Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ulhntjrKz3CUDrYtJlPVkyd_bcc.cer
File: ulhntjrKz3CUDrYtJlPVkyd_bcc.cer (raw, json)
Hash identifier: 1ReEaPCNI/nfvpFeKZPzvvDal/4lpsOoXmnlW70JQxc=
Subject key identifier: BA:58:67:B6:3A:CA:CF:70:94:0E:B6:2D:26:53:D5:93:27:7F:6D:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B7442986A28909A1EDDC01290280A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:13 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 202170
IP: 185.51.92.0/22
IP: 2a01:b020::/32
Validation: Failed, certificate revoked on Tue 06 Jun 2023 13:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:74:42:98:6a:28:90:9a:1e:dd:c0:12:90:28:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba5867b63acacf70940eb62d2653d593277f6dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:9e:a0:ba:26:1a:52:4d:09:68:64:da:85:
9c:41:c5:c3:ca:35:a8:0c:06:18:bd:23:32:d4:df:
b2:c7:24:b2:6b:5b:6d:66:71:be:4e:59:8c:51:0c:
3c:88:c1:cd:26:a8:2c:55:cb:bb:4a:f6:ce:a9:71:
ae:c0:87:66:b1:28:f6:c0:88:fe:26:ee:24:58:9b:
2a:23:a9:7d:77:93:34:67:7d:89:ff:42:59:be:4d:
40:49:ed:a3:f3:eb:da:e6:84:2d:fd:ab:a9:6c:04:
f7:9e:e9:81:17:a9:8b:32:48:ed:9a:aa:78:5d:e1:
f5:c4:32:f4:8d:10:76:a8:c2:20:ca:1d:b0:c1:f4:
9e:45:29:80:cb:bd:4f:18:bb:4f:71:31:1a:e1:ca:
52:3b:6b:50:5c:f2:72:e8:8d:1a:c6:5b:8d:fb:9e:
0e:82:8b:64:f7:88:fd:2c:fd:d5:dc:2f:ae:9a:53:
bd:a1:96:e5:4c:2c:4f:c1:9b:f5:57:3c:93:b5:db:
d3:38:fc:90:b6:51:6f:e1:cf:f2:af:f7:9e:36:a1:
e1:d2:b3:4d:c8:79:64:7b:54:47:37:1c:b7:03:90:
c2:f1:0a:2e:13:c2:a0:e9:3b:de:17:44:43:ab:95:
88:a6:f0:3e:dd:01:c5:7a:16:2c:e5:78:4c:e7:19:
77:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:58:67:B6:3A:CA:CF:70:94:0E:B6:2D:26:53:D5:93:27:7F:6D:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42686e-9a13-4c1a-ab93-ba3d8e1f7d27/1/ulhntjrKz3CUDrYtJlPVkyd_bcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.92.0/22
IPv6:
2a01:b020::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202170
Signature Algorithm: sha256WithRSAEncryption
54:3d:90:17:54:26:a5:da:30:c1:6a:77:30:6a:37:77:fb:30:
bb:d7:46:fd:ba:21:79:12:f6:67:9b:17:55:5d:a7:ac:66:55:
cc:f5:0e:ee:65:dc:a2:67:f7:2e:30:bb:16:10:26:22:3c:17:
e6:3f:27:27:dd:6a:bf:3a:85:d0:dd:b8:a6:5f:25:4f:c1:fe:
41:30:07:c7:84:92:e7:3e:f1:91:a4:27:17:79:9a:ae:8d:be:
8a:d5:93:63:e6:df:ce:2b:70:58:7c:79:1f:11:4f:ff:5d:49:
94:25:d5:92:75:07:dc:8a:33:50:cf:38:49:5b:ba:66:27:24:
c4:ae:b5:90:9b:65:f9:56:0a:c1:57:b9:7c:70:fc:6e:e7:5b:
60:18:6c:d6:06:46:8f:94:ad:fc:fd:41:21:7a:01:0d:4f:e1:
49:f5:25:a9:5e:ad:6e:4f:da:b8:08:82:dd:ce:84:ff:16:52:
e5:f8:b3:3e:ef:d4:89:df:a5:09:f6:7b:8d:a4:51:8d:ef:b6:
00:73:9f:be:c6:65:8b:8c:16:cf:78:24:3f:fa:52:87:80:a7:
3e:67:b7:79:aa:d9:b3:c1:a2:4e:d2:fe:77:c3:8c:59:33:f1:
83:d3:cc:d6:df:08:b1:72:9f:87:d0:3b:1c:6e:96:ae:ce:de:
9b:c1:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:58:20 2024 by rpki-client on console-ams.rpki-client.org