Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer
File: OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer (raw, json)
Hash identifier: FM4iGS3aX8pwAm0QW9zgOYITWpTSx+qQ4N0I4X1iHmE=
Subject key identifier: 39:5B:C3:A3:5A:B3:DC:89:F6:94:03:7B:67:18:87:2E:0B:48:2A:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018D495E6AF6674A1ABB220E7EDCACDF6DFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 27 Jan 2024 05:22:21 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 216436
Validation: Failed, certificate revoked on Tue 16 Jul 2024 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:49:5e:6a:f6:67:4a:1a:bb:22:0e:7e:dc:ac:df:6d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 05:22:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=395bc3a35ab3dc89f694037b6718872e0b482a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:9b:e3:cb:b1:24:04:04:d7:5d:85:d2:a7:
28:67:05:8b:db:fd:8d:ee:4c:0f:3d:18:e9:83:d1:
14:55:64:4b:aa:71:03:82:16:d0:97:68:88:c7:41:
2b:7e:22:a1:19:a7:87:98:ae:3a:92:ea:ad:00:74:
8f:24:f0:b0:c7:59:3e:30:d9:94:8b:63:aa:92:a4:
e8:2d:71:e5:a4:b5:93:8c:b7:87:06:e1:1d:14:5f:
33:19:2e:33:ed:19:d6:20:fb:17:33:94:35:64:00:
78:5a:ec:c4:27:f9:cc:13:dd:e8:3d:14:fd:ee:01:
29:5c:bc:85:4c:31:d6:21:84:17:bd:87:c1:63:90:
86:7f:ce:4a:76:45:f6:9f:43:6b:bd:b0:04:6f:2b:
f9:49:80:28:91:b0:73:13:36:1a:8d:87:08:d5:5a:
f4:b7:6e:64:04:46:2e:cf:18:44:c8:ef:8d:5b:42:
41:d1:cb:66:df:f8:c2:6f:9a:85:ce:2f:da:dd:f3:
ad:ae:da:51:fa:7e:8b:72:a9:26:f7:4f:d4:69:96:
18:9b:8f:f3:d9:d2:5b:27:07:07:35:6f:bd:da:54:
94:b0:2b:cb:19:16:62:14:6f:ff:93:fc:06:f5:a9:
65:e9:1b:fa:98:8a:c9:9b:12:23:93:37:c4:da:b3:
8e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:C3:A3:5A:B3:DC:89:F6:94:03:7B:67:18:87:2E:0B:48:2A:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216436
Signature Algorithm: sha256WithRSAEncryption
15:21:39:45:54:4b:7e:fd:1f:1b:e5:99:45:93:52:d2:12:53:
6a:37:2b:95:e6:32:c8:de:2a:ba:4b:0a:d6:51:88:62:69:6f:
ef:1d:aa:69:da:0b:3f:14:91:b0:03:86:94:f3:71:78:27:12:
df:f9:6e:70:d8:4e:cf:42:2f:fa:83:f8:31:db:7f:d7:9c:3a:
60:f2:90:9f:fd:3f:e3:d3:c0:86:67:76:ac:6c:a2:af:f2:92:
5d:27:e7:6b:84:77:35:86:03:92:b1:27:18:88:85:da:0d:ee:
bf:a0:50:39:a7:66:d2:7d:b4:8a:9c:bb:f4:bf:50:eb:cf:52:
8c:28:85:9a:f9:d6:c9:38:2a:37:5a:59:e6:0c:f9:55:ee:39:
f0:d9:be:01:e3:02:4b:e9:e5:f8:6e:2e:5d:49:64:03:75:83:
35:63:fc:00:35:28:c2:ab:58:80:0e:b1:41:13:25:21:08:35:
68:94:a2:f9:78:80:31:45:04:18:0a:26:f2:6a:f4:82:83:7e:
43:ad:81:e9:55:09:87:ec:e2:62:a1:75:1f:29:4d:df:1b:d1:
79:d9:4a:5e:25:dd:5f:8a:aa:9e:07:88:74:c0:ab:ec:50:cd:
fd:3c:fc:b9:95:b3:0f:4d:d0:de:a1:74:cc:68:c4:85:38:b2:
79:f9:7e:20
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAY1JXmr2Z0oauyIOftys3239MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTI3MDUyMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTViYzNhMzVhYjNkYzg5ZjY5NDAzN2I2NzE4ODcyZTBiNDgyYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7qb48uxJAQE112F0qcoZwWL2/2N
7kwPPRjpg9EUVWRLqnEDghbQl2iIx0ErfiKhGaeHmK46kuqtAHSPJPCwx1k+MNmU
i2OqkqToLXHlpLWTjLeHBuEdFF8zGS4z7RnWIPsXM5Q1ZAB4WuzEJ/nME93oPRT9
7gEpXLyFTDHWIYQXvYfBY5CGf85KdkX2n0NrvbAEbyv5SYAokbBzEzYajYcI1Vr0
t25kBEYuzxhEyO+NW0JB0ctm3/jCb5qFzi/a3fOtrtpR+n6Lcqkm90/UaZYYm4/z
2dJbJwcHNW+92lSUsCvLGRZiFG//k/wG9all6Rv6mIrJmxIjkzfE2rOOGQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFDlbw6Nas9yJ9pQDe2cYhy4LSCo+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2NiNjli
MS1mYjg1LTQ2Y2MtOTA0NS1lZjAxNzhjNGQ3ZDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvY2I2OWIx
LWZiODUtNDZjYy05MDQ1LWVmMDE3OGM0ZDdkNS8xL09WdkRvMXF6M0luMmxBTjda
eGlITGd0SUtqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwNNdDANBgkqhkiG9w0BAQsFAAOCAQEAFSE5RVRLfv0f
G+WZRZNS0hJTajcrleYyyN4quksK1lGIYmlv7x2qadoLPxSRsAOGlPNxeCcS3/lu
cNhOz0Iv+oP4Mdt/15w6YPKQn/0/49PAhmd2rGyir/KSXSfna4R3NYYDkrEnGIiF
2g3uv6BQOadm0n20ipy79L9Q689SjCiFmvnWyTgqN1pZ5gz5Ve458Nm+AeMCS+nl
+G4uXUlkA3WDNWP8ADUowqtYgA6xQRMlIQg1aJSi+XiAMUUEGAom8mr0goN+Q62B
6VUJh+ziYqF1HylN3xvRedlKXiXdX4qqngeIdMCr7FDN/Tz8uZWzD03Q3qF0zGjE
hTiyefl+IA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:19 2025 by rpki-client