Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OHXfslYk3yvO_XsuPhIXoFrSZAU.cer
File: OHXfslYk3yvO_XsuPhIXoFrSZAU.cer (raw, json)
Hash identifier: Kf9wo7+7e5AoHMJ0PxIRsTAqOHT9YKzrals+brCUD2Q=
Subject key identifier: 38:75:DF:B2:56:24:DF:2B:CE:FD:7B:2E:3E:12:17:A0:5A:D2:64:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CACBAC1CC124EF2CF85CE2B9EDA9BCB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/8f2f65-7ac9-400a-b64c-e2f22d91624f/1/OHXfslYk3yvO_XsuPhIXoFrSZAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/8f2f65-7ac9-400a-b64c-e2f22d91624f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 141.98.36.0/22
IP: 2a06:d840::/29
Validation: Failed, certificate revoked on Thu 20 Jul 2023 09:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ac:ba:c1:cc:12:4e:f2:cf:85:ce:2b:9e:da:9b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3875dfb25624df2bcefd7b2e3e1217a05ad26405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e7:ce:93:eb:6d:ef:a3:e7:33:ff:ee:81:23:
87:0f:b4:16:9a:47:df:48:6e:12:55:aa:d5:a4:11:
29:7d:79:32:54:a8:e0:fa:63:30:49:8f:9e:73:4e:
fa:d7:c0:33:be:3d:ad:48:2a:45:59:55:66:d2:21:
5e:98:c5:58:b5:17:4d:85:1f:5b:54:54:7c:a3:a6:
39:1e:cb:34:2c:7e:24:b2:36:ab:48:df:f6:30:0d:
cd:97:ca:0a:ee:81:68:d3:b3:2a:f1:03:97:e2:72:
9c:0e:d4:59:37:96:ef:f1:8c:8d:af:a7:94:47:88:
93:36:e5:6b:dd:ef:23:53:ad:37:d0:ad:ad:d0:be:
dc:cf:b0:db:e6:84:73:76:ba:f7:e9:b1:20:6e:e1:
1a:51:2e:70:32:78:19:50:d3:1c:19:cf:79:1e:60:
e4:43:65:92:8d:85:1f:f0:a7:51:e6:89:d0:2b:e2:
80:97:55:4b:b4:0b:7c:09:5b:34:09:6f:11:fc:77:
b6:f5:75:c4:c5:69:db:3d:9d:4d:1a:4d:8b:82:63:
68:94:4e:0a:51:81:0b:f3:6f:fa:1f:26:7e:b3:f2:
64:c7:d1:67:31:f4:b6:41:6e:70:7d:a1:2e:a2:e3:
f3:3e:59:9c:e9:91:ab:a7:4f:c1:6a:d9:77:63:2d:
fd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:75:DF:B2:56:24:DF:2B:CE:FD:7B:2E:3E:12:17:A0:5A:D2:64:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/8f2f65-7ac9-400a-b64c-e2f22d91624f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/8f2f65-7ac9-400a-b64c-e2f22d91624f/1/OHXfslYk3yvO_XsuPhIXoFrSZAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.36.0/22
IPv6:
2a06:d840::/29
Signature Algorithm: sha256WithRSAEncryption
69:f7:91:bb:17:dd:30:47:8d:b5:38:15:01:e3:67:3d:6b:ae:
32:d1:c1:f9:72:c8:67:60:1d:45:cd:07:96:c9:ce:0c:d6:bd:
7b:7a:ee:9b:42:6f:57:ec:2a:7c:04:00:cf:9d:5f:9b:6a:81:
a8:31:19:30:87:b7:56:32:b7:28:48:ac:bc:da:0a:00:9d:bb:
30:3d:37:d9:82:e4:0b:05:94:ca:26:c9:7f:94:c3:71:e1:66:
24:51:aa:c1:56:ae:d3:08:64:60:50:15:c6:42:7c:b0:8e:e6:
6c:72:a2:aa:e9:1f:de:70:c0:91:fb:5c:65:95:f3:f6:39:58:
e4:a5:bb:c3:7e:03:11:e3:8e:26:af:57:c5:64:87:5e:05:76:
6d:4d:5b:17:d0:42:ca:11:0e:16:3d:3c:89:3f:c5:6c:60:0b:
4e:71:e4:85:0e:55:12:b1:4f:d9:d7:e1:fa:fd:92:ad:2a:b5:
7d:80:9b:96:1c:6e:0a:e1:be:73:d6:41:7d:ec:44:d5:0a:6f:
ed:43:a8:75:50:05:a2:dc:bd:98:53:de:f2:57:33:ec:af:81:
8e:34:1e:c0:6a:82:6b:9c:bc:e2:0f:d2:fb:82:a1:9c:f6:68:
76:a6:98:d9:66:c3:d9:1f:41:64:2a:87:74:4e:23:90:66:cf:
03:5e:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:45 2024 by rpki-client on console-fra.rpki-client.org