Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer
File: xUg0UwQVkwdQOIgbjV3zFJXZQrQ.cer (raw, json)
Hash identifier: T+ZMZGB4JgS7dR0egvzY38XaHx9HlRnsnGYvm1Ib2K8=
Subject key identifier: C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856F4077B730C7967DE9DAF9E6CF33B680
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 21:32:54 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.22.29.0/24
IP: 2a11:d780::/29
Validation: Failed, certificate revoked on Tue 05 Sep 2023 09:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:40:77:b7:30:c7:96:7d:e9:da:f9:e6:cf:33:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5483453041593075038881b8d5df31495d942b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:5b:01:1a:15:71:92:f1:8f:66:cc:66:5d:
9a:70:96:63:f1:e3:49:b3:4c:0b:23:9b:33:d5:ac:
3d:19:b8:dc:12:a8:55:61:75:05:9c:04:02:34:39:
d6:c1:ea:50:43:b8:a7:14:28:61:b6:36:ab:fb:8b:
90:df:dc:40:c9:be:56:9e:ee:95:7b:9d:dc:58:e3:
e8:64:3d:66:39:d6:27:5f:be:94:87:8b:d9:f4:21:
61:a1:ec:7e:7d:58:a0:f9:48:c5:f0:ce:0a:f8:d8:
f1:48:17:f2:a7:1f:6c:b4:96:f5:b4:00:b4:fb:2b:
86:51:c0:a0:c5:d6:69:75:88:15:13:58:f8:7c:9a:
67:e6:de:43:27:91:b8:22:88:d6:af:37:dd:4c:4a:
9f:09:11:a6:bc:c6:a6:0d:b6:a8:1e:89:e3:84:35:
81:bf:dc:df:b7:b3:e2:04:2d:ce:b9:f6:39:26:c0:
f7:a7:69:ba:e5:e4:11:c7:2d:fa:6c:41:3a:32:97:
78:c3:1f:a9:db:d7:35:80:60:ea:e9:38:16:d9:90:
3f:89:ad:7a:97:43:80:8a:e1:56:c5:81:3a:62:18:
4a:9d:cc:0e:f8:78:83:46:9b:81:78:64:56:0c:dd:
99:e9:b4:ec:75:7a:9f:3a:d9:39:6b:a9:12:64:75:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:48:34:53:04:15:93:07:50:38:88:1B:8D:5D:F3:14:95:D9:42:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9ecbd1-1982-4049-8cc3-38b11362f68e/1/xUg0UwQVkwdQOIgbjV3zFJXZQrQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.29.0/24
IPv6:
2a11:d780::/29
Signature Algorithm: sha256WithRSAEncryption
9b:85:ee:46:6b:49:45:9e:6b:a4:19:40:8f:0f:33:29:15:8c:
b4:b8:e2:2b:cc:fc:df:c3:07:95:51:87:83:97:9c:28:34:d6:
c9:c9:cd:35:ff:ca:b3:bc:76:c3:1f:37:e5:ca:46:ce:c8:88:
0e:75:bf:bd:5a:4a:05:b6:9f:29:e9:85:83:5f:91:62:dc:d1:
96:e2:79:dc:33:8a:09:8c:03:8b:bf:da:83:d2:a7:ce:23:24:
1b:2e:05:05:e1:65:b4:4b:98:45:54:f7:4c:13:5a:ab:c3:61:
9c:4f:6b:a4:1b:8a:27:85:65:cd:be:af:ce:f2:42:3f:d6:1a:
fc:e1:95:1e:9c:fc:fa:4e:fc:2d:34:e5:e4:69:f8:e6:38:b4:
16:f6:f5:83:f7:aa:0a:fe:e7:ba:03:60:52:0e:a5:a1:45:58:
7f:dc:21:ea:04:02:18:a5:00:27:4c:29:e2:82:7e:a0:b5:21:
ae:7b:e0:40:cd:dd:2b:9d:d1:6b:22:b0:b8:9c:f4:ce:7b:eb:
d2:e1:db:6b:00:f7:c9:be:81:e1:77:94:36:b7:aa:4f:d8:5f:
e5:04:a2:b6:d3:74:2d:98:9a:b1:ff:b6:1c:f5:d5:27:90:cc:
39:29:9f:a4:f8:35:a2:f1:e5:09:f1:54:3c:76:ad:aa:76:d5:
fd:e9:27:e8
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvQHe3MMeWfena+ebPM7aAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjEzMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTQ4MzQ1MzA0MTU5MzA3NTAzODg4MWI4ZDVkZjMxNDk1ZDk0MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprRbARoVcZLxj2bMZl2acJZj8eNJ
s0wLI5sz1aw9GbjcEqhVYXUFnAQCNDnWwepQQ7inFChhtjar+4uQ39xAyb5Wnu6V
e53cWOPoZD1mOdYnX76Uh4vZ9CFhoex+fVig+UjF8M4K+NjxSBfypx9stJb1tAC0
+yuGUcCgxdZpdYgVE1j4fJpn5t5DJ5G4IojWrzfdTEqfCRGmvMamDbaoHonjhDWB
v9zft7PiBC3OufY5JsD3p2m65eQRxy36bEE6Mpd4wx+p29c1gGDq6TgW2ZA/ia16
l0OAiuFWxYE6YhhKncwO+HiDRpuBeGRWDN2Z6bTsdXqfOtk5a6kSZHXBXwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMVINFMEFZMHUDiIG41d8xSV2UK0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzllY2Jk
MS0xOTgyLTQwNDktOGNjMy0zOGIxMTM2MmY2OGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvOWVjYmQx
LTE5ODItNDA0OS04Y2MzLTM4YjExMzYyZjY4ZS8xL3hVZzBVd1FWa3dkUU9JZ2Jq
VjN6RkpYWlFyUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAshYdMA0EAgACMAcDBQMqEdeAMA0GCSqGSIb3
DQEBCwUAA4IBAQCbhe5Ga0lFnmukGUCPDzMpFYy0uOIrzPzfwweVUYeDl5woNNbJ
yc01/8qzvHbDHzflykbOyIgOdb+9WkoFtp8p6YWDX5Fi3NGW4nncM4oJjAOLv9qD
0qfOIyQbLgUF4WW0S5hFVPdME1qrw2GcT2ukG4onhWXNvq/O8kI/1hr84ZUenPz6
TvwtNOXkafjmOLQW9vWD96oK/ue6A2BSDqWhRVh/3CHqBAIYpQAnTCnign6gtSGu
e+BAzd0rndFrIrC4nPTOe+vS4dtrAPfJvoHhd5Q2t6pP2F/lBKK203QtmJqx/7Yc
9dUnkMw5KZ+k+DWi8eUJ8VQ8dq2qdtX96Sfo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:08 2024 by rpki-client on console-ams.rpki-client.org