Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OQSULP-zxVYHyWvTx9d6rC4kNlc.cer
File: OQSULP-zxVYHyWvTx9d6rC4kNlc.cer (raw, json)
Hash identifier: XYpfYL77Bl5L6tTUzuP2MHYtc4aOallN+qTvf+hCbvI=
Subject key identifier: 39:04:94:2C:FF:B3:C5:56:07:C9:6B:D3:C7:D7:7A:AC:2E:24:36:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187F8A7E1D5698678549302E764C49BEFE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 07 May 2023 23:59:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.95.11.0/24
IP: 2a0b:cf40::/29
Validation: Failed, certificate revoked on Thu 07 Dec 2023 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f8:a7:e1:d5:69:86:78:54:93:02:e7:64:c4:9b:ef:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 7 23:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3904942cffb3c55607c96bd3c7d77aac2e243657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:13:52:bc:e4:64:06:44:6c:2f:e0:50:e1:31:
1e:a0:cf:c0:60:a0:23:42:23:f3:06:d1:de:14:67:
53:49:eb:1d:f3:57:46:2c:54:9d:f3:5d:32:61:55:
05:8b:f2:64:14:0c:6d:ac:bb:a5:de:e9:dd:c7:c9:
66:90:62:e5:05:32:41:d7:88:1b:df:5a:16:20:18:
a4:93:e0:be:4c:57:2b:4c:d1:7e:21:cf:2b:79:12:
5b:20:61:37:db:17:be:4f:25:d4:da:31:9d:a9:31:
de:8e:62:23:6b:12:83:94:7d:93:b7:48:8d:f8:ec:
a2:ac:ce:2d:0f:0f:e9:28:4e:e0:30:85:4a:65:4a:
88:e8:13:0a:a3:eb:ba:77:79:5f:53:ae:b6:87:f6:
fd:13:7e:58:6a:cf:57:47:c4:cf:31:27:e1:90:18:
87:e8:62:33:1c:fc:b8:0d:6b:5c:3b:34:7d:eb:48:
fa:57:ed:09:c4:c6:43:6b:08:0f:65:3d:c8:24:ba:
8c:68:5f:30:1b:b1:c0:fe:9f:e6:c5:7c:18:f9:fc:
e5:4d:fb:10:20:b2:b8:e7:14:ae:12:68:bf:15:73:
16:37:a4:24:b8:77:14:cc:97:d0:65:c0:ef:ce:86:
eb:19:27:be:df:f0:8c:7b:8f:29:11:e6:ff:e4:a6:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:94:2C:FF:B3:C5:56:07:C9:6B:D3:C7:D7:7A:AC:2E:24:36:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.11.0/24
IPv6:
2a0b:cf40::/29
Signature Algorithm: sha256WithRSAEncryption
3e:bf:82:28:df:b7:dc:35:06:0e:e7:91:7c:f2:d6:67:f6:a1:
13:08:9d:3b:3f:ee:ca:ef:71:e5:7d:5a:31:9c:89:27:8b:56:
94:1e:51:f1:5d:83:f8:7d:f4:75:62:20:f8:f0:cb:56:40:c2:
29:fa:89:d5:46:d7:91:05:4c:2e:d9:28:36:5b:40:22:4c:0a:
4a:6d:40:64:56:dc:53:38:54:aa:ad:8e:26:03:0f:83:56:f4:
4e:fd:e8:4e:c6:67:ca:52:d9:1c:16:32:38:8b:b9:b0:bf:c0:
1d:6e:df:e2:7b:61:b9:1f:39:48:38:ca:9d:c1:4e:4c:44:21:
63:02:b0:d2:71:4a:7b:7a:72:fa:55:94:44:bb:dd:4f:cf:a1:
ba:2f:52:ff:4f:16:ea:f5:90:55:46:98:b8:8a:ce:ab:d0:3d:
03:4e:1c:18:f0:3b:0e:ff:bb:38:b4:dc:22:ba:cb:f6:b2:20:
35:00:75:39:c6:cb:aa:e4:88:80:db:d4:a5:38:24:30:a9:ec:
12:07:a1:a3:fb:af:bd:e8:f6:55:40:03:6c:fa:33:01:c7:42:
41:51:0b:b7:f2:9e:c9:5a:36:c0:90:9b:6e:60:55:5f:bc:a6:
6b:f3:9a:ae:16:4c:cc:22:ca:c7:1f:9e:37:d8:e5:93:04:36:
f3:b4:bf:4b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYf4p+HVaYZ4VJMC52TEm+/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwNTA3MjM1OTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTA0OTQyY2ZmYjNjNTU2MDdjOTZiZDNjN2Q3N2FhYzJlMjQzNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xNSvORkBkRsL+BQ4TEeoM/AYKAj
QiPzBtHeFGdTSesd81dGLFSd810yYVUFi/JkFAxtrLul3undx8lmkGLlBTJB14gb
31oWIBikk+C+TFcrTNF+Ic8reRJbIGE32xe+TyXU2jGdqTHejmIjaxKDlH2Tt0iN
+OyirM4tDw/pKE7gMIVKZUqI6BMKo+u6d3lfU662h/b9E35Yas9XR8TPMSfhkBiH
6GIzHPy4DWtcOzR960j6V+0JxMZDawgPZT3IJLqMaF8wG7HA/p/mxXwY+fzlTfsQ
ILK45xSuEmi/FXMWN6QkuHcUzJfQZcDvzobrGSe+3/CMe48pEeb/5Kaj6QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDkElCz/s8VWB8lr08fXeqwuJDZXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlkLzNiZDAw
Zi02ZGZlLTRkNzgtOGQ4Ny0xMGEzN2Y4ZDk2MDYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWQvM2JkMDBm
LTZkZmUtNGQ3OC04ZDg3LTEwYTM3ZjhkOTYwNi8xL09RU1VMUC16eFZZSHlXdlR4
OWQ2ckM0a05sYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQALV8LMA0EAgACMAcDBQMqC89AMA0GCSqGSIb3
DQEBCwUAA4IBAQA+v4Io37fcNQYO55F88tZn9qETCJ07P+7K73HlfVoxnIkni1aU
HlHxXYP4ffR1YiD48MtWQMIp+onVRteRBUwu2Sg2W0AiTApKbUBkVtxTOFSqrY4m
Aw+DVvRO/ehOxmfKUtkcFjI4i7mwv8Adbt/ie2G5HzlIOMqdwU5MRCFjArDScUp7
enL6VZREu91Pz6G6L1L/Txbq9ZBVRpi4is6r0D0DThwY8DsO/7s4tNwiusv2siA1
AHU5xsuq5IiA29SlOCQwqewSB6Gj+6+96PZVQANs+jMBx0JBUQu38p7JWjbAkJtu
YFVfvKZr85quFkzMIsrHH5432OWTBDbztL9L
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:34 2024 by rpki-client on console-ams.rpki-client.org