Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ox-NqcsONixCQZayDmBOlKg7yFA.cer
File: Ox-NqcsONixCQZayDmBOlKg7yFA.cer (raw, json)
Hash identifier: fHEKT7IJHLvFxz7TncyjW0gXUFLio19iW34xJWql7O8=
Subject key identifier: 3B:1F:8D:A9:CB:0E:36:2C:42:41:96:B2:0E:60:4E:94:A8:3B:C8:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018692EB4092B65ED0F2209CC818D5828C53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Feb 2023 12:48:56 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.56.149.0/24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 08:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:eb:40:92:b6:5e:d0:f2:20:9c:c8:18:d5:82:8c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 12:48:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b1f8da9cb0e362c424196b20e604e94a83bc850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:c6:a1:a2:83:bd:42:65:bd:c9:07:b8:80:
ca:34:20:10:2a:cc:77:00:aa:4a:7c:72:b4:8e:20:
0a:29:33:97:80:a7:4d:7c:0c:61:6b:ce:5e:40:5b:
8d:d9:17:7b:4b:9c:4b:3c:11:b6:92:36:7d:dd:ae:
a4:31:41:45:02:f7:20:1d:39:ea:94:98:ea:67:8f:
30:a3:08:cf:9a:74:d2:64:be:e9:12:f5:9d:d0:d8:
bc:43:df:78:09:c7:4c:73:47:b4:1f:4a:01:24:d0:
6f:d5:7d:53:0d:09:be:0f:16:56:f0:19:b8:f8:a1:
5b:38:4b:55:ee:20:df:46:1a:2c:aa:53:4f:96:e3:
9f:7b:56:fe:31:27:c4:88:5e:50:45:e4:f5:c1:b3:
64:43:63:25:5b:ec:4d:9f:cc:8d:8c:25:99:3b:8e:
91:a7:d9:71:47:3e:f2:02:93:91:25:36:d5:1a:3d:
32:d6:ad:bf:eb:55:86:f3:8f:5f:58:0d:0e:da:ba:
51:33:0b:24:51:8b:1d:50:77:e9:24:58:cb:8f:b1:
c1:57:88:81:ad:78:77:83:28:c1:d4:2c:c0:3a:bf:
81:b2:df:ae:a4:cc:8b:33:c6:c0:b2:63:f4:90:e5:
78:2a:0e:2b:ca:f1:cf:de:c8:71:67:12:84:40:73:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:8D:A9:CB:0E:36:2C:42:41:96:B2:0E:60:4E:94:A8:3B:C8:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.149.0/24
Signature Algorithm: sha256WithRSAEncryption
49:48:76:b7:f7:2f:ca:12:f9:20:23:a1:4e:10:bc:59:f2:19:
59:1c:d9:bd:78:63:de:50:66:54:9d:c3:86:db:20:eb:4d:20:
22:5d:dc:49:cf:72:2e:f3:60:2b:6a:4e:08:88:0f:72:0c:d9:
7b:ec:3a:92:5b:c4:25:54:4e:1f:8b:09:3c:8b:85:09:1d:c2:
ca:54:85:6f:cf:1e:4c:24:b2:f5:5e:e1:23:87:2f:27:d5:01:
99:11:79:f2:09:43:e4:d7:3c:3e:0d:83:16:8e:41:0c:71:c2:
f0:8d:1a:41:78:7e:1f:58:bb:57:36:7b:9b:3a:5b:51:c6:ad:
85:f9:72:c8:07:55:a5:5a:34:97:3e:7f:24:a0:7a:d2:18:45:
1a:e8:37:ff:2e:3f:b3:45:38:88:ee:44:b3:0f:fe:99:c1:bc:
ae:23:fc:29:f6:a5:07:4f:e2:98:8d:40:3d:87:97:48:f8:27:
9c:df:39:bd:4f:58:2d:fe:e9:01:2c:19:99:0a:69:a0:86:52:
7d:16:03:27:ea:56:99:51:f9:20:f9:81:93:26:9d:31:fa:d3:
c5:1c:2a:3e:c6:68:f2:a2:18:7c:a2:13:be:4d:40:81:d4:98:
6c:4e:ad:8d:74:a3:93:3d:31:9e:05:4a:3f:14:22:d8:b5:ca:
55:f6:d2:91
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYaS60CStl7Q8iCcyBjVgoxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMjI3MTI0ODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjFmOGRhOWNiMGUzNjJjNDI0MTk2YjIwZTYwNGU5NGE4M2JjODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PTGoaKDvUJlvckHuIDKNCAQKsx3
AKpKfHK0jiAKKTOXgKdNfAxha85eQFuN2Rd7S5xLPBG2kjZ93a6kMUFFAvcgHTnq
lJjqZ48wowjPmnTSZL7pEvWd0Ni8Q994CcdMc0e0H0oBJNBv1X1TDQm+DxZW8Bm4
+KFbOEtV7iDfRhosqlNPluOfe1b+MSfEiF5QReT1wbNkQ2MlW+xNn8yNjCWZO46R
p9lxRz7yApORJTbVGj0y1q2/61WG849fWA0O2rpRMwskUYsdUHfpJFjLj7HBV4iB
rXh3gyjB1CzAOr+Bst+upMyLM8bAsmP0kOV4Kg4ryvHP3shxZxKEQHMiLwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDsfjanLDjYsQkGWsg5gTpSoO8hQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzJlOTQ1
Ni0zN2MzLTQyNzQtYmMzMS02NGVlNDY0YjY0MDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMmU5NDU2
LTM3YzMtNDI3NC1iYzMxLTY0ZWU0NjRiNjQwNC8xL094LU5xY3NPTml4Q1FaYXlE
bUJPbEtnN3lGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwjiVMA0GCSqGSIb3DQEBCwUAA4IBAQBJSHa3
9y/KEvkgI6FOELxZ8hlZHNm9eGPeUGZUncOG2yDrTSAiXdxJz3Iu82Arak4IiA9y
DNl77DqSW8QlVE4fiwk8i4UJHcLKVIVvzx5MJLL1XuEjhy8n1QGZEXnyCUPk1zw+
DYMWjkEMccLwjRpBeH4fWLtXNnubOltRxq2F+XLIB1WlWjSXPn8koHrSGEUa6Df/
Lj+zRTiI7kSzD/6ZwbyuI/wp9qUHT+KYjUA9h5dI+Cec3zm9T1gt/ukBLBmZCmmg
hlJ9FgMn6laZUfkg+YGTJp0x+tPFHCo+xmjyohh8ohO+TUCB1JhsTq2NdKOTPTGe
BUo/FCLYtcpV9tKR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:46 2024 by rpki-client on console-ams.rpki-client.org