Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
File: OGLm3g4x6NKKk3wBK2AohayTXRU.cer (raw, json)
Hash identifier: oDE/hJdu3fTzwRom1Jfl9MaRcAjfq6NVeLrs6Ybft/k=
Subject key identifier: 38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3491BE8A69553C15CF374E24C037C53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:57 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29608
IP: 37.60.152.0/21
IP: 79.143.240.0/20
IP: 185.170.80.0/22
IP: 193.30.224.0/22
IP: 2a01:678::/29
Validation: Failed, certificate revoked on Thu 01 Feb 2024 09:45:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1b:e8:a6:95:53:c1:5c:f3:74:e2:4c:03:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3862e6de0e31e8d28a937c012b602885ac935d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:29:67:2a:bf:12:ac:e0:16:19:a4:83:92:
01:37:0a:27:f7:74:3c:fb:42:bf:37:4f:48:3e:de:
a5:f8:34:94:03:b8:a2:0d:65:19:ad:5c:50:e6:2f:
4d:71:31:3c:1a:3c:de:6e:af:1e:e3:03:74:88:59:
73:df:87:98:aa:cb:7e:00:d8:6b:dd:9e:e9:91:5e:
fb:69:8a:5d:fa:6c:ad:db:d9:77:2f:f8:91:f0:d3:
85:4c:94:78:11:ff:52:97:22:34:03:04:f1:68:da:
37:58:6a:e6:73:c7:a8:4f:d3:23:b9:c4:fd:57:01:
3a:e1:19:76:22:ff:14:e0:93:2e:4e:62:65:68:3f:
d0:5a:81:da:4f:54:16:06:90:0e:c4:3f:e6:51:3d:
14:c6:00:1c:37:3e:5d:b0:f5:f4:58:e8:b4:98:e6:
b4:85:10:f2:bc:db:93:83:ea:14:83:78:de:d8:98:
f1:d0:4a:10:81:3c:73:c4:91:fd:44:21:dd:93:e8:
05:17:7a:16:69:5c:50:8b:6b:be:b4:17:43:e3:fe:
ee:74:f7:36:bf:6b:03:84:76:e6:86:d3:ea:2b:d0:
4e:ce:52:ca:fb:a2:90:9a:9e:98:15:1a:89:0f:e0:
6f:f7:ee:33:01:b3:04:2d:4b:32:7f:5c:f5:4f:16:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.152.0/21
79.143.240.0/20
185.170.80.0/22
193.30.224.0/22
IPv6:
2a01:678::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29608
Signature Algorithm: sha256WithRSAEncryption
59:fb:90:84:4e:75:aa:5c:b7:ee:6b:40:62:4e:14:d7:b3:19:
4a:74:c8:f2:75:b9:f5:83:36:18:16:a9:be:b0:3b:21:5e:97:
13:91:49:62:84:46:63:63:10:9e:74:67:3a:1c:02:e6:c9:67:
71:1e:6c:27:af:70:3e:64:92:b1:b1:9a:1f:ba:36:d6:89:28:
4d:5a:02:a7:7c:14:6c:a5:27:b2:37:5a:e8:76:eb:a4:fc:8c:
fc:8b:61:6f:03:7c:58:59:78:f2:14:23:79:67:75:58:ee:ae:
2d:d6:26:2b:7c:0d:dd:7c:9e:79:84:57:aa:1f:53:35:40:e4:
b7:e3:6a:23:89:a6:58:b4:9b:0e:60:bb:c9:0b:32:93:43:60:
b1:7f:b7:c0:5f:0a:54:3b:70:cf:4d:8f:96:03:9a:7e:da:27:
63:25:1d:a3:87:53:81:88:41:f6:f6:df:b3:e4:69:a3:f1:5e:
32:92:e9:d8:a5:38:3f:1d:fa:b2:38:18:60:82:35:46:fd:e2:
b0:e3:c8:40:49:e7:7c:96:00:44:e8:b4:4b:03:e7:e3:2f:4e:
30:aa:19:36:3f:b5:3e:37:54:40:68:0b:57:6e:16:ff:5b:3b:
c6:63:42:7e:6c:17:28:50:7d:63:f2:87:74:65:d3:47:55:cf:
c2:46:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:32 2024 by rpki-client on console-ams.rpki-client.org