Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G_OLbRICPvhwCpEC-UraM2HnPgM.cer
File: G_OLbRICPvhwCpEC-UraM2HnPgM.cer (raw, json)
Hash identifier: Q8K5tvP1/TV4pv5bwKOKFqU+3Frw9JGGFISc5HWnXnU=
Subject key identifier: 1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187FB1208D51F540877712158AB3A85A8BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/G_OLbRICPvhwCpEC-UraM2HnPgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 08 May 2023 11:14:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.0.3.0/24
IP: 2001:7f8:138::/48
Validation: Failed, certificate revoked on Tue 09 May 2023 08:59:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:12:08:d5:1f:54:08:77:71:21:58:ab:3a:85:a8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 11:14:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bf38b6d12023ef8700a9102f94ada3361e73e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:b0:0d:c1:f5:40:31:c2:5b:5b:4b:3f:b9:
3e:3a:4c:50:ca:fc:56:31:f3:8c:e8:36:5f:52:49:
ae:b3:e0:72:c1:6d:c3:ed:6e:c8:5f:ab:78:d7:09:
c2:ad:43:93:eb:47:4e:f7:05:67:74:39:23:36:f8:
c8:54:ba:f1:e6:72:1f:ed:bf:e3:99:99:1e:77:df:
1a:90:5f:11:86:28:ba:89:59:4d:e0:47:17:0b:97:
3a:26:7d:2c:a8:8c:a0:e5:ce:84:89:33:99:60:cf:
40:8b:bb:e6:28:7a:3a:f7:e0:de:38:18:00:9d:4b:
af:be:da:84:03:5b:34:9e:35:08:11:3d:f9:68:b3:
fb:bf:f4:7e:92:8c:2d:10:b8:f8:06:64:dc:05:d4:
14:7b:c3:1a:8b:4d:48:90:6b:d7:9f:e1:8f:ee:4a:
08:30:c7:de:f9:97:54:8b:37:34:9e:f0:f4:34:db:
95:a4:f1:75:e6:f7:08:da:ea:44:44:43:f2:12:e7:
a3:84:a0:ea:db:2d:4d:2d:1d:fa:dd:d2:08:73:5a:
3f:aa:0d:0f:05:fb:96:3c:d5:7b:3b:e4:98:0e:81:
57:61:f5:3d:2a:35:83:ca:cf:14:5a:7f:6f:d3:61:
3b:c8:89:64:fd:4f:17:a6:4a:71:a4:2d:8a:6a:50:
03:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:8B:6D:12:02:3E:F8:70:0A:91:02:F9:4A:DA:33:61:E7:3E:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/919d75-885e-4be4-9d8f-d285ca9cbe16/1/G_OLbRICPvhwCpEC-UraM2HnPgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.3.0/24
IPv6:
2001:7f8:138::/48
Signature Algorithm: sha256WithRSAEncryption
06:cd:50:75:cb:10:3f:ab:70:54:cf:8d:18:64:b5:10:b5:5c:
4b:72:6d:1b:0e:f1:f2:c2:fc:91:12:b0:9e:cd:58:07:fe:44:
22:dd:cd:8b:b2:bb:a8:96:be:72:51:00:53:ec:76:5f:c1:a0:
63:bc:fc:38:f4:48:52:45:74:f4:56:8c:3f:74:36:b0:a4:70:
b5:2b:01:71:d8:39:21:ef:95:0c:67:11:77:77:5e:35:6d:f9:
a2:85:b8:f5:04:e4:88:bc:3f:2d:dc:42:7d:1d:31:50:44:24:
1b:e9:4b:db:e9:2c:6f:e7:53:3f:94:0b:64:b0:48:44:ed:a2:
e7:8c:36:06:9d:8a:73:93:f1:c5:68:23:04:8f:69:98:e5:a0:
25:64:eb:47:0c:ba:d8:bc:68:c9:88:17:04:88:04:79:a2:fb:
f8:01:67:3f:b9:7d:8c:92:ac:f5:25:91:62:ce:70:6e:c2:27:
38:ca:a0:61:e5:c0:99:4f:f7:fc:f7:c0:01:2f:a0:58:6f:3d:
d1:46:3f:87:ba:19:f3:c7:ba:19:8f:bc:57:40:a7:63:83:71:
9d:d1:ac:17:3b:ff:f9:e3:26:2f:78:fd:72:c6:bf:84:c4:ee:
3d:75:36:26:3a:43:8f:32:c6:cf:cb:f3:e4:34:79:f4:54:2f:
02:a5:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:53 2024 by rpki-client on console-fra.rpki-client.org