Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uxjIv-yGLxqlmY8YQM68PVkmgt0.cer
File: uxjIv-yGLxqlmY8YQM68PVkmgt0.cer (raw, json)
Hash identifier: +xW4O79ZtKqBpEn7CApbpCthto7pYnCeYQmZIqvLOcA=
Subject key identifier: BB:18:C8:BF:EC:86:2F:1A:A5:99:8F:18:40:CE:BC:3D:59:26:82:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187C1C9B7C280A5B9AB51BEC644C1779D0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Apr 2023 08:17:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.223.95.0/24
IP: 2a0e:9640::/29
Validation: Failed, certificate revoked on Fri 23 Jun 2023 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:c9:b7:c2:80:a5:b9:ab:51:be:c6:44:c1:77:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 27 08:17:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb18c8bfec862f1aa5998f1840cebc3d592682dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:11:7d:98:22:3d:f3:45:2d:c1:41:da:0d:c4:
9a:2d:43:72:b9:ec:e9:8a:5a:31:f3:b1:8d:e6:52:
2d:8e:70:76:18:92:03:e3:49:1b:88:cb:ff:c0:ab:
e8:f6:15:8d:5c:76:d2:d9:3b:13:a0:be:97:7d:fa:
7a:2b:ce:04:2d:c7:2b:42:da:0c:4e:38:fd:41:86:
15:6e:c0:d5:3d:cd:4d:cb:e8:0c:2a:10:05:3c:63:
9c:43:f4:2a:4d:38:35:37:14:69:45:58:a6:02:cb:
21:36:dc:96:c7:91:7e:52:07:6d:79:c5:9c:b9:41:
97:fa:49:2d:d7:17:ed:36:46:6d:55:20:04:f9:f8:
27:d5:f3:78:de:28:b9:6b:aa:75:a5:20:7e:f8:4e:
a5:31:89:2b:af:77:20:46:7a:2f:2c:7b:69:19:e9:
3d:dc:58:b8:11:2c:46:c7:30:f9:e5:9c:d2:6e:a8:
ac:88:fd:48:c1:49:ee:d8:dd:fe:28:c8:2b:45:62:
7f:fa:24:42:ae:d0:d2:86:12:0d:b2:c8:90:4f:70:
5c:b8:8b:fc:43:8c:ed:72:a4:75:08:76:b7:6f:9b:
d6:f7:07:76:0b:e7:74:ee:c0:e8:77:0b:da:de:5f:
89:fd:c9:de:34:e2:c4:d9:65:34:a1:4c:3c:bf:3c:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:18:C8:BF:EC:86:2F:1A:A5:99:8F:18:40:CE:BC:3D:59:26:82:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fccdc5-a6d6-48f8-8ff6-25c440a0ec1d/1/uxjIv-yGLxqlmY8YQM68PVkmgt0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.95.0/24
IPv6:
2a0e:9640::/29
Signature Algorithm: sha256WithRSAEncryption
7a:92:ac:05:c4:45:8c:3e:71:d3:70:a2:92:ec:bf:7d:44:d3:
74:a8:d4:3c:c1:46:0b:06:05:20:aa:72:25:f8:e1:c9:84:65:
b2:5b:39:3f:1c:e9:ce:16:3c:fa:79:4e:92:01:3c:af:17:ac:
56:bb:c9:04:79:ba:c6:ef:e3:b8:6d:e2:81:27:e5:d1:aa:ad:
d9:e5:24:80:e5:00:cc:9d:01:99:e8:1c:f3:2e:97:e8:72:bb:
84:22:3d:46:71:9b:ee:15:fe:47:a4:25:f4:f6:e7:53:b7:18:
b7:17:2b:72:eb:84:d3:6e:d9:bf:98:4a:d2:93:62:39:2a:c7:
ee:39:7f:b1:2a:0d:38:7f:af:34:33:e8:a3:28:fd:b1:dd:00:
a6:20:cf:1a:af:fa:5f:06:d9:1a:bb:a3:0a:fd:f0:54:dc:19:
4c:88:25:69:1d:bc:e9:20:fd:46:c9:1b:c2:39:98:60:4e:8d:
0d:a5:40:a3:f7:c7:e6:25:e2:ff:37:6f:63:53:12:42:86:f0:
6e:30:52:40:16:1f:5a:e7:97:1e:8c:dd:62:d5:f8:61:74:55:
7b:24:c6:ca:0a:90:21:46:1c:29:f4:5d:9e:dc:09:68:84:b6:
5f:d3:2c:f2:f4:d6:5d:e9:cc:6b:df:94:62:7d:13:30:89:27:
d3:c7:67:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:36 2024 by rpki-client on console-fra.rpki-client.org