Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
File: OIPJVHClukqHxQW2g7gWV2Nx48g.cer (raw, json)
Hash identifier: Fzcviump0b2701TRCkqMdHMBDS13Bo/FqkuYsIr7ns4=
Subject key identifier: 38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3F60DB57C7CCA6B2FCB3F4BA67A1E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:32:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.100.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3f:60:db:57:c7:cc:a6:b2:fc:b3:f4:ba:67:a1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3883c95470a5ba4a87c505b683b816576371e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:5f:c6:12:71:6a:67:ec:2d:6d:0c:8a:8a:
52:a1:a5:8b:83:b0:1d:a9:3a:27:2c:44:dd:53:5c:
c0:f0:12:65:3e:5f:86:78:72:35:48:94:4f:42:b6:
31:2d:6f:87:ae:d2:7f:03:0f:d5:06:3c:53:a4:40:
bf:54:4e:0f:95:da:c3:2e:23:73:e5:ab:b3:cf:ee:
d0:67:2a:6a:2e:d1:39:1f:21:89:ab:13:68:f5:ad:
11:67:d9:20:35:29:0f:1f:5d:7c:5c:e0:8d:17:40:
b4:f8:66:8d:97:bf:b0:90:71:0d:eb:6c:4b:30:28:
5b:09:66:56:ff:60:e7:b6:23:f0:f0:52:86:a7:cf:
6a:a4:a0:76:8f:4a:2d:dc:e4:72:75:fd:70:dd:38:
c0:d7:69:e0:a0:4b:66:09:69:89:07:9e:16:7b:5d:
fd:7c:dd:be:fc:73:6a:3f:62:24:47:18:b9:70:32:
a0:86:e0:c1:f6:0a:d9:ab:24:8f:4e:85:6d:06:95:
85:f2:3f:07:a2:33:64:be:8f:33:c9:08:af:75:d7:
2b:5e:ac:11:7e:13:df:f2:d6:27:b2:04:3a:12:b2:
60:e1:3c:65:d3:68:ed:16:f6:60:fd:68:c1:59:ac:
0c:63:88:cc:fe:00:32:ac:35:23:cb:4b:c3:5d:ea:
a7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.100.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:de:cb:9a:6a:1d:9c:5e:ce:be:e4:34:9a:a2:82:30:89:c1:
75:fd:e9:bc:b6:c5:52:95:24:ee:d7:7c:73:f1:87:58:5a:72:
28:fd:9b:aa:23:4f:9d:a4:4a:89:0b:18:bd:a3:c6:f8:ec:71:
5e:ca:b6:2f:36:3e:52:20:a2:b1:ac:09:48:af:01:10:58:28:
b1:da:af:53:38:42:af:cd:47:14:22:45:f7:46:d8:4a:e0:d4:
2e:93:9f:a6:87:ed:2f:02:1d:75:7a:61:24:69:0d:83:3b:6c:
20:e4:f0:5f:8f:bf:f9:15:be:39:7d:50:9e:07:f3:6b:b9:f5:
d1:8b:1d:9b:7c:f3:62:89:42:1f:9e:fe:0b:c0:5c:cf:05:e7:
3a:c6:5f:de:f3:9d:1e:6f:24:3f:cb:d1:1a:d4:d7:47:b9:29:
0d:43:01:52:9f:34:c6:e1:db:3c:45:51:83:f0:76:f5:b8:95:
88:b5:94:2a:e0:17:b1:e5:5a:9c:52:dd:cc:94:c0:c3:d9:c6:
e8:b7:9e:58:e7:a6:6d:7c:41:27:03:df:4a:b4:84:ee:e9:cf:
57:a7:38:df:86:9d:50:0f:c5:48:9e:6b:e9:1a:39:99:2c:7f:
e3:36:25:f2:d3:0d:57:a7:1d:80:a1:d5:70:60:b7:7a:16:61:
62:2b:71:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 13:43:43 2023 by rpki-client on console-ams.rpki-client.org