Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ufWctioZMg2C-fxdk0_83A5l5JA.cer
File: ufWctioZMg2C-fxdk0_83A5l5JA.cer (raw, json)
Hash identifier: NzT9acp1RbohxoYiiw6tKxnWxhaVKmifDASyaRYp4DU=
Subject key identifier: B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185716884327D6D4038190E9D7A08466201
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/ufWctioZMg2C-fxdk0_83A5l5JA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.233.49.0/24
IP: 2a11:a2c0::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 07:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:68:84:32:7d:6d:40:38:19:0e:9d:7a:08:46:62:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9f59cb62a19320d82f9fc5d934ffcdc0e65e490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:83:b1:fb:32:30:49:c6:2d:ea:98:86:44:
e9:4a:40:1d:c3:93:2a:de:c5:c4:da:34:bf:cd:37:
48:65:99:45:51:1c:79:5a:ad:86:6c:27:af:95:16:
75:d2:40:82:23:91:73:23:7b:26:40:79:95:c3:dd:
6d:2f:dd:88:d5:2a:3d:6c:77:6d:cf:5a:5f:bf:f9:
83:f9:f8:42:dd:c0:de:37:56:ba:b5:86:16:6a:21:
54:73:9b:fa:12:09:c6:a4:75:21:c0:e9:77:fb:28:
5b:92:01:5c:09:fc:41:3c:b2:ef:cf:f7:39:02:78:
9a:2a:27:5e:29:b0:3b:4e:b0:e1:dc:ad:0d:af:c6:
02:53:d9:e2:33:c0:40:97:21:b0:8d:3b:db:45:b7:
ed:43:58:5e:9d:f9:1c:ef:2d:a2:7d:ab:0c:63:1e:
9a:d8:ee:f5:1d:53:a3:76:37:f6:3c:1a:fa:bc:1b:
e1:b7:61:5d:2b:40:b1:e2:ce:e8:03:e8:9f:6e:c5:
37:ad:02:15:0f:d0:b9:cc:10:46:41:58:85:26:1c:
7b:b0:f6:72:1d:99:e5:8b:25:5d:ad:b3:4d:ca:52:
cd:cc:df:5e:d9:09:7d:d2:98:dc:52:21:7f:77:0e:
d4:34:df:e2:63:8e:56:b3:4a:34:f5:c6:78:8f:a5:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:9C:B6:2A:19:32:0D:82:F9:FC:5D:93:4F:FC:DC:0E:65:E4:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/323527-9e96-4835-80bb-9ce9995abbad/1/ufWctioZMg2C-fxdk0_83A5l5JA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.233.49.0/24
IPv6:
2a11:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:91:44:9d:30:a1:2f:f1:7f:5d:2d:9d:ef:ff:e3:a9:c8:38:
0c:09:28:9c:4f:ff:68:7f:11:f5:48:fc:81:37:1d:60:50:52:
2b:b7:d2:df:6c:7c:80:79:71:fc:d3:b5:9c:d1:57:dc:c5:29:
e5:4a:58:5d:43:57:11:a5:9e:7e:c2:be:10:37:16:4c:89:2a:
fc:92:dc:93:7c:b9:6f:8f:53:7c:e0:40:11:d9:e4:49:59:c5:
e4:69:0a:a5:89:f0:91:41:9a:0d:97:1d:49:9f:16:af:9c:2d:
aa:ec:5e:1c:b5:c7:21:e7:14:85:71:82:77:62:f6:3a:3d:0f:
07:29:30:b5:1c:16:39:95:7e:74:5f:78:12:be:b3:2a:e0:7f:
4e:6c:70:3c:bf:14:0c:db:99:37:c8:8c:61:6a:92:7b:c4:0c:
fb:b1:e2:a5:cb:b4:b5:4d:fc:b5:9f:01:70:80:e3:1f:66:4a:
7d:73:d9:78:4e:1b:e5:39:71:03:9b:08:91:52:ad:65:28:b0:
81:7b:38:c3:e0:f5:6e:f9:77:52:5a:e2:23:11:c2:27:71:92:
89:5d:67:4d:43:d6:7c:8b:34:60:f8:8d:48:25:c1:33:48:59:
b4:d1:72:fe:5a:a3:47:c5:40:2d:d2:41:a1:ff:d4:ea:0e:ed:
a5:70:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:33 2024 by rpki-client on console-fra.rpki-client.org