Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ukWrgYqb75WcFEMYRsYj0xhxpx0.cer
File: ukWrgYqb75WcFEMYRsYj0xhxpx0.cer (raw, json)
Hash identifier: JhWUJbyDnB0/srxdSbuVTg2ejTtmiEAFpkqkXMcS5u0=
Subject key identifier: BA:45:AB:81:8A:9B:EF:95:9C:14:43:18:46:C6:23:D3:18:71:A7:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF76611B652AE9A767AF7B9889BC3CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/ukWrgYqb75WcFEMYRsYj0xhxpx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 209854
IP: 92.249.36.0/22
IP: 2a09:a700::/29
Validation: Failed, certificate revoked on Mon 03 Jul 2023 08:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:66:11:b6:52:ae:9a:76:7a:f7:b9:88:9b:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba45ab818a9bef959c14431846c623d31871a71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:16:46:a4:b0:e1:28:91:a2:ae:8b:0d:00:
3d:c1:cb:38:96:1b:b7:58:c6:c8:51:cf:e1:da:1f:
77:a6:20:2b:64:f2:79:99:d0:63:bd:a6:37:a0:13:
93:7f:34:12:c1:8a:1d:aa:59:df:f6:2e:e3:57:89:
b9:06:82:3a:d8:70:3a:2c:ab:37:59:e0:65:a7:3c:
85:b7:2c:05:e1:42:34:94:62:b5:ea:36:6e:ef:a5:
5c:56:b9:24:af:a3:7b:20:94:75:80:63:31:56:13:
90:9c:3b:e6:f9:18:b5:2e:fa:da:95:73:14:fd:79:
ab:3c:91:eb:87:a1:3d:62:da:15:10:a7:f8:59:12:
5b:35:2a:6b:a1:f7:3f:05:31:a8:64:e8:ec:9e:42:
20:23:a9:79:91:93:f2:7c:54:a6:4b:09:66:ae:e9:
b6:78:14:96:ea:71:22:a6:38:16:c3:99:1a:f7:b6:
33:71:87:39:ca:f7:f2:79:48:de:8c:43:60:d3:59:
96:c2:a7:e3:db:2c:35:3a:56:44:00:17:e5:98:1f:
f8:89:18:06:38:a0:4f:04:43:97:e8:8e:00:dd:70:
f7:0c:3e:72:46:77:33:53:ee:fe:cc:15:0b:96:7d:
ac:d5:b0:21:bc:55:ea:04:79:a0:2c:fb:9d:6d:85:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:45:AB:81:8A:9B:EF:95:9C:14:43:18:46:C6:23:D3:18:71:A7:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/ukWrgYqb75WcFEMYRsYj0xhxpx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.36.0/22
IPv6:
2a09:a700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209854
Signature Algorithm: sha256WithRSAEncryption
a9:c4:2a:cd:0c:8a:b9:82:6e:c4:57:4b:a6:5c:fd:b5:d3:60:
22:34:7d:63:7d:91:47:b7:c7:66:bf:e4:58:d9:56:38:53:7c:
1f:c7:ce:46:e8:90:5b:e7:97:d9:a3:f3:62:8b:35:af:1f:c3:
79:73:d6:04:25:ee:50:1a:f1:d9:90:c7:51:36:51:c2:45:b2:
4c:09:60:2d:5e:fa:a7:81:db:80:0a:2a:9a:18:17:7a:3b:18:
f4:c0:e0:6a:3a:d4:7b:d3:9e:e3:5a:41:42:44:ae:ba:1d:c9:
19:56:02:2a:f8:4e:9d:41:26:68:8d:84:4b:96:4e:42:66:61:
4f:93:97:ae:a2:77:75:07:11:a4:69:8a:74:d7:4f:a3:0e:1c:
15:ff:e6:ab:54:90:d5:19:4d:69:60:05:bd:c0:b1:81:77:a0:
27:94:71:70:20:b3:a2:15:6b:2a:9e:61:68:dc:ad:32:87:15:
fe:66:12:64:85:8b:4f:08:d4:93:ae:1e:2b:ed:10:14:60:08:
5b:e7:1e:bf:a9:06:ac:af:f0:3a:ad:ec:5b:82:ac:bd:8e:e9:
f2:87:94:e9:20:09:88:60:ab:e6:c8:68:0c:18:ea:db:9a:23:
59:dc:5b:09:1c:7d:8d:b3:75:3b:c8:24:e5:3a:28:0d:e5:3c:
cf:54:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:20 2024 by rpki-client on console-ams.rpki-client.org