Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OZaIuo_iuvYtOdGSS0xijpVBZy0.cer
File: OZaIuo_iuvYtOdGSS0xijpVBZy0.cer (raw, json)
Hash identifier: SQXPZEbbIG2MYfT5KEgZV8AdmELmRXHcBEral495kM0=
Subject key identifier: 39:96:88:BA:8F:E2:BA:F6:2D:39:D1:92:4B:4C:62:8E:95:41:67:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B6BE23664DC0F54D5E5DB8E04B21F5774
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/OZaIuo_iuvYtOdGSS0xijpVBZy0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 26 Oct 2023 12:07:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.93.115.0/24
Validation: Failed, certificate revoked on Thu 09 Nov 2023 15:35:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:e2:36:64:dc:0f:54:d5:e5:db:8e:04:b2:1f:57:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 26 12:07:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=399688ba8fe2baf62d39d1924b4c628e9541672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:aa:e8:66:d5:6f:00:09:bb:2a:6a:85:32:
8a:30:f9:8f:57:fb:db:6c:f3:38:ab:b9:ad:8b:aa:
18:43:2c:22:42:61:2a:35:3c:42:b7:df:e5:ee:e0:
e5:a6:88:be:bd:71:19:1b:a0:f3:7f:95:82:42:ee:
d8:1f:4e:25:e5:d6:4c:2c:ba:2b:7b:3c:1a:a7:b6:
9d:8e:4d:f2:69:a4:bc:b2:50:65:a1:12:43:c3:bc:
75:42:03:60:ee:a0:00:14:eb:71:fd:12:c6:c7:b0:
03:88:20:7f:33:b0:f3:70:fd:b4:76:87:ba:db:61:
5d:86:b7:d2:69:c6:5b:96:de:0c:82:c9:82:13:de:
49:11:3c:f7:f3:08:ba:2b:04:07:74:c8:0d:7d:5c:
c5:ed:1c:a4:16:e8:7e:a2:98:24:ea:a6:f4:8d:75:
71:30:2e:bd:85:85:ab:ca:8a:2b:c9:8a:a0:ab:61:
3c:37:6c:d2:b6:b7:f2:89:32:23:f7:be:5b:c8:47:
ef:88:1d:75:26:da:d7:14:cf:24:46:ce:a6:7e:9b:
50:12:ac:09:65:d7:46:06:38:d4:5b:a7:39:8b:b9:
1a:b9:97:d3:d2:9d:40:9a:8c:4d:fa:5c:75:7b:75:
d5:75:d5:42:f7:41:47:f2:76:44:2a:88:87:10:93:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:88:BA:8F:E2:BA:F6:2D:39:D1:92:4B:4C:62:8E:95:41:67:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36a532-ef0d-414f-8ebf-9daca5b471d5/1/OZaIuo_iuvYtOdGSS0xijpVBZy0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:75:6a:25:f8:21:fd:de:98:67:c4:7e:be:4e:8f:a9:17:3a:
58:cd:48:7a:ad:9b:d0:6c:6d:75:d3:68:68:13:18:07:19:cf:
cf:5b:64:ea:69:9a:83:48:94:66:80:03:75:c6:4a:d5:d6:22:
9a:94:33:da:94:7f:1f:0e:5a:f8:83:c5:46:49:e2:f7:9a:35:
2d:9c:16:b1:93:0a:20:88:64:ac:b8:e5:0b:5b:c5:0a:73:55:
c6:02:d6:dd:0d:2d:f2:d7:8d:dc:31:8c:f0:13:d5:a5:e6:3b:
90:ff:2c:3a:c5:da:0b:bd:fb:64:1e:fa:fb:39:23:2f:aa:fa:
70:5e:35:d7:02:05:db:07:87:ae:e0:f8:8c:f1:e6:e1:bb:55:
b9:6d:ba:4d:24:d1:4f:d1:a8:5c:18:07:31:ac:7d:9d:bf:b2:
8c:fd:89:37:6d:51:d4:52:7b:09:22:b9:13:9b:24:e8:a7:b5:
a5:28:4e:57:cc:ed:3c:ee:76:b4:24:2c:7e:7f:a9:8a:dd:10:
f7:0b:98:f5:77:5d:49:0c:07:eb:08:d1:e9:0d:ce:41:0c:fe:
58:58:aa:4e:ee:a9:f1:f1:ae:47:a9:f2:bf:27:4f:eb:6a:42:
3a:41:44:53:e4:ad:aa:58:0c:f1:c1:94:36:92:e6:46:17:86:
f6:44:77:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:38 2024 by rpki-client on console-ams.rpki-client.org