Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o4uxKS902ZCtNZTChcTvCBHJ440.cer
File: o4uxKS902ZCtNZTChcTvCBHJ440.cer (raw, json)
Hash identifier: jx6zqh3OtJOPl72xWgeOHkG84Bdm3A2zE3ribJXa0xc=
Subject key identifier: A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D898934DBB936D4D98C11246904591A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 21073
IP: 80.85.32.0/20
IP: 185.94.92.0/22
IP: 2a03:4aa0::/29
Validation: Failed, certificate revoked on Mon 20 Mar 2023 07:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:89:34:db:b9:36:d4:d9:8c:11:24:69:04:59:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a38bb1292f74d990ad3594c285c4ef0811c9e38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:8d:fc:b7:56:97:82:62:a5:c8:c8:ec:08:
e2:d4:5e:07:23:14:b9:9c:6c:29:54:9c:4d:29:87:
0a:5b:7f:ea:b5:7a:7b:62:d2:a1:d9:f6:6b:b5:e2:
1a:b0:4d:36:70:25:e6:56:a4:5d:f1:08:ff:f4:dd:
af:58:ab:e4:bd:43:1f:a1:fb:48:f7:48:8b:f4:9c:
55:f2:b6:71:e1:01:40:c5:b2:c8:5b:81:1b:72:79:
26:dd:71:ac:03:10:0e:4a:9c:8b:4c:83:bc:a7:85:
80:dc:a1:ed:25:50:ee:77:56:64:96:ff:ea:86:3f:
55:61:d0:7e:b4:5b:18:8b:09:cc:74:8b:c1:2d:2f:
13:14:35:5f:0f:f5:c2:ae:f1:30:6e:8c:0a:00:8b:
92:bd:ad:f7:66:c9:3a:37:15:7a:ec:c9:e7:d0:96:
36:1e:9a:9f:b6:f2:da:2e:d6:bb:3c:e8:f1:4d:5f:
8c:44:a2:a8:c1:ed:96:34:34:17:82:a9:77:d6:bd:
84:9b:41:37:2e:eb:fd:16:05:d5:91:97:c0:bc:2a:
97:2f:f7:93:c0:63:c1:5c:30:c6:64:17:c7:51:f1:
91:3b:63:db:16:89:0a:11:57:2d:a2:8f:cb:f3:7f:
33:fc:4c:ff:24:6a:a9:e8:48:d0:fc:d5:48:65:81:
93:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:B1:29:2F:74:D9:90:AD:35:94:C2:85:C4:EF:08:11:C9:E3:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/166673-0f03-401d-a745-4d5df3230c01/1/o4uxKS902ZCtNZTChcTvCBHJ440.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.85.32.0/20
185.94.92.0/22
IPv6:
2a03:4aa0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21073
Signature Algorithm: sha256WithRSAEncryption
25:f0:e7:95:03:86:84:00:da:90:da:21:f1:26:42:bb:32:01:
a0:61:23:38:56:40:45:a9:6b:37:f8:b7:72:54:ce:10:49:4a:
0d:d6:16:fa:91:57:c2:d7:7c:53:3d:59:a9:b7:ed:56:15:b6:
6e:76:39:33:27:8e:2c:03:0c:b4:79:6e:51:95:0f:bd:f6:19:
78:58:7c:9a:16:6b:6d:c3:38:f6:cb:2c:cf:f8:22:0c:94:57:
e3:88:0b:ca:b1:d7:ef:38:93:f5:14:97:fd:29:48:ae:75:8a:
65:f7:d5:25:f5:84:4a:73:d1:20:f3:08:f3:ed:9d:4d:df:41:
4f:34:c7:5e:52:68:0f:16:86:d1:64:5b:63:a0:01:40:41:d5:
93:2a:c5:ec:70:8c:ae:48:ff:c8:f9:61:e4:60:0c:62:61:c0:
b2:f9:04:87:c5:14:3b:0c:49:f3:c3:f7:2c:66:40:02:eb:d2:
88:b2:9d:3a:63:5f:f7:dd:f8:dc:37:cc:f2:0c:51:50:a2:22:
7f:67:0f:df:6d:e8:50:a0:62:42:a0:0e:52:2d:05:7a:66:ce:
79:15:24:ef:a8:1f:dd:72:ba:28:82:25:29:2d:86:ab:64:a7:
b3:24:ea:b5:ce:54:c8:6b:cf:3b:f4:1f:b4:0a:f0:2b:b6:f9:
39:01:da:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:41 2024 by rpki-client on console-ams.rpki-client.org