Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OifGqet_dGR4L5hzOOpoyJygUyY.cer
File: OifGqet_dGR4L5hzOOpoyJygUyY.cer (raw, json)
Hash identifier: +nhILNhbLcUcUzRTWzxlAlPjNTTqXAAJI6YFJ19urbU=
Subject key identifier: 3A:27:C6:A9:EB:7F:74:64:78:2F:98:73:38:EA:68:C8:9C:A0:53:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018964785B8E6DF6893B2F6DF472B5791726
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 17 Jul 2023 15:29:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.190.153.0/24
IP: 2a11:6280::/29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:5b:8e:6d:f6:89:3b:2f:6d:f4:72:b5:79:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 15:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a27c6a9eb7f7464782f987338ea68c89ca05326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:37:06:14:47:a2:00:ad:1b:c4:c7:e5:27:
a5:6f:bc:ae:87:fd:93:f5:f0:28:85:9e:7b:51:09:
3e:af:71:6c:9b:ce:0e:2a:89:0f:9b:ae:25:0a:0d:
ff:d2:6e:3b:f3:70:ed:6b:2e:e6:75:3e:e9:45:d1:
ee:f2:ca:b1:3b:6a:37:58:5f:b6:8d:4d:cf:c1:4d:
1f:ab:19:59:68:0e:1d:62:b6:a7:48:5c:d4:17:72:
1e:18:dd:44:0c:ca:6d:8a:f8:d6:dc:16:d0:ae:19:
92:df:bf:3b:25:7a:1a:b9:45:25:2c:38:e7:40:80:
9f:5f:02:05:67:b1:7e:fa:b1:cf:9c:2e:76:c1:8c:
f6:c2:eb:4e:ad:53:49:b7:ba:83:b5:05:09:a5:0c:
f4:fa:4a:be:aa:b4:7a:0e:54:58:e9:e1:9e:8f:e2:
cc:82:dc:8b:b2:ea:c9:21:9a:43:92:7c:c4:8f:66:
46:4a:ba:0c:0d:d4:21:27:1c:74:50:c6:32:2b:d7:
a7:44:9c:0a:9a:0c:6d:4f:5c:1d:10:2c:ef:c3:54:
30:ea:de:57:96:ea:36:15:4e:2b:58:62:91:cc:13:
6f:b4:93:47:fe:06:c1:83:a9:07:c5:14:58:12:8e:
24:e3:09:34:d5:a2:b2:61:7d:75:47:3a:89:17:a5:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:27:C6:A9:EB:7F:74:64:78:2F:98:73:38:EA:68:C8:9C:A0:53:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.153.0/24
IPv6:
2a11:6280::/29
Signature Algorithm: sha256WithRSAEncryption
10:3f:08:cb:e9:fa:a7:04:0f:7b:eb:bc:28:e1:b0:db:dc:72:
de:bf:17:08:15:9b:60:65:39:33:e7:1f:d2:e9:e1:ef:35:46:
59:b7:2f:f9:8b:d3:fc:54:1b:84:57:d1:13:ca:28:1e:81:70:
c1:fb:01:2f:2a:30:24:2c:6f:56:6b:96:5c:74:b8:7e:47:64:
a1:5b:f0:bb:b2:b2:53:9b:7a:c5:74:a5:99:58:23:f6:9f:db:
00:5b:99:79:c6:25:83:76:14:93:e0:fd:1c:3b:a4:9f:b1:5c:
85:a8:05:69:43:5b:16:1b:ab:c7:47:33:7c:3f:c1:28:a9:17:
be:94:e5:fd:7a:a1:85:c6:98:79:e9:75:4e:ad:b4:39:48:75:
ab:74:2e:cd:e3:3d:cb:ff:1d:71:99:eb:52:98:fc:66:55:05:
8d:0f:05:e4:0e:35:96:e5:ac:f8:a4:1d:a5:4f:0d:f0:6e:fa:
72:98:82:1f:56:85:56:38:9d:5a:cd:f8:90:1c:52:b7:9a:5a:
f3:d1:79:78:be:43:29:fc:c8:38:2c:27:7f:2a:40:c5:c3:16:
a8:74:5a:8d:9a:95:a7:de:bd:d0:51:d0:a1:16:52:20:c5:95:
1c:09:d0:aa:87:1d:8c:91:68:55:38:24:24:99:ac:28:69:ff:
03:d7:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:41 2024 by rpki-client on console-ams.rpki-client.org