Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7OX-q4k9Umgc5Tld4I-Qgw08Mis.cer
File: 7OX-q4k9Umgc5Tld4I-Qgw08Mis.cer (raw, json)
Hash identifier: qDTqPrHA65qwdRN/3LhFhJdB+lv0XBg+4sou1FBsavU=
Subject key identifier: EC:E5:FE:AB:89:3D:52:68:1C:E5:39:5D:E0:8F:90:83:0D:3C:32:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC649A64AE02E45DDCE842F336CF99D37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:29:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.216.112.0/24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:a6:4a:e0:2e:45:dd:ce:84:2f:33:6c:f9:9d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ece5feab893d52681ce5395de08f90830d3c322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:02:6f:3d:a0:6e:ba:7e:9f:c1:1c:55:a7:
89:7f:88:f4:2c:fa:56:38:98:83:8d:32:73:3f:dd:
e2:91:c5:88:91:6b:99:a4:af:b1:b4:6d:0e:c1:3d:
22:e0:10:e1:c5:af:d1:ab:06:d8:a9:c1:41:d2:91:
ff:2e:3c:4b:3c:01:5a:bc:b9:a7:1a:40:49:82:4b:
6b:61:1b:ba:ea:43:de:91:07:b4:b0:3e:dd:24:5a:
6f:b9:0c:56:8c:96:c3:2d:9f:77:75:98:ed:ab:eb:
ae:03:07:a8:e0:ec:6b:ef:5e:1d:04:5a:45:32:2c:
3c:32:01:a8:b3:c1:b2:bd:90:00:00:6b:02:d0:13:
6b:22:d9:7a:f6:48:4d:41:8a:dc:c9:f8:9f:15:0a:
3e:b5:c0:f5:34:7f:30:13:1c:d0:20:a8:b3:72:ae:
8d:7d:1d:6a:bb:e9:ac:2c:1a:99:7c:29:18:aa:6e:
33:fd:e8:f0:51:b4:3d:ad:ee:c3:f1:a2:2f:54:88:
c4:e0:d9:5e:2f:88:01:89:ed:93:49:6a:9e:45:38:
e2:48:83:dc:be:15:3c:2a:dc:fe:4f:50:e8:66:f8:
52:e3:42:c1:34:ae:47:33:47:f1:80:17:40:6d:f8:
e3:a7:ff:a1:11:c7:fb:64:39:a8:4a:36:7f:f6:43:
28:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E5:FE:AB:89:3D:52:68:1C:E5:39:5D:E0:8F:90:83:0D:3C:32:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/921462-9679-4aec-8ff9-88821e193cdc/1/7OX-q4k9Umgc5Tld4I-Qgw08Mis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3b:46:3e:1b:ab:db:76:cc:6a:7b:68:61:24:af:f5:ee:ed:
db:d0:45:83:fc:ea:78:5c:98:87:14:f6:c4:f1:b6:50:9c:48:
3b:d5:d7:16:f0:b0:e7:b6:0b:20:30:1b:fd:44:5a:02:5c:85:
3e:3e:23:8a:4a:eb:d3:db:35:2f:2d:c1:f6:a6:e9:dd:58:63:
ac:58:80:b8:9a:e2:a2:5c:f2:d0:54:27:07:5a:14:28:80:98:
70:06:14:68:9e:25:42:c3:cb:75:e4:5b:d2:4d:fe:47:81:be:
f2:eb:1b:dc:4e:bc:93:b9:66:7e:f7:a5:c0:08:cd:c9:c4:88:
c3:a5:d3:0f:51:aa:d8:f3:f1:f1:4c:6e:ad:0f:09:92:c5:1d:
e0:f0:f3:54:85:eb:48:70:d0:84:37:d5:3e:cd:29:5d:29:fa:
ae:9f:75:ff:7b:9c:c7:27:e2:b4:d9:4b:70:a0:8e:f2:7c:0a:
74:dc:f4:2b:b6:fc:fc:b1:ce:53:ff:38:83:1d:fd:f1:98:b8:
3b:43:2c:dc:a6:d9:63:3d:1b:10:8c:bc:7f:3a:38:81:03:42:
66:8f:fb:13:1b:b1:fc:77:c2:67:d9:d8:35:b8:5d:58:75:15:
f1:0c:cb:19:bf:ba:d5:b5:de:56:e4:eb:80:ed:3a:7f:be:44:
05:42:7f:c5
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYzGSaZK4C5F3c6ELzNs+Z03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2U1ZmVhYjg5M2Q1MjY4MWNlNTM5NWRlMDhmOTA4MzBkM2MzMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGUCbz2gbrp+n8EcVaeJf4j0LPpW
OJiDjTJzP93ikcWIkWuZpK+xtG0OwT0i4BDhxa/RqwbYqcFB0pH/LjxLPAFavLmn
GkBJgktrYRu66kPekQe0sD7dJFpvuQxWjJbDLZ93dZjtq+uuAweo4Oxr714dBFpF
Miw8MgGos8GyvZAAAGsC0BNrItl69khNQYrcyfifFQo+tcD1NH8wExzQIKizcq6N
fR1qu+msLBqZfCkYqm4z/ejwUbQ9re7D8aIvVIjE4NleL4gBie2TSWqeRTjiSIPc
vhU8Ktz+T1DoZvhS40LBNK5HM0fxgBdAbfjjp/+hEcf7ZDmoSjZ/9kMoQQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOzl/quJPVJoHOU5XeCPkIMNPDIrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzkyMTQ2
Mi05Njc5LTRhZWMtOGZmOS04ODgyMWUxOTNjZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvOTIxNDYy
LTk2NzktNGFlYy04ZmY5LTg4ODIxZTE5M2NkYy8xLzdPWC1xNGs5VW1nYzVUbGQ0
SS1RZ3cwOE1pcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9hwMA0GCSqGSIb3DQEBCwUAA4IBAQBOO0Y+
G6vbdsxqe2hhJK/17u3b0EWD/Op4XJiHFPbE8bZQnEg71dcW8LDntgsgMBv9RFoC
XIU+PiOKSuvT2zUvLcH2pundWGOsWIC4muKiXPLQVCcHWhQogJhwBhRoniVCw8t1
5FvSTf5Hgb7y6xvcTryTuWZ+96XACM3JxIjDpdMPUarY8/HxTG6tDwmSxR3g8PNU
hetIcNCEN9U+zSldKfqun3X/e5zHJ+K02UtwoI7yfAp03PQrtvz8sc5T/ziDHf3x
mLg7QyzcptljPRsQjLx/OjiBA0Jmj/sTG7H8d8Jn2dg1uF1YdRXxDMsZv7rVtd5W
5OuA7Tp/vkQFQn/F
-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:09 2024 by rpki-client on console-fra.rpki-client.org