Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ob8P-WLwQA38NO0qpRmyR9VqWio.cer
File: Ob8P-WLwQA38NO0qpRmyR9VqWio.cer (raw, json)
Hash identifier: Ar5/avJGmKxs+YujSpdAGXcqOJbt5Jl566+np0qdL7g=
Subject key identifier: 39:BF:0F:F9:62:F0:40:0D:FC:34:ED:2A:A5:19:B2:47:D5:6A:5A:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857167BDA9926279F67A8A826A2931436D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:35:02 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 95.130.228.0/24
IP: 2a11:8e80::/29
Validation: Failed, certificate revoked on Thu 21 Sep 2023 09:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:bd:a9:92:62:79:f6:7a:8a:82:6a:29:31:43:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:35:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39bf0ff962f0400dfc34ed2aa519b247d56a5a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:1d:9e:fd:4b:b9:65:55:8d:dc:4b:6e:30:
38:04:4f:8b:5d:43:99:e1:97:13:4f:ec:30:07:fc:
95:1c:31:a7:6f:23:41:2e:61:3e:f9:a3:41:9e:9d:
a6:50:59:c6:23:b5:1a:6f:97:51:ec:e4:be:ef:14:
ed:c8:9c:c7:4c:17:e1:3d:12:62:b5:c7:c5:11:49:
24:8a:7c:10:52:95:a4:8a:7f:e6:ff:71:2a:03:5c:
98:e9:27:8b:a9:3a:99:57:cf:e9:c8:8a:96:ad:1d:
7a:7b:01:b1:db:40:c0:8a:ad:d0:7b:f6:8f:22:6e:
b2:1e:99:4c:bd:44:f6:69:e1:56:79:7e:81:e6:70:
ce:b6:8a:a8:8d:91:b8:28:be:da:f6:35:16:3a:f9:
88:8a:ba:84:2e:06:da:4b:63:83:21:d0:0d:dd:47:
8b:37:2d:eb:74:ca:32:fc:8f:e6:b1:f2:74:8c:61:
29:f8:55:71:0d:a8:9e:2c:7f:df:60:77:df:40:9d:
61:91:bf:9c:24:d4:11:2a:c1:60:3a:5a:68:94:19:
21:01:53:7b:6a:78:b3:ad:66:a0:c1:4b:9e:6f:fe:
c3:98:19:8b:e2:42:e5:5b:f6:40:da:5f:52:46:99:
0b:0c:e8:29:60:e8:06:08:60:2f:9d:12:6f:b3:b2:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BF:0F:F9:62:F0:40:0D:FC:34:ED:2A:A5:19:B2:47:D5:6A:5A:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.228.0/24
IPv6:
2a11:8e80::/29
Signature Algorithm: sha256WithRSAEncryption
74:fa:71:e6:d9:7e:bf:00:e4:4e:10:06:18:87:47:b7:e3:80:
64:39:8a:2b:7d:64:71:84:2c:ae:86:c1:fd:a8:50:c2:cc:63:
11:3f:2a:84:19:5d:68:3d:de:30:cf:c3:09:ee:6f:59:60:29:
ff:c8:2b:26:50:e2:9b:d6:87:62:8e:b3:31:90:c9:c2:78:db:
07:37:01:45:f4:19:37:cb:a8:8b:72:e9:f6:bc:bb:79:0b:10:
70:29:1a:de:71:a9:90:e4:bc:ad:68:87:db:c5:a5:b0:ab:58:
e3:16:b2:9c:f3:19:d7:70:ec:3a:1c:5a:1e:39:bd:b6:be:aa:
27:c5:68:58:9f:45:da:b4:13:79:08:f2:10:b5:8f:4c:58:d0:
72:5a:49:cf:67:c2:7f:81:9e:d9:69:2f:59:42:55:ce:a6:72:
5c:ed:86:09:b8:81:62:0b:eb:f6:20:0f:e8:89:e0:55:d6:b3:
6f:a5:d7:eb:1d:fe:4b:ea:8f:e0:89:39:1e:fd:2d:cd:59:5b:
a4:8b:10:04:6e:ea:6d:de:50:95:ca:ee:ab:5b:e2:fd:d9:67:
92:00:e3:9c:02:87:0a:51:11:95:ba:cd:5b:c8:ad:5e:42:a0:
e9:f6:cc:fd:54:00:86:71:54:f7:4e:3c:6e:d5:44:b1:0e:ee:
79:7b:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:50 2024 by rpki-client on console-fra.rpki-client.org