Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer
File: gOmihG7BSmfSw-d1YUpXTBDs0Ks.cer (raw, json)
Hash identifier: sP7webZYyUUyizCafa1ICqmxx9m1wfkcFDe9eHJLse8=
Subject key identifier: 80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D53BDADB6DCC86B676229DB1329E393
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 18:17:00 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 89.107.9.0/24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 09:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:53:bd:ad:b6:dc:c8:6b:67:62:29:db:13:29:e3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 18:17:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80e9a2846ec14a67d2c3e775614a574c10ecd0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:b8:10:95:8e:66:3c:4d:8d:e8:65:bd:3a:
ea:0a:08:dd:44:3d:b6:25:a8:0a:34:2f:1a:e3:39:
05:0e:b9:8b:f0:c8:7f:82:c9:19:92:ed:9b:4a:ed:
81:09:9e:8f:93:51:b4:9a:27:b0:80:85:44:75:18:
81:27:97:1d:40:90:ba:8c:21:42:2b:d2:9c:cc:aa:
97:71:74:b6:f3:11:7f:0b:ad:b2:e7:7d:a4:37:7e:
7a:eb:9a:38:6f:00:7c:06:12:51:81:65:49:b0:c6:
fd:0a:ea:e7:da:a9:cb:73:39:6c:72:29:46:e2:69:
15:b2:5f:6a:c1:2d:c2:2a:36:99:8a:93:c8:9f:b6:
4b:5a:be:c9:a9:eb:70:55:8a:0a:95:84:01:f8:21:
13:ef:1d:8f:79:12:8f:75:1e:7c:1d:7d:8f:87:e2:
65:38:2b:73:62:db:b8:c3:6b:be:d9:33:b6:74:4b:
cb:cf:a6:9e:cf:f1:6c:3d:06:33:09:b8:51:3f:52:
38:3d:09:e3:0e:a7:2b:02:89:e2:f6:bb:c9:aa:d5:
c7:69:a1:b9:6f:c8:59:98:5e:ee:0b:63:e7:f3:21:
83:82:af:da:28:22:c8:b1:50:6f:0b:bb:c5:fa:e7:
0d:a6:5d:79:33:99:62:e1:f3:8f:29:c2:c5:c1:32:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:A2:84:6E:C1:4A:67:D2:C3:E7:75:61:4A:57:4C:10:EC:D0:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/7bf94abc-3456-4a7d-8984-82fcc576ef8b/0/80E9A2846EC14A67D2C3E775614A574C10ECD0AB.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:10:0c:fc:a3:18:6a:cd:57:59:dc:b2:b7:67:07:97:77:18:
55:18:fd:07:99:b6:37:4d:02:73:3c:12:9d:cb:bc:bc:b3:03:
47:08:a0:a3:fc:c6:63:cf:0e:da:86:b9:e0:e0:0f:8f:c0:87:
bf:7d:c8:fc:a9:5e:c2:fd:f2:94:c4:a8:e4:2f:e9:6d:f4:c6:
85:ea:48:d9:2c:4c:6f:1e:ed:c9:19:cb:8f:02:49:77:03:87:
48:f1:d6:67:89:94:5c:5c:59:68:56:57:7a:39:d1:34:49:3a:
f5:05:5c:80:e8:21:aa:62:b5:56:f5:ad:41:61:52:f2:f0:90:
67:09:68:bb:17:85:5e:09:ad:33:fe:d7:ce:05:2d:e4:8b:83:
12:af:f3:45:87:67:c3:a5:bd:77:3e:4c:de:73:ab:26:28:5d:
fd:0d:7c:d6:44:bf:c5:78:01:92:56:97:0d:f3:e9:e1:d0:b4:
94:00:56:ab:62:35:9a:f2:ac:dd:05:41:ae:27:50:71:80:1a:
4f:ce:1c:11:1d:da:46:14:e3:53:9d:72:1b:e6:b8:08:8d:34:
be:97:55:8e:fe:43:70:2c:3a:ae:09:cc:b0:05:f7:74:d5:8a:
26:b9:33:99:ee:ef:40:3a:f5:fb:fe:9e:fb:2e:97:fb:00:28:
be:68:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:25 2024 by rpki-client on console-fra.rpki-client.org