Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer
File: OuUa1QQPRQOvxx3FAYnEqWTRzUA.cer (raw, json)
Hash identifier: HVMRJ/bBSFI/8cr+wVGjYoXsmQ/f4ZZ1nCkORDCluaU=
Subject key identifier: 3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D681B761133E07EBAC2C5842A40B3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:01 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 139.28.24.0/22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:81:b7:61:13:3e:07:eb:ac:2c:58:42:a4:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ae51ad5040f4503afc71dc50189c4a964d1cd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:8d:f6:43:a0:50:b6:b0:1d:06:b6:b5:22:
a9:7e:45:21:5f:1d:5c:ab:4f:08:a5:b5:6b:4f:b7:
7f:3f:98:9a:e8:87:31:2e:fa:d6:65:f8:07:32:44:
ab:fd:0c:06:b3:99:1d:93:9a:e7:2a:77:6d:8a:f4:
d7:32:b6:e1:cc:88:31:cf:99:eb:a0:bc:c7:16:7f:
16:08:ee:72:b9:1f:f8:f1:c5:1b:e7:1f:0f:6f:35:
d5:3c:3c:67:80:14:11:10:84:a1:58:de:81:08:d5:
71:d3:dc:f7:ce:25:da:a5:73:4b:da:95:ef:b7:e9:
14:59:03:3e:5c:f3:cb:e2:be:9f:fd:7f:cc:67:3e:
15:c7:79:ab:5c:ef:c0:a6:ad:9d:89:48:81:8a:c0:
9c:0c:38:ad:26:96:99:d4:f5:2e:20:69:bd:b8:e6:
a9:4f:dc:28:91:ea:1e:ad:7b:bc:f3:92:5c:b3:55:
03:e8:63:39:1d:57:a5:d4:90:2f:da:1f:86:65:fd:
dd:b5:b1:20:e7:7a:c1:de:5a:d3:57:2a:4a:35:d5:
84:b9:55:ef:8f:ce:b0:4d:8d:6f:3f:ae:26:6e:07:
19:e9:96:16:5b:b1:6d:1a:76:24:c6:58:3b:88:f0:
f3:b3:bb:20:03:4b:e8:5a:a1:c9:a3:0d:59:db:7b:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:1A:D5:04:0F:45:03:AF:C7:1D:C5:01:89:C4:A9:64:D1:CD:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/09560d-2923-4349-af5c-a583f17082aa/1/OuUa1QQPRQOvxx3FAYnEqWTRzUA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.24.0/22
Signature Algorithm: sha256WithRSAEncryption
af:63:12:dd:0b:37:c9:14:4a:6a:ad:a4:01:a7:db:7d:d0:5e:
70:46:a6:c7:fb:eb:24:61:e8:8c:f6:b1:24:28:3e:1c:73:27:
51:7e:ca:05:2e:b7:bd:9b:80:5a:40:b6:64:4e:a6:73:31:65:
33:95:b1:42:40:00:c3:2b:c9:17:2e:41:52:bd:8d:3f:a9:a6:
ee:c5:d8:73:1d:44:f7:57:f0:91:fa:4d:2a:1d:0d:79:de:05:
19:85:b8:76:3c:41:8c:5c:96:9c:9f:16:35:43:da:1c:7d:37:
61:0e:18:59:2a:8b:66:d4:cf:af:10:e4:0c:32:fb:88:14:b3:
d8:74:05:fe:44:21:2e:86:ed:0e:9d:72:30:fb:1d:fe:cf:25:
2d:24:50:83:9d:af:5f:fc:59:59:de:e1:78:06:25:28:f4:52:
02:50:4f:e7:25:fe:c9:59:2f:3b:be:75:ae:18:94:31:ff:4a:
9a:eb:4b:ee:b9:4f:90:93:d5:48:b6:d8:65:c4:e2:32:c3:89:
bc:59:e3:ca:2c:8b:66:95:8e:4c:02:23:15:d9:53:86:4a:41:
22:bd:e4:e5:8f:65:95:2d:bf:ee:a8:ac:1c:51:37:e0:3e:46:
8a:49:a8:f4:29:3c:74:de:b8:99:e0:7b:f2:39:70:c3:b6:28:
71:e0:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 14:26:57 2023 by rpki-client on console-ams.rpki-client.org