Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ujS1fRZn5IeG_fj2Oz51luv4F6k.cer
File: ujS1fRZn5IeG_fj2Oz51luv4F6k.cer (raw, json)
Hash identifier: Khwcfx3RA2fylv9jiunPtzZ7/vjEODFe+sVmtfAg53g=
Subject key identifier: BA:34:B5:7D:16:67:E4:87:86:FD:F8:F6:3B:3E:75:96:EB:F8:17:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F407E3F803D0B54DD4C10499DD7582F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/810d19-071d-4983-a744-2ceda62fd776/1/ujS1fRZn5IeG_fj2Oz51luv4F6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/810d19-071d-4983-a744-2ceda62fd776/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:32:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.211.16.0/22
IP: 2a0b:6240::/29
Validation: Failed, certificate revoked on Fri 14 Jul 2023 06:14:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:40:7e:3f:80:3d:0b:54:dd:4c:10:49:9d:d7:58:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba34b57d1667e48786fdf8f63b3e7596ebf817a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:ea:08:95:56:51:77:81:08:2e:76:75:b4:
03:9e:2d:88:9d:12:fc:65:c1:48:90:2b:f8:10:75:
aa:0e:56:81:b1:9d:93:51:ea:d4:c1:77:a0:e2:fd:
7a:92:fd:d1:a2:ea:60:3f:c6:b1:9a:90:e2:2c:c9:
79:e1:df:6f:ed:4b:bf:70:2f:3b:bf:1e:89:81:2a:
30:66:1c:7f:6f:0c:fb:7f:17:90:35:f4:dd:ca:26:
a5:f3:5b:42:6a:35:c6:4b:06:79:0e:6f:82:16:74:
84:24:75:fc:24:38:1d:00:71:d7:e4:22:05:6f:a3:
bb:74:0f:0f:9b:02:64:3b:96:65:78:b9:25:bb:e2:
c4:26:01:47:15:0b:86:74:59:e7:a6:b7:88:27:68:
6c:c0:c7:17:70:63:fa:ea:cb:a2:8c:f2:bb:9e:58:
54:db:84:c5:aa:81:b2:12:5f:5f:79:94:ec:bf:7b:
13:39:59:d4:a0:11:7e:eb:65:d5:3a:d8:bc:c7:86:
c1:f9:9d:75:85:28:02:e3:d9:a0:41:cc:26:ed:8c:
7d:d2:18:b7:44:ee:02:b4:97:d2:e1:de:a8:e5:b3:
d4:5a:59:05:a9:ce:42:a3:f2:c5:45:3f:9d:29:e1:
1c:2a:d1:13:b9:2a:8a:ed:b5:ab:ac:74:58:fc:17:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:B5:7D:16:67:E4:87:86:FD:F8:F6:3B:3E:75:96:EB:F8:17:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/810d19-071d-4983-a744-2ceda62fd776/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/810d19-071d-4983-a744-2ceda62fd776/1/ujS1fRZn5IeG_fj2Oz51luv4F6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.16.0/22
IPv6:
2a0b:6240::/29
Signature Algorithm: sha256WithRSAEncryption
05:bd:07:7a:c8:dc:57:ff:54:cd:56:d5:f4:b6:cf:9c:16:ca:
d9:40:ec:91:94:a6:72:39:6c:11:f5:1d:cc:28:3a:10:3b:a4:
2c:be:9c:f6:6a:df:37:a1:2f:e5:5e:24:a3:90:8d:e1:2d:c1:
ea:28:38:6f:67:ea:f1:fa:b5:02:99:e1:df:f3:76:4b:b5:cb:
42:ff:d5:d5:8d:aa:d2:c1:cf:3b:3f:4a:65:36:97:c3:cc:3d:
1c:bb:16:d9:86:c8:d7:65:9f:00:e2:da:c4:a2:c4:ef:79:d9:
45:1c:73:ee:b6:6d:f2:75:55:6e:f0:19:85:60:ac:09:7f:7b:
37:ae:76:9b:32:a0:e4:d0:df:47:7b:b9:58:2b:fc:38:a2:9b:
16:43:de:61:f5:41:ed:78:ca:8a:e1:34:18:3f:09:f2:14:8f:
f7:65:8c:9f:23:f9:f4:2e:b6:0e:5e:75:b0:25:ab:6f:17:bf:
a4:0d:9f:e3:77:07:30:25:7c:55:c7:bf:ac:55:ea:b2:6d:cb:
7f:72:c0:c1:36:f2:0d:cf:f0:36:22:2f:35:41:15:ae:8e:97:
f2:cc:b5:7b:fc:0d:19:d4:ed:1f:86:cb:f5:29:e5:11:6a:73:
3e:5f:17:8c:3e:aa:da:de:55:55:4e:8b:cc:1b:54:e0:20:ad:
ab:a2:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:20 2024 by rpki-client on console-ams.rpki-client.org