Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O4IrIM6jkejJHnSAhJa7UM_Il74.cer
File: O4IrIM6jkejJHnSAhJa7UM_Il74.cer (raw, json)
Hash identifier: Jm1MZw55KYKHlYqPz1AGX77iB8RhD9lC5ubZVNlSvlw=
Subject key identifier: 3B:82:2B:20:CE:A3:91:E8:C9:1E:74:80:84:96:BB:50:CF:C8:97:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1A84F9C7B61F07454B2D8A195C6AA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/O4IrIM6jkejJHnSAhJa7UM_Il74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.139.24.0/22
IP: 2a0e:b340::/29
Validation: Failed, certificate revoked on Thu 07 Dec 2023 09:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:84:f9:c7:b6:1f:07:45:4b:2d:8a:19:5c:6a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b822b20cea391e8c91e74808496bb50cfc897be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:5a:9a:8a:c6:ab:0e:ec:c8:a0:d0:83:95:
06:4c:00:e7:88:57:04:08:de:96:32:7e:7c:a2:fe:
f9:1c:1c:96:d7:ec:f1:9f:62:73:77:7f:6a:c0:ab:
dc:c9:1f:71:b9:db:75:b3:9f:38:43:fc:0d:c1:47:
e0:9a:66:85:cd:89:4d:31:f6:50:64:87:15:d5:c9:
55:48:4a:e2:0f:9d:24:83:e4:a4:85:b6:87:1d:9c:
4b:00:e9:94:9e:b6:f4:d6:84:75:a7:5f:50:1c:0c:
e3:ff:09:c4:b8:f4:78:cb:03:e4:14:8c:8e:a7:0f:
8b:01:61:97:6b:8e:dd:5f:98:ee:03:97:43:7f:47:
3b:29:9c:cc:19:aa:71:5b:55:18:09:55:95:15:b3:
39:66:c6:50:67:8a:f9:60:e8:65:ea:6f:18:d0:a5:
c6:73:60:39:97:58:d1:9d:00:51:a7:03:8c:72:f3:
35:11:d0:2b:45:54:dd:77:9b:43:df:9e:c8:b1:88:
1e:06:ab:46:24:4a:31:cc:d3:94:0f:48:08:3c:87:
20:8f:c6:3e:08:fe:1b:2d:e4:5e:23:6a:94:49:93:
ca:2b:51:a4:bf:fa:0a:5b:29:f4:91:8a:f0:69:28:
43:2c:94:a2:a3:bd:23:6c:ee:f7:78:43:65:ce:ea:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:82:2B:20:CE:A3:91:E8:C9:1E:74:80:84:96:BB:50:CF:C8:97:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d78506-02d3-4ba5-bb94-a536f9b977ec/1/O4IrIM6jkejJHnSAhJa7UM_Il74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.24.0/22
IPv6:
2a0e:b340::/29
Signature Algorithm: sha256WithRSAEncryption
41:9a:fa:39:a2:93:0c:71:ff:25:40:14:03:54:06:5c:ff:f0:
62:a7:56:c8:9d:70:db:07:41:81:f2:42:1b:d2:85:63:1e:8e:
c2:60:d5:6c:42:74:e7:f0:92:05:e8:0c:d7:8f:dd:01:9c:83:
0f:75:b0:52:73:18:2d:43:31:38:02:ba:16:5d:8d:cc:04:f4:
cc:09:45:c4:91:29:00:d9:d0:05:dd:da:58:73:98:48:42:30:
3a:96:46:30:53:a4:67:8f:40:9e:13:52:84:0e:74:84:81:9e:
78:01:31:17:e8:4a:5f:1f:08:20:57:8d:6e:b3:df:f7:af:d3:
99:d9:77:00:ba:77:65:83:9e:6f:09:ee:ca:b8:2e:1c:9b:26:
c9:fc:88:73:41:7f:c2:b8:48:7a:0b:98:d1:10:e7:35:80:6b:
35:cd:72:f1:0c:e0:f3:4a:68:c6:09:32:62:90:8a:15:fb:de:
d5:43:88:56:12:b5:0a:2a:07:ee:3b:bb:fb:9a:cd:29:85:f8:
81:24:da:01:fc:00:9c:1d:59:0f:e5:79:e0:50:ed:95:f5:25:
d2:d0:ad:e4:6e:29:d6:c3:d9:47:c0:64:f8:c3:cf:24:8c:98:
ab:8d:1e:e4:57:07:a6:bc:0b:4b:a9:16:7e:f8:df:2b:d8:d3:
f4:8e:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:29 2024 by rpki-client on console-ams.rpki-client.org