Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xUbcJjnGdm0z52kpPPmh15DvuXo.cer
File: xUbcJjnGdm0z52kpPPmh15DvuXo.cer (raw, json)
Hash identifier: hjLou/uoBQQTZy0ikon2Tx8bcsjZpRQTWcdf9Ln6jzA=
Subject key identifier: C5:46:DC:26:39:C6:76:6D:33:E7:69:29:3C:F9:A1:D7:90:EF:B9:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570891D2DC60CE2353AFE08B8C94926DA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/xUbcJjnGdm0z52kpPPmh15DvuXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:31:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.31.0/24
IP: 2a12:ce00::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 09:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:89:1d:2d:c6:0c:e2:35:3a:fe:08:b8:c9:49:26:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:31:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c546dc2639c6766d33e769293cf9a1d790efb97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:7b:91:23:e4:5f:ca:8f:96:04:ad:83:36:
d0:3a:f4:bd:81:16:4b:45:d1:f3:cb:67:26:d7:83:
2d:9a:28:fc:b5:ce:11:2b:07:63:11:ab:ee:a7:00:
5a:ca:89:1f:9d:5d:79:11:cf:2a:cb:b8:29:0e:6c:
c0:bc:89:57:33:d6:5f:7f:35:e1:26:a7:32:ea:80:
f3:c8:be:86:74:3d:f3:b4:24:e8:ec:2e:af:ef:72:
db:13:bd:51:48:44:73:88:b8:fc:7c:cf:2b:b3:8d:
4d:1d:f0:2c:42:34:48:42:4e:3e:ef:e6:e6:f2:23:
47:6e:6f:25:ee:8b:d9:73:ca:60:0f:ec:f3:82:38:
67:3d:19:3e:80:65:de:fb:c4:d8:d8:b5:b7:d7:f1:
e3:45:fd:cd:93:0f:2a:34:7a:f0:b7:80:85:a0:4c:
b8:95:9a:d5:98:6d:0d:a7:2e:7c:20:ca:68:44:13:
50:30:ce:77:9c:ce:ef:e0:1d:1a:03:f7:6d:22:d0:
d7:da:98:65:c3:e3:34:ed:83:b6:8f:9f:30:31:cf:
6f:70:2b:12:fb:a6:fa:14:13:bd:ca:dc:d2:09:8e:
40:aa:12:a8:01:41:0b:cc:b6:92:37:69:b7:47:aa:
bb:45:39:21:82:b5:5a:38:58:74:f7:e2:2e:77:10:
ba:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:46:DC:26:39:C6:76:6D:33:E7:69:29:3C:F9:A1:D7:90:EF:B9:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7e1052-1e58-4af3-ad91-3d0a683986c3/1/xUbcJjnGdm0z52kpPPmh15DvuXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.31.0/24
IPv6:
2a12:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
7b:02:81:56:8a:e8:83:54:a8:94:cd:75:3d:aa:db:43:27:e7:
4b:46:5c:f9:70:61:62:76:d7:5d:83:15:02:19:42:87:df:90:
44:fd:0e:b1:55:11:2e:df:20:f8:50:e3:63:2a:12:6d:6c:2c:
d3:59:28:07:0d:9b:77:c7:29:86:c8:6f:d1:cf:40:b5:4e:d6:
fe:16:36:e6:1c:fb:a4:d9:db:7b:2d:7e:65:17:c5:bb:b2:ab:
68:e7:b1:e6:79:87:af:c0:53:06:67:f1:58:00:51:fb:02:97:
bf:bc:a7:e1:67:6f:a7:f7:66:e1:88:83:0f:3d:f6:a1:d3:4f:
5b:6e:60:eb:2b:04:d5:a4:8b:2c:f2:b6:6c:5d:f5:1d:72:1d:
03:7d:bc:bf:db:31:59:d9:19:ac:14:70:22:cd:10:af:e4:65:
c2:75:51:33:e2:db:67:2b:1a:03:a8:2b:7f:75:51:63:d8:63:
c7:f4:5c:a1:29:ef:13:e5:6c:3d:e8:f8:11:97:2a:26:e2:21:
99:04:7e:3e:72:7b:4c:c6:da:04:0b:9f:96:b5:4d:9d:67:cf:
c3:3a:55:8f:a7:b7:fe:5e:8c:1c:9c:81:3b:0b:4b:5f:e6:34:
ab:68:53:4f:34:01:fc:49:d7:91:96:b7:61:f2:8e:d0:9d:dc:
8a:c6:9e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:00 2024 by rpki-client on console-fra.rpki-client.org