Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/upTKqyc3Xt9hv4yZzBwraruv_xU.cer
File: upTKqyc3Xt9hv4yZzBwraruv_xU.cer (raw, json)
Hash identifier: nGJRaHz7xXahD++l48Oc8fLdhcF89DuLDoVDcWeleMA=
Subject key identifier: BA:94:CA:AB:27:37:5E:DF:61:BF:8C:99:CC:1C:2B:6A:BB:AF:FF:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018943B1AE4F8A8413F395142A8AEE598211
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/upTKqyc3Xt9hv4yZzBwraruv_xU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 11 Jul 2023 06:44:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.68.152.0/22
IP: 185.94.32.0/22
IP: 2a04:3840::/29
IP: 2a05:1900::/29
Validation: Failed, certificate revoked on Thu 19 Oct 2023 13:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:b1:ae:4f:8a:84:13:f3:95:14:2a:8a:ee:59:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 11 06:44:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba94caab27375edf61bf8c99cc1c2b6abbafff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:8e:07:eb:ee:aa:8a:21:8d:b6:82:00:40:
5e:eb:d9:10:6e:90:a1:ff:07:3a:e1:be:8f:3b:03:
f3:9f:f1:f3:ee:8b:09:9a:9e:79:2d:17:52:60:18:
3c:a3:34:55:11:e1:53:d7:86:b1:62:74:c4:5a:0b:
dc:15:3d:c2:e4:82:bc:d1:75:e1:ad:22:a7:dd:5c:
1c:16:e1:04:93:0c:e8:a3:d6:33:ab:21:28:14:b1:
01:4e:24:93:3b:a1:15:82:48:b1:dc:6b:df:01:9a:
01:f3:cb:19:4f:be:2b:f8:8b:28:65:22:74:cb:0d:
fe:d8:87:c2:eb:ed:03:c5:b9:c2:47:c0:73:b9:0c:
d8:b5:03:a1:89:ad:c4:09:ec:66:2b:92:c8:40:02:
0c:39:c9:6b:46:de:af:eb:1b:6f:ea:dc:f1:cd:bf:
22:6b:5d:8d:69:bf:da:37:1d:82:50:06:70:0a:b9:
10:08:b3:d2:f8:d3:e7:e4:b2:ce:ed:8b:c4:83:2a:
71:9f:5f:8e:ab:45:e7:b8:b9:64:61:f5:1f:30:e9:
9a:5b:c6:f4:01:26:0c:f7:0a:3f:f9:74:54:e4:7a:
b7:61:2a:ac:2b:70:81:6c:1c:d1:37:3f:2f:9e:35:
71:cf:4c:20:f3:f6:a5:7f:c9:68:d4:61:cd:a3:47:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:94:CA:AB:27:37:5E:DF:61:BF:8C:99:CC:1C:2B:6A:BB:AF:FF:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/b77b81-e5d4-48bc-be77-213771652599/1/upTKqyc3Xt9hv4yZzBwraruv_xU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.152.0/22
185.94.32.0/22
IPv6:
2a04:3840::/29
2a05:1900::/29
Signature Algorithm: sha256WithRSAEncryption
78:f1:16:84:4a:75:eb:72:c0:8e:0e:6a:d0:75:63:b6:e7:5a:
c9:f2:c4:c8:64:29:59:50:a3:09:66:1a:08:29:64:f9:fe:61:
6f:63:aa:fc:6d:cf:f7:99:5f:e4:f6:aa:05:93:45:25:93:f2:
df:b6:b6:e8:68:cd:3f:49:92:97:81:c5:c0:bb:57:26:1b:bf:
b7:64:b7:d6:6b:6f:29:f5:67:7e:62:45:41:c0:e5:a0:96:cc:
d9:af:56:f9:f1:46:7a:75:37:3f:14:4a:54:dc:f1:d6:39:42:
e1:d8:7a:4e:e7:73:00:d7:d1:52:66:59:e7:e8:82:6a:c5:5a:
c7:fc:a5:d9:54:64:86:55:55:94:1d:83:05:27:0a:6f:3a:66:
8a:be:07:40:20:d4:f8:ef:31:2f:ea:66:c6:62:57:c1:10:82:
5c:84:24:85:33:61:fb:a7:8f:31:58:74:7f:d2:87:d6:7e:c6:
fe:dd:ab:04:ab:d0:c7:50:c4:b0:35:2b:4e:20:2f:2a:1a:03:
e5:25:a1:8c:ff:72:61:d9:20:40:66:ee:44:41:cd:b5:bf:23:
c6:12:ed:e9:41:97:41:fd:f6:6d:57:b1:ab:fe:63:0c:24:5a:
85:d3:04:99:c5:21:95:23:b6:75:d3:3b:d3:9f:ca:a9:53:12:
dd:9a:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:34 2024 by rpki-client on console-fra.rpki-client.org