Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OfUPa2BNy9L0dADYiIxFQcrIlwg.cer
File: OfUPa2BNy9L0dADYiIxFQcrIlwg.cer (raw, json)
Hash identifier: kD8d8y70aTWIlW+lc4aXhvqCMvJjHjLr9lOtWCyqDNg=
Subject key identifier: 39:F5:0F:6B:60:4D:CB:D2:F4:74:00:D8:88:8C:45:41:CA:C8:97:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB06664321D0E987A3E79138318A8FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/26ceeb-7e78-43e0-9ac2-afa0d4d8b1fd/1/OfUPa2BNy9L0dADYiIxFQcrIlwg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/26ceeb-7e78-43e0-9ac2-afa0d4d8b1fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206423
IP: 185.156.252.0/22
IP: 2a07:a1c0::/29
Validation: Failed, certificate revoked on Tue 18 Apr 2023 12:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:66:64:32:1d:0e:98:7a:3e:79:13:83:18:a8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f50f6b604dcbd2f47400d8888c4541cac89708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:52:5b:53:11:86:d6:e6:1c:8c:46:04:ed:
29:b4:91:20:62:83:48:7e:ac:5a:ac:1e:a6:c7:d3:
69:8c:c4:35:0f:4e:9b:c4:06:17:bd:fb:f4:c2:7a:
b2:f4:8b:f9:3d:46:96:b2:92:51:cd:f0:96:4a:b0:
b2:33:db:db:96:a1:b3:bd:26:c4:47:bd:71:99:20:
e0:ba:c4:07:22:e7:4a:c7:a6:41:41:67:ef:69:c0:
30:91:34:dc:5b:73:34:56:dc:93:6d:19:ef:d6:ec:
54:92:dc:38:63:7a:93:c5:9a:4e:a9:10:02:f0:46:
a6:fb:c0:38:24:21:43:f3:ab:9a:09:87:d7:f2:44:
94:19:49:55:cd:81:d0:01:e3:b9:ed:50:42:47:bb:
0e:2a:41:8a:f8:59:c1:51:73:a5:b4:ca:74:eb:4c:
0a:94:76:1d:97:d3:a3:b2:b0:61:a8:10:21:dd:b9:
7e:44:2e:cc:82:5b:c6:2c:a3:70:08:f1:86:e6:93:
2a:b2:8a:81:37:8b:b3:f0:4b:99:ec:e9:e7:a1:c2:
bf:59:e1:8d:ac:1c:e5:0c:85:84:b0:09:e1:cb:85:
93:00:62:24:16:4f:67:c3:17:22:66:04:c4:fb:52:
85:a3:a9:c0:3b:29:2c:80:28:97:32:94:ec:2c:d6:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:0F:6B:60:4D:CB:D2:F4:74:00:D8:88:8C:45:41:CA:C8:97:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/26ceeb-7e78-43e0-9ac2-afa0d4d8b1fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/26ceeb-7e78-43e0-9ac2-afa0d4d8b1fd/1/OfUPa2BNy9L0dADYiIxFQcrIlwg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.252.0/22
IPv6:
2a07:a1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206423
Signature Algorithm: sha256WithRSAEncryption
06:8d:bd:9a:f6:17:e4:69:9e:99:b6:2d:d9:8e:4a:88:e8:92:
79:6d:6b:2f:f8:35:67:2d:00:b8:1b:9c:f6:79:16:3f:2b:d1:
7f:2a:b5:2d:d8:ad:a9:2c:6d:fb:53:8a:b1:cb:bc:f3:fe:5c:
8a:38:c8:c9:f3:3c:6e:2a:c9:a5:f1:0a:12:e7:a4:57:29:9d:
47:be:7e:e8:30:38:1c:93:45:b2:87:8b:bb:4c:b5:e3:43:c0:
ff:51:48:d6:90:75:d9:dc:98:7f:6d:6d:9d:12:79:5a:09:3f:
06:fd:da:4e:09:1a:52:7e:78:f2:e8:3d:cd:fa:13:94:6b:07:
69:65:73:0a:90:4e:ce:10:48:8f:9f:28:10:c4:17:66:bf:40:
bd:c7:cf:5c:65:7a:46:b2:57:2a:85:69:80:f6:54:f8:80:5d:
2b:12:47:e9:1c:70:57:20:a4:5c:4a:3b:e5:46:10:58:0a:1f:
46:36:e9:18:ea:59:37:db:6c:9f:71:97:d3:fe:40:42:54:54:
71:57:c3:67:2f:5f:8b:74:2e:4b:f5:19:78:3b:94:62:0f:ac:
d7:ea:92:12:ff:c9:3c:18:77:48:29:91:fd:95:16:f4:2d:be:
ec:95:4a:97:23:59:3f:b8:cf:aa:c5:3e:97:47:6a:ae:69:a6:
a9:53:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:41 2024 by rpki-client on console-ams.rpki-client.org