Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
File: OUBxIwZclV0Z1PrpY7DQVfSJshU.cer (raw, json)
Hash identifier: vf3Evsfp5MyY/+tSeBvdcMWxU4LDqAc4aZMuDjIkijA=
Subject key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF6D3F95558D04B5AA0C3EF923DCAB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:32:50 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.111.0/24
IP: 2a12:8c00::/29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f6:d3:f9:55:58:d0:4b:5a:a0:c3:ef:92:3d:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39407123065c955d19d4fae963b0d055f489b215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:c9:52:6d:09:05:1e:c5:e2:bd:2b:ff:fa:
ce:e8:09:ea:a3:88:29:be:06:c0:d8:3d:ae:8a:ab:
65:c8:5b:55:16:81:bc:e9:b8:e7:29:b6:63:66:b0:
da:72:9b:9b:94:40:68:8e:99:03:7e:d7:85:25:d3:
e1:de:b0:9c:b5:64:7f:fd:70:be:2e:9e:3c:2e:c4:
3c:1b:94:8c:0c:e3:76:b0:93:b0:ac:5e:7d:71:f0:
f1:a1:49:96:4a:5a:89:92:14:a0:e6:db:0f:de:7f:
03:08:61:42:43:6f:6a:1e:1e:7a:9b:93:a5:b8:9a:
db:7e:17:c0:62:cf:0f:47:37:63:16:7b:38:c1:95:
63:f2:68:d1:44:0c:e9:d1:0e:9a:f0:fe:1d:b5:f6:
1f:d7:55:44:0e:ee:f7:62:40:75:f2:95:dd:b5:58:
35:eb:88:55:4b:16:50:0b:47:ad:9f:21:9f:08:2d:
62:18:4d:f9:cd:2a:89:db:b0:a1:9b:c8:2f:02:ff:
0d:98:52:25:f7:ae:a7:3d:61:bb:cd:83:2d:9f:af:
69:34:2a:fd:aa:58:ff:52:f3:4b:86:c9:c0:02:d8:
22:3c:68:48:4c:4c:77:13:31:53:b0:cc:68:3f:e2:
d2:d4:9b:db:a4:13:fa:37:fd:69:f2:f2:bc:23:af:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.111.0/24
IPv6:
2a12:8c00::/29
Signature Algorithm: sha256WithRSAEncryption
59:ee:96:83:23:0a:b5:b1:3d:00:00:ce:df:6a:02:0f:df:ad:
05:c3:86:6a:38:25:31:4e:6c:b8:7a:d7:1e:09:09:df:67:a5:
41:27:4d:14:1b:b5:b3:ac:8e:50:2b:6c:11:9a:d4:df:30:61:
37:1f:66:40:87:a5:da:9e:83:6d:cd:8e:10:e8:ee:e0:c9:25:
78:f6:55:71:c7:47:cf:df:2a:65:b1:f4:ad:d1:04:03:a8:32:
ea:48:f4:42:15:93:05:cc:6d:3f:a6:0b:61:ff:f5:29:0f:9e:
89:c8:8f:df:4b:b4:d2:36:b6:a7:52:be:92:59:bb:6a:61:34:
e0:88:ce:f1:ca:d0:a3:c8:3c:c4:eb:9f:c2:20:65:74:6c:b3:
a4:10:70:cf:a8:56:b6:32:93:49:3d:8e:0d:df:e1:73:13:49:
0d:9a:7a:9c:8b:d5:4d:e7:12:11:ee:7b:d9:ba:4c:e9:59:9b:
6e:91:86:16:a4:d7:52:94:ee:45:75:10:09:73:e0:80:0e:a2:
1b:6d:97:60:e5:0c:ae:5e:55:eb:6b:6b:62:8f:b8:98:e1:25:
0c:83:eb:fd:91:2e:7a:12:50:8e:39:86:f4:b3:ce:23:96:43:
d1:6c:ab:7a:71:fc:5c:52:6d:b0:72:f5:05:f6:a4:fc:22:00:
ab:bb:73:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 12:07:07 2023 by rpki-client on console-fra.rpki-client.org