
6d:ba:3e:d0:6e:9b:eb:42:45:bc:4c:6f:e6:92:af:0a:19:b9:
40:73:5d:3e:ba:b6:b2:32:01:22:80:d1:a2:e7:a8:9b:df:fe:
75:04:0e:49:81:17:96:b0:2e:d3:16:38:da:94:e4:1c:cc:45:
e3:6d:ea:78:be:a7:d9:f1:f0:ba:c8:60:54:47:5c:c6:c6:77:
6b:7c:e9:02:4a:a2:25:97:30:93:3e:be:41:4f:27:6a:d1:ef:
ab:89:ba:b6:32:ea:e0:3a:b7:70:ae:9c:16:ff:42:1c:ba:b3:
8d:a2:ee:11:26:8e:17:ea:58:d7:6c:1b:a4:2e:9c:5b:b1:73:
5d:84:6c:da:2d:84:f7:d0:38:3f:58:bb:d0:8a:d9:24:4e:c0:
d2:d8:81:04:97:9e:d5:8e:d5:dc:f0:86:d5:5e:19:cd:28:d6:
c9:27:82:7d:cf:f3:8e:aa:4a:f2:25:62:bc:06:65:8d:9d:fc:
03:00:26:5d:47:f9:bb:f8:d6:7b:36:31:3a:4a:c9:d0:73:8a:
96:d8:53:15:de:c2:04:3d:0d:31:82:5b:40:79:75:e8:ca:15:
00:4b:04:46:c1:80:74:15:3b:de:52:10:99:2c:a6:04:b8:e6:
de:1a:fb:e9:a8:7d:a4:8c:34:74:5e:3a:3b:4e:31:b4:93:43:
e5:d6:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:33:35 2025 by rpki-client