Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D8oMitEt3CBbFaieRTA7LWPwRYg.cer
File: D8oMitEt3CBbFaieRTA7LWPwRYg.cer (raw, json)
Hash identifier: 2BMobsf42z7FfTfqgoyJtC196yGyVM6MA4HGS+6UTfo=
Subject key identifier: 0F:CA:0C:8A:D1:2D:DC:20:5B:15:A8:9E:45:30:3B:2D:63:F0:45:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B08A4115E7E9F663F9AA6DA2D4D342D7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 07 Oct 2023 05:37:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 15386
IP: 193.26.3.0/24
Validation: Failed, certificate revoked on Mon 09 Oct 2023 13:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:08:a4:11:5e:7e:9f:66:3f:9a:a6:da:2d:4d:34:2d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 7 05:37:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fca0c8ad12ddc205b15a89e45303b2d63f04588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:9b:9d:61:18:38:4e:e1:19:98:87:59:be:
c5:d3:ec:a8:d4:6f:b3:f5:8c:f1:a4:62:7d:af:76:
b1:64:da:18:c0:0c:78:dd:27:82:52:7d:5b:c1:39:
51:13:75:c8:b5:d3:3e:f2:66:7f:5e:54:e0:8c:a2:
b5:72:07:17:8e:2e:53:7f:24:7c:c3:d3:5a:0f:96:
f6:18:88:35:59:26:ab:27:f4:39:1b:50:a7:82:c5:
98:e3:47:a8:0a:af:ea:d7:6f:3d:65:92:0c:f8:fc:
da:19:f1:e9:81:d9:2a:12:ac:d6:e3:bd:b2:61:eb:
13:c4:11:a1:41:48:da:e2:f3:c8:e9:e1:84:c1:d8:
ed:f1:b3:ea:7c:7a:63:b9:bd:bf:ba:ac:02:47:bf:
01:39:05:6b:c3:19:78:dc:04:06:56:99:5d:be:1d:
a0:14:fb:37:2f:8a:c6:eb:12:a5:55:fb:5e:fb:66:
30:f2:9b:57:8a:61:5a:03:09:44:7c:74:56:37:aa:
48:20:25:91:44:12:f3:aa:b5:ed:92:2e:a3:21:33:
fc:0f:0b:0c:c1:85:89:d4:b7:a4:02:4e:22:52:c5:
3d:f9:b9:ed:32:49:ff:7b:bd:af:a4:11:f1:15:39:
99:86:6d:42:7a:41:72:c2:7e:91:de:45:56:6c:9f:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CA:0C:8A:D1:2D:DC:20:5B:15:A8:9E:45:30:3B:2D:63:F0:45:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d217d2-571e-4467-a225-6f9179ea997e/1/D8oMitEt3CBbFaieRTA7LWPwRYg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.3.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15386
Signature Algorithm: sha256WithRSAEncryption
3d:80:9a:c1:22:a8:b4:19:df:02:c5:79:5c:8b:33:8f:fb:9b:
8b:23:97:0d:43:49:6a:d1:5c:d5:07:cd:f3:cf:21:c9:82:c1:
78:d3:f5:43:5b:4e:ba:7a:78:13:41:a3:1e:34:73:f5:06:42:
5a:de:e1:aa:ea:22:c3:b6:9b:10:54:a0:b4:3f:c1:30:31:19:
90:0f:b8:da:3a:7d:f4:4c:2b:e4:30:80:37:5a:40:11:18:e5:
a6:b6:12:02:ae:4b:4f:3b:b4:e9:e2:42:3b:36:79:1b:a0:ce:
94:01:35:9e:7d:75:65:93:e6:e3:c6:8c:cd:13:7c:a7:e6:9a:
c8:a2:ff:28:9e:9f:5b:ac:cc:ea:38:ac:2b:c8:dc:f0:ea:f2:
78:6a:2a:04:b8:17:ca:ff:70:ae:f5:0d:5e:63:94:1f:d6:7e:
6b:fb:df:28:04:7d:5d:73:c9:a1:49:39:54:32:9d:53:73:53:
fd:7a:25:ec:1c:4b:79:de:84:e6:72:58:9e:b6:c6:fa:d1:48:
fa:1e:5b:33:e8:a5:28:2f:82:2c:f1:64:96:ec:dc:ee:f0:b9:
dc:77:55:fd:69:e9:d7:58:a1:31:b2:eb:29:b4:0c:80:c6:ff:
83:28:ba:e6:4b:6f:76:fa:af:0d:14:9a:88:24:11:d4:da:79:
29:47:dc:ff
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYsIpBFefp9mP5qm2i1NNC1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDA3MDUzNzMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmNhMGM4YWQxMmRkYzIwNWIxNWE4OWU0NTMwM2IyZDYzZjA0NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf+bnWEYOE7hGZiHWb7F0+yo1G+z
9YzxpGJ9r3axZNoYwAx43SeCUn1bwTlRE3XItdM+8mZ/XlTgjKK1cgcXji5TfyR8
w9NaD5b2GIg1WSarJ/Q5G1CngsWY40eoCq/q1289ZZIM+PzaGfHpgdkqEqzW472y
YesTxBGhQUja4vPI6eGEwdjt8bPqfHpjub2/uqwCR78BOQVrwxl43AQGVpldvh2g
FPs3L4rG6xKlVfte+2Yw8ptXimFaAwlEfHRWN6pIICWRRBLzqrXtki6jITP8DwsM
wYWJ1LekAk4iUsU9+bntMkn/e72vpBHxFTmZhm1CekFywn6R3kVWbJ8cUQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFA/KDIrRLdwgWxWonkUwOy1j8EWIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2QyMTdk
Mi01NzFlLTQ0NjctYTIyNS02ZjkxNzllYTk5N2UvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvZDIxN2Qy
LTU3MWUtNDQ2Ny1hMjI1LTZmOTE3OWVhOTk3ZS8xL0Q4b01pdEV0M0NCYkZhaWVS
VEE3TFdQd1JZZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwRoDMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AjwaMA0GCSqGSIb3DQEBCwUAA4IBAQA9gJrBIqi0Gd8CxXlcizOP+5uLI5cNQ0lq
0VzVB83zzyHJgsF40/VDW066engTQaMeNHP1BkJa3uGq6iLDtpsQVKC0P8EwMRmQ
D7jaOn30TCvkMIA3WkARGOWmthICrktPO7Tp4kI7NnkboM6UATWefXVlk+bjxozN
E3yn5prIov8onp9brMzqOKwryNzw6vJ4aioEuBfK/3Cu9Q1eY5Qf1n5r+98oBH1d
c8mhSTlUMp1Tc1P9eiXsHEt53oTmclietsb60Uj6Hlsz6KUoL4Is8WSW7Nzu8Lnc
d1X9aenXWKExsusptAyAxv+DKLrmS292+q8NFJqIJBHU2nkpR9z/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:27:51 2024 by rpki-client on console-ams.rpki-client.org