Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
File: O_aj23oVq1f6uqb-yiiedVdxW6w.cer (raw, json)
Hash identifier: +5qhQRkWj9FfdXfHg7rqXWjKB/wJO/pdJItRVTBC/f0=
Subject key identifier: 3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B634DAA7AB310AC8DF7ACB5FC167216
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/O_aj23oVq1f6uqb-yiiedVdxW6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.3.0/24
IP: 2a11:f540::/29
Validation: Failed, certificate revoked on Thu 26 Oct 2023 05:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:4d:aa:7a:b3:10:ac:8d:f7:ac:b5:fc:16:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:01:44:c7:36:09:f5:2c:55:32:9d:1c:0a:
ab:c5:93:77:2c:04:15:28:9b:e1:6a:aa:c8:59:d1:
55:21:ea:dd:9d:37:04:65:9f:84:cd:f6:dd:82:08:
b4:7f:49:bd:e8:cd:71:3f:55:4b:04:a1:17:f4:1a:
e0:41:3b:a9:6a:de:c2:ab:4b:0b:17:39:ca:99:98:
68:2e:3d:d3:51:28:51:d0:be:3e:72:18:b5:2f:36:
76:e6:d7:c0:be:30:82:07:32:2d:d5:21:ed:ee:a9:
d9:c2:06:c5:89:ed:d0:fb:75:4a:b9:c0:bd:bd:b0:
da:6a:ba:5b:d7:fb:a0:29:25:3f:72:38:45:cc:7a:
75:2b:c3:42:fb:78:44:4f:b1:89:1c:c5:5b:18:c6:
8f:7d:e0:af:29:c7:bf:b1:2b:5e:fb:e4:00:73:50:
c9:d6:8f:eb:55:fd:16:3d:cc:91:53:5e:b8:ab:63:
3c:0b:85:1a:fb:d8:76:dc:54:e7:37:41:3f:4f:72:
61:74:00:92:1b:76:69:65:54:48:5d:d4:86:6f:72:
4f:e2:97:5a:1e:50:a2:07:6e:92:b4:bb:f1:44:a8:
af:0c:0e:3d:02:80:36:cf:8a:2e:86:78:b4:9e:a1:
31:6e:77:ae:ef:6c:7d:d7:8a:cb:cf:42:70:ef:1b:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/O_aj23oVq1f6uqb-yiiedVdxW6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.3.0/24
IPv6:
2a11:f540::/29
Signature Algorithm: sha256WithRSAEncryption
65:c1:25:5e:5b:28:ca:4f:c7:b6:38:fb:49:d2:3c:5b:f0:3c:
17:3c:4f:00:7e:1f:f5:fa:3e:5a:a2:f4:0a:18:76:0a:36:66:
f3:2d:d1:75:80:78:91:b5:53:06:da:a8:5d:e2:56:3e:f1:55:
16:bb:1c:a0:48:29:9f:18:79:a2:9e:b3:94:4e:ee:15:9d:78:
99:76:56:7f:af:21:a3:5b:f9:d0:5e:fa:4e:90:b3:8b:30:0e:
9c:84:3d:54:55:2a:32:8e:dd:a7:95:5f:d7:0e:7a:be:7f:8b:
3c:9f:7c:fc:02:75:37:7a:d1:12:7a:96:53:1b:be:f3:b0:e5:
5d:06:2d:91:88:58:03:8d:f5:00:2d:fc:5d:5b:f3:ff:d2:5b:
09:c9:e9:bc:c8:35:b7:ac:21:43:d7:92:81:55:0c:6b:39:df:
23:b4:81:40:aa:10:e6:46:95:95:a4:d3:91:c6:26:d7:b8:9c:
67:d4:85:fa:12:bd:da:e6:62:9f:c9:bf:18:8d:5a:de:c3:b3:
cb:fa:f6:30:1a:88:af:d5:ab:b5:bd:35:50:cb:ee:ce:cd:4c:
9f:df:a6:05:6b:39:39:35:8c:96:45:02:63:b3:ff:b3:60:04:
33:1d:ef:3b:07:15:fc:39:bd:76:45:55:6d:06:fb:47:61:dd:
53:0c:ad:0e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVrY02qerMQrI33rLX8FnIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmY2YTNkYjdhMTVhYjU3ZmFiYWE2ZmVjYTI4OWU3NTU3NzE1YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwsBRMc2CfUsVTKdHAqrxZN3LAQV
KJvhaqrIWdFVIerdnTcEZZ+Ezfbdggi0f0m96M1xP1VLBKEX9BrgQTupat7Cq0sL
FznKmZhoLj3TUShR0L4+chi1LzZ25tfAvjCCBzIt1SHt7qnZwgbFie3Q+3VKucC9
vbDaarpb1/ugKSU/cjhFzHp1K8NC+3hET7GJHMVbGMaPfeCvKce/sSte++QAc1DJ
1o/rVf0WPcyRU164q2M8C4Ua+9h23FTnN0E/T3JhdACSG3ZpZVRIXdSGb3JP4pda
HlCiB26StLvxRKivDA49AoA2z4ouhni0nqExbneu72x914rLz0Jw7xsVNwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDv2o9t6FatX+rqm/soonnVXcVusMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwL2Q2N2Zl
OS1lMThjLTQzNTEtYTBhMC0xZTM1OGFkZTI0ZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvZDY3ZmU5
LWUxOGMtNDM1MS1hMGEwLTFlMzU4YWRlMjRmZS8xL09fYWoyM29WcTFmNnVxYi15
aWllZFZkeFc2dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAsHQDMA0EAgACMAcDBQMqEfVAMA0GCSqGSIb3
DQEBCwUAA4IBAQBlwSVeWyjKT8e2OPtJ0jxb8DwXPE8Afh/1+j5aovQKGHYKNmbz
LdF1gHiRtVMG2qhd4lY+8VUWuxygSCmfGHminrOUTu4VnXiZdlZ/ryGjW/nQXvpO
kLOLMA6chD1UVSoyjt2nlV/XDnq+f4s8n3z8AnU3etESepZTG77zsOVdBi2RiFgD
jfUALfxdW/P/0lsJyem8yDW3rCFD15KBVQxrOd8jtIFAqhDmRpWVpNORxibXuJxn
1IX6Er3a5mKfyb8YjVrew7PL+vYwGoiv1au1vTVQy+7OzUyf36YFazk5NYyWRQJj
s/+zYAQzHe87BxX8Ob12RVVtBvtHYd1TDK0O
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:39 2024 by rpki-client on console-ams.rpki-client.org