Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OXJo23_W6rjIMA25YXapaAlVZxM.cer
File: OXJo23_W6rjIMA25YXapaAlVZxM.cer (raw, json)
Hash identifier: iiUiZSIBNI74DzlIiBhtwe7RgFdMiv3MW0ACLoI3jEk=
Subject key identifier: 39:72:68:DB:7F:D6:EA:B8:C8:30:0D:B9:61:76:A9:68:09:55:67:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6357AECF0370EFBF7476B678FAE511
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/65a616-8d18-428e-80b1-8a95d42022b2/1/OXJo23_W6rjIMA25YXapaAlVZxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/65a616-8d18-428e-80b1-8a95d42022b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:30 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49141
IP: 91.212.155.0/24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 15:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:57:ae:cf:03:70:ef:bf:74:76:b6:78:fa:e5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=397268db7fd6eab8c8300db96176a96809556713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:0f:7b:f0:fd:a0:11:6c:40:8f:22:ce:e3:
e9:74:d0:60:61:fb:f3:22:66:59:6d:4f:b1:c2:ad:
45:10:41:b7:8e:16:40:92:de:d4:66:f3:15:a0:a4:
4b:4c:1c:65:a6:da:47:68:a6:aa:30:27:35:dd:07:
a9:56:fd:f7:c3:1c:82:7f:76:09:39:30:fe:e3:13:
75:5f:66:9f:a8:2e:15:59:2b:f9:cb:61:b4:ef:9b:
77:c8:70:18:33:7f:2e:ad:1b:21:52:5f:8b:c9:f0:
e5:53:e0:92:6e:74:b4:ae:f8:1f:43:a8:ac:60:40:
75:ae:af:e5:77:07:f1:a2:0d:de:7a:f3:0f:b6:50:
b1:35:21:5d:a7:a4:5c:e2:8d:0b:f1:e4:1c:63:af:
2e:8b:8d:49:64:b1:a7:6e:df:d2:11:f4:33:f9:b6:
4b:e7:17:c1:12:fc:91:ff:3d:98:7e:8c:2a:10:49:
7d:be:4c:4d:9c:3a:f8:40:49:e8:93:18:10:fa:1f:
41:ad:9e:b5:bd:40:c4:17:c9:89:a7:f7:23:46:54:
33:16:7e:ef:2d:4e:20:cd:28:77:d1:26:c4:82:09:
c7:9a:72:33:8c:0a:78:fd:b8:f3:4b:df:88:46:6d:
59:7f:dc:52:5f:dc:a4:42:f1:8a:ef:70:70:05:58:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:72:68:DB:7F:D6:EA:B8:C8:30:0D:B9:61:76:A9:68:09:55:67:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/65a616-8d18-428e-80b1-8a95d42022b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/65a616-8d18-428e-80b1-8a95d42022b2/1/OXJo23_W6rjIMA25YXapaAlVZxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.155.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49141
Signature Algorithm: sha256WithRSAEncryption
9d:99:bf:01:3e:48:47:db:73:3e:2a:61:98:e3:29:3a:e1:b5:
0c:9b:35:4a:cc:84:55:2d:aa:1d:0e:ac:39:03:5d:5b:64:a2:
5a:a4:70:24:6c:e4:68:53:7b:a3:77:e2:82:39:1d:75:0f:9a:
cf:a9:bf:3c:09:20:94:be:b3:dc:93:a3:3f:0d:58:35:7d:5a:
be:34:45:66:ea:4e:a0:e9:45:e5:33:31:49:ec:09:20:34:73:
25:35:6f:c7:80:5a:54:cf:93:26:09:95:6d:c6:6d:9e:a8:82:
d7:40:fe:5b:82:d5:f4:64:b3:36:0c:1d:a6:6a:61:0d:f9:ff:
58:3d:3a:9d:f5:d1:d6:54:55:f1:fe:1e:0a:f4:34:2d:40:3e:
e4:fd:dd:cb:24:7e:43:cf:03:a4:42:a4:ba:7b:c1:26:90:9a:
43:2c:03:57:45:1f:58:53:9d:71:0d:2f:0f:91:44:d4:63:92:
13:64:e0:4e:b3:d3:ae:42:29:4e:59:66:9d:3f:be:8b:38:6c:
58:05:cb:31:56:37:a2:ff:81:b8:98:13:3f:0c:b7:72:89:60:
41:13:c8:fa:f7:33:bd:bf:5c:fc:a1:fe:4b:3a:1a:6c:86:d4:
9c:72:c9:57:f9:1c:61:cb:dd:78:b1:4f:54:b8:9a:fe:2e:13:
fb:62:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:37 2024 by rpki-client on console-ams.rpki-client.org