Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OCszlXQLKewb6iWAi2ds6bo92Aw.cer
File: OCszlXQLKewb6iWAi2ds6bo92Aw.cer (raw, json)
Hash identifier: jRouEdie0hPxTDiRA6oHMPwjcAeEB0BodR1+bpKFpOg=
Subject key identifier: 38:2B:33:95:74:0B:29:EC:1B:EA:25:80:8B:67:6C:E9:BA:3D:D8:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01884E9255180837A53D4B170E3AA9D11893
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 May 2023 16:23:12 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.119.141.0/24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 12:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:92:55:18:08:37:a5:3d:4b:17:0e:3a:a9:d1:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 24 16:23:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=382b3395740b29ec1bea25808b676ce9ba3dd80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:91:95:d8:a1:a6:95:a0:f0:55:84:82:8e:
f8:90:8f:95:64:64:82:3f:d1:0d:b7:80:19:a5:9a:
ef:f8:bf:45:f7:5e:b4:54:ac:f6:db:d0:af:ee:94:
da:2e:0b:ed:39:5d:7a:25:7a:58:97:fe:5d:ae:cd:
b8:ca:ea:c1:80:b6:66:11:cb:0d:65:11:db:69:11:
5e:f5:7a:7c:1a:ca:a2:71:d1:d4:99:ca:e8:9c:5c:
61:2c:e3:ec:69:9d:fd:53:ec:ab:dc:35:e2:9a:2a:
2b:b4:06:b6:7a:c2:67:41:66:c3:45:35:83:32:f3:
27:c1:1a:83:9e:cd:db:cc:44:d0:77:50:cb:40:76:
dd:67:ba:c5:5b:85:7d:fc:cc:1b:f4:36:7d:8f:05:
7d:66:ce:16:96:72:67:bf:50:48:56:a0:fe:16:90:
c8:c7:b3:6d:b4:15:12:ef:a9:72:55:e4:49:af:52:
50:a7:29:fd:6b:b8:62:1f:1f:25:4a:8f:48:5d:cc:
3e:aa:4c:e9:63:1a:35:ff:63:36:b1:d5:f4:39:c9:
a7:61:5b:56:f8:52:59:d1:94:d3:6a:34:bf:86:2d:
99:f5:45:50:97:44:7f:b9:31:af:85:cd:78:61:9d:
ba:16:76:74:ec:aa:4f:58:2d:d9:cd:fa:19:1b:1e:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2B:33:95:74:0B:29:EC:1B:EA:25:80:8B:67:6C:E9:BA:3D:D8:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.141.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:02:32:38:ff:5e:dc:29:9c:3b:fa:03:ee:8d:39:4f:02:3f:
ac:c5:0a:29:57:5f:e7:08:24:b4:2a:01:75:6f:0c:78:04:a3:
cc:ff:ff:84:e9:9b:ac:60:e0:77:d4:4f:af:d1:24:b5:48:e3:
99:ff:21:17:10:f7:71:51:a0:51:7e:19:49:b4:6c:3b:e4:2e:
83:89:ef:e9:ff:01:6d:ef:a1:7a:11:18:b6:f8:d9:6f:27:ae:
5f:70:37:4b:9f:03:53:97:05:50:a1:ff:8e:34:f8:6d:42:58:
98:3b:76:55:34:07:c9:78:b8:58:de:3f:45:49:ec:94:39:32:
48:0d:1b:e1:91:5a:e2:4a:27:52:fd:ac:6e:46:91:74:bb:3b:
c5:2c:82:a9:d7:c2:70:16:07:18:7c:87:5a:94:d6:66:53:29:
72:36:41:63:20:19:29:9a:da:37:b7:5f:04:9b:ae:23:1e:96:
13:79:d3:ab:06:e2:39:60:2f:93:c3:b0:06:94:5e:43:95:4e:
c5:11:84:ab:08:22:c9:90:a5:93:b5:ee:86:18:84:f3:28:f8:
b3:fe:99:a3:f6:58:b1:60:0c:82:d9:67:ba:5f:37:c6:be:2e:
0a:49:33:5f:84:7e:46:c9:10:16:a2:55:0f:b1:f7:e2:21:fd:
1d:c2:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:45 2024 by rpki-client on console-fra.rpki-client.org