Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uq2i-ppfoh_LFg2RQdMZedULMFw.cer
File: uq2i-ppfoh_LFg2RQdMZedULMFw.cer (raw, json)
Hash identifier: TIC3Lf4J85PTALLC0cujN2mvQkez8F8BZHQH5S8GpSw=
Subject key identifier: BA:AD:A2:FA:9A:5F:A2:1F:CB:16:0D:91:41:D3:19:79:D5:0B:30:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01865E6DF245261D8E73932D0AC5495C88A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/uq2i-ppfoh_LFg2RQdMZedULMFw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Feb 2023 08:11:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.13.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:6d:f2:45:26:1d:8e:73:93:2d:0a:c5:49:5c:88:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 17 08:11:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=baada2fa9a5fa21fcb160d9141d31979d50b305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:1f:10:ac:cb:ec:d0:4d:97:25:e4:24:02:
33:67:4c:5d:ce:9f:25:79:6d:7d:78:f9:37:c6:62:
fd:74:96:f1:ca:0d:84:3f:bd:fd:a8:8f:dd:71:2c:
2b:70:e8:4e:2a:a3:02:cc:04:ca:9f:bd:24:57:9e:
b7:7b:65:3e:43:b9:13:3c:54:3e:d8:61:c7:a0:6d:
e0:0f:fc:0d:d3:2d:64:f2:6c:3f:bf:19:6d:74:da:
d8:92:19:62:88:67:b8:f7:67:7e:51:5b:96:ba:a8:
ad:a2:75:c2:0c:07:49:f6:a7:7d:c8:ca:34:32:43:
34:26:ee:7c:4d:28:23:0f:e5:b0:49:ee:92:20:f9:
84:e0:1d:5e:d4:42:e8:c8:59:51:f1:20:1f:e5:f7:
a7:2b:cb:54:b5:80:b9:1f:9d:36:b7:d4:37:ea:1e:
4b:41:61:c5:59:5a:2d:c6:69:eb:11:75:ee:61:08:
cd:19:5f:70:64:32:47:f4:2e:15:2e:29:c2:85:36:
b9:7c:c1:01:b4:cc:80:10:63:60:02:d2:ab:f8:e1:
44:ad:e8:c3:2c:4e:37:75:62:f3:76:1c:4a:dc:ed:
ac:6c:f4:ab:32:bc:2d:95:89:7d:28:5b:16:38:fc:
88:6c:1a:b7:37:3a:79:d3:9b:25:32:5a:2f:55:1e:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:A2:FA:9A:5F:A2:1F:CB:16:0D:91:41:D3:19:79:D5:0B:30:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/uq2i-ppfoh_LFg2RQdMZedULMFw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.13.0/24
Signature Algorithm: sha256WithRSAEncryption
20:00:a9:a8:26:3d:49:cf:08:ed:6b:a2:a5:86:a4:4a:5c:47:
ae:03:9c:d7:16:51:1a:33:a5:c7:d9:cb:93:88:e2:2a:ee:dd:
f7:8a:38:04:61:1a:2a:db:0d:70:e4:b7:35:3e:2f:a1:76:3e:
17:86:28:9a:5d:df:23:31:84:7d:a0:69:70:7f:cd:c7:7b:13:
bd:f8:bb:79:a7:c5:35:af:08:18:f2:b6:9f:eb:5c:6e:79:c7:
3f:07:60:fc:64:1f:ed:1c:ce:65:bf:3c:ad:66:2a:3f:c6:d9:
76:b4:6d:85:a1:49:59:77:a6:fd:a5:a0:f3:e0:ed:c7:d0:67:
bd:f4:52:08:f0:e3:6c:23:42:59:dc:47:79:51:2b:df:88:9e:
5d:39:95:9e:e3:35:a4:be:fa:e8:45:93:5f:0d:06:98:9c:4f:
27:5b:e9:5c:91:3a:f8:ee:bc:24:3b:82:c3:f9:84:2a:1b:85:
7e:c0:66:ce:82:c7:62:57:0a:f9:3c:1f:6c:2a:55:82:ad:ad:
d6:4a:ba:56:6c:ee:bd:7b:24:00:67:d5:8c:fa:d1:a4:22:ca:
93:97:18:fa:31:05:1b:ae:a3:d9:49:b0:3b:31:05:d0:3f:67:
91:b8:2f:47:c2:e1:2d:5f:40:05:27:88:ad:3a:df:85:78:3a:
4f:75:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:33 2023 by rpki-client on console.sobornost.net