Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TAL5PCWH3II2a1Bgb-SFLk96Gr4.cer
File: TAL5PCWH3II2a1Bgb-SFLk96Gr4.cer (raw, json)
Hash identifier: kXp+JGn9IqT5icJ1RlW198PYgOkeDqDpi7Rq7nlLhvA=
Subject key identifier: 4C:02:F9:3C:25:87:DC:82:36:6B:50:60:6F:E4:85:2E:4F:7A:1A:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194FF9B93608E6A0E70E21266DBF8F07A9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://oto.wakuwaku.ne.jp/pki/h/1/4C02F93C2587DC82366B50606FE4852E4F7A1ABE.mft
caRepository: rsync://oto.wakuwaku.ne.jp/pki/h/1/
Notify URL: https://oto.wakuwaku.ne.jp/pki/oshirase.xml
Certificate not before: Thu 13 Feb 2025 13:59:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.0.19.0/24
IP: 185.155.75.0/24
IP: 2001:7f8:2::/48
IP: 2a13:c000::/29
Validation: Failed, certificate revoked on Tue 25 Feb 2025 14:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:9b:93:60:8e:6a:0e:70:e2:12:66:db:f8:f0:7a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 13 13:59:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c02f93c2587dc82366b50606fe4852e4f7a1abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:e0:37:8a:1b:4c:fc:41:1a:0c:38:52:f8:
4a:7c:f9:68:f4:83:46:3c:6b:0f:81:c2:db:44:d2:
e7:d7:a4:14:85:7d:4d:5f:9e:00:e9:7c:29:37:dc:
80:bb:40:05:81:6d:26:4a:3a:0b:7a:9a:83:7c:a0:
07:81:12:35:cd:43:6c:04:51:82:6c:e5:93:56:1c:
91:63:47:c6:38:9a:74:d4:f4:33:ea:4c:73:89:61:
2e:f8:44:b5:16:c3:6c:90:8b:54:93:4e:14:ef:4c:
eb:2a:e0:f4:3e:65:70:bc:b1:b8:3e:6f:9a:08:c0:
33:c7:99:59:c7:1f:9d:af:d5:51:19:f9:ff:f3:91:
11:01:ca:c3:92:4f:d3:32:1c:cf:cd:ac:17:47:b8:
e0:a8:da:bd:bd:f8:72:be:bb:cb:4d:09:16:6f:05:
76:06:d8:c2:70:1a:b8:4d:a1:25:61:99:26:31:03:
00:de:e9:77:70:77:80:09:16:32:11:87:25:12:eb:
15:82:cc:1e:50:8e:18:63:ac:a3:fa:9c:f3:8f:d4:
71:a5:a5:88:29:55:bf:06:05:f1:13:2a:63:5c:dc:
76:16:a6:e8:64:ef:1e:5f:b7:5f:a9:42:c5:d9:3b:
d1:13:6c:0a:e4:e6:61:e8:fc:37:c3:75:d3:bd:fe:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:F9:3C:25:87:DC:82:36:6B:50:60:6F:E4:85:2E:4F:7A:1A:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://oto.wakuwaku.ne.jp/pki/h/1/
RPKI Manifest - URI:rsync://oto.wakuwaku.ne.jp/pki/h/1/4C02F93C2587DC82366B50606FE4852E4F7A1ABE.mft
RPKI Notify - URI:https://oto.wakuwaku.ne.jp/pki/oshirase.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.0.19.0/24
185.155.75.0/24
IPv6:
2001:7f8:2::/48
2a13:c000::/29
Signature Algorithm: sha256WithRSAEncryption
39:48:23:a8:4a:6d:d7:14:88:75:58:cd:4d:e5:ba:70:da:31:
d5:14:ee:d5:39:a5:50:bb:f9:59:72:38:f0:06:7e:88:e8:ff:
70:32:6d:18:27:f0:77:8d:e0:28:cb:df:35:40:4a:e9:41:e8:
59:d2:45:a3:70:dc:4f:4f:53:8d:c2:54:8c:eb:9d:21:20:e9:
ea:4b:1d:4d:7d:3d:63:07:b0:51:cc:ba:0d:0e:2d:ec:a5:7a:
d7:20:dc:a1:fa:62:26:5b:6a:57:e4:a0:c9:df:5f:8e:df:94:
ff:35:2d:79:7a:2e:79:23:13:d8:54:a9:37:0c:ad:b2:c5:9a:
58:4b:62:b6:0e:85:c2:e9:49:14:57:27:37:e4:8d:32:e5:32:
9c:7f:63:8e:41:d0:04:36:3f:39:a5:13:0b:9e:86:e0:ce:e8:
d9:65:bd:b2:06:fd:27:5e:97:5a:94:17:7c:93:7e:30:87:94:
99:82:98:32:ad:e9:9f:0b:2a:34:b3:13:24:8a:6e:89:c7:0c:
8e:90:30:f6:07:cc:29:42:b8:b7:4d:31:75:68:72:d2:0a:28:
42:54:9c:43:d8:ed:18:6d:1a:75:64:64:40:70:0d:1f:25:a7:
40:07:39:21:80:43:84:5f:9a:bc:16:68:2d:86:59:a6:75:ac:
4a:68:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:43:29 2025 by rpki-client