Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o6-mc9R5GfY0Ixe6SF2nXhijO7I.cer
File: o6-mc9R5GfY0Ixe6SF2nXhijO7I.cer (raw, json)
Hash identifier: Hyu1jHlsttY0DGq6MepBaKWFjka6PoZd3DCPCndtS0U=
Subject key identifier: A3:AF:A6:73:D4:79:19:F6:34:23:17:BA:48:5D:A7:5E:18:A3:3B:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0247BBA2BC663293A4B89E5931043
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/205679-b6fc-4624-8763-e435d1b858fb/1/o6-mc9R5GfY0Ixe6SF2nXhijO7I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/205679-b6fc-4624-8763-e435d1b858fb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.237.0/24
IP: 2a11:81c0::/29
Validation: Failed, certificate revoked on Wed 11 Oct 2023 07:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:24:7b:ba:2b:c6:63:29:3a:4b:89:e5:93:10:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3afa673d47919f6342317ba485da75e18a33bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2b:0a:79:74:52:f5:b9:9f:db:0e:e3:c4:ee:
2c:8b:ff:94:97:df:01:05:7c:9e:07:2a:19:b4:7c:
ae:e0:41:49:d4:91:50:b7:22:42:8d:44:98:45:86:
3e:48:0d:26:75:cb:61:9f:e5:1e:5a:13:e6:fd:cf:
7d:03:15:c0:af:6e:04:0a:c6:30:dd:36:c1:6a:b1:
ad:6d:45:b6:da:1a:41:48:fe:8b:97:f2:44:2d:23:
fb:ee:2d:5c:0d:50:3b:b0:30:3a:07:55:e7:95:fc:
66:7a:1d:07:b8:2e:0a:cb:df:fb:a0:6e:0a:bc:6b:
8f:b3:43:6c:78:ad:82:24:a1:b4:7e:1d:80:93:20:
1b:80:77:16:b2:be:4d:88:92:00:c5:3a:55:29:d7:
09:01:c5:69:60:80:c2:d3:60:4b:1d:00:b6:05:b4:
0c:a8:35:e9:e2:00:0c:76:37:0a:9d:41:3b:94:7c:
ba:89:8b:8d:8d:c1:be:34:3f:6e:be:28:d5:9a:26:
e3:20:9f:ae:60:b7:8b:4e:ab:0b:19:53:ad:bc:ba:
02:aa:7a:7a:bd:ed:cc:77:e1:4b:cb:2e:08:bf:0d:
8c:21:ca:61:6d:f0:7b:b4:c1:9e:d4:93:d5:ba:1d:
ba:f9:0a:0a:1a:06:31:64:e7:82:3f:3f:99:09:38:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AF:A6:73:D4:79:19:F6:34:23:17:BA:48:5D:A7:5E:18:A3:3B:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/205679-b6fc-4624-8763-e435d1b858fb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/205679-b6fc-4624-8763-e435d1b858fb/1/o6-mc9R5GfY0Ixe6SF2nXhijO7I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.237.0/24
IPv6:
2a11:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
1c:36:3b:c4:43:f8:93:ef:a4:60:89:94:26:41:42:47:f9:e0:
37:02:a9:6b:ea:dc:37:f7:62:ed:cc:a2:b4:33:6c:b3:b9:d3:
fc:f0:00:15:d7:34:57:5b:89:ca:5a:21:88:83:57:4b:22:01:
b0:11:a1:fb:8c:e2:63:07:24:3d:51:eb:33:ea:34:c9:08:27:
df:29:d5:89:9c:47:45:a7:06:50:9a:fe:8e:c6:03:3d:04:9f:
e2:bf:47:9f:bb:fa:bf:6b:a3:d6:71:e7:82:20:26:2b:db:0e:
e4:08:7f:ff:ad:4a:31:bd:50:76:ef:5d:9c:a8:8a:91:37:5a:
99:19:b5:8b:d2:d1:18:50:fb:0f:8f:5f:24:c5:b2:f7:b9:6e:
93:7c:4d:84:c8:5f:d9:b8:c6:c3:e3:35:c2:7e:08:4a:1c:68:
07:22:36:2b:af:3a:31:ef:23:7b:45:d9:32:b3:79:de:67:ce:
bc:a0:e9:39:09:08:b7:5c:90:d5:b8:c3:e0:fd:c2:35:2a:15:
6d:83:f8:c2:92:43:48:c6:82:73:94:b2:45:7d:26:ce:10:c3:
9e:80:89:28:f0:de:ad:20:c8:8f:91:bd:00:66:47:bc:35:73:
d6:e2:2b:cc:d8:4e:1a:54:e5:8b:27:91:80:d2:cd:3d:66:05:
4d:d5:89:cd
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVvsCR7uivGYyk6S4nlkxBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjMzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2FmYTY3M2Q0NzkxOWY2MzQyMzE3YmE0ODVkYTc1ZTE4YTMzYmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCsKeXRS9bmf2w7jxO4si/+Ul98B
BXyeByoZtHyu4EFJ1JFQtyJCjUSYRYY+SA0mdcthn+UeWhPm/c99AxXAr24ECsYw
3TbBarGtbUW22hpBSP6Ll/JELSP77i1cDVA7sDA6B1Xnlfxmeh0HuC4Ky9/7oG4K
vGuPs0NseK2CJKG0fh2AkyAbgHcWsr5NiJIAxTpVKdcJAcVpYIDC02BLHQC2BbQM
qDXp4gAMdjcKnUE7lHy6iYuNjcG+ND9uvijVmibjIJ+uYLeLTqsLGVOtvLoCqnp6
ve3Md+FLyy4Ivw2MIcphbfB7tMGe1JPVuh26+QoKGgYxZOeCPz+ZCTictwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKOvpnPUeRn2NCMXukhdp14YozuyMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzIwNTY3
OS1iNmZjLTQ2MjQtODc2My1lNDM1ZDFiODU4ZmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvMjA1Njc5
LWI2ZmMtNDYyNC04NzYzLWU0MzVkMWI4NThmYi8xL282LW1jOVI1R2ZZMEl4ZTZT
RjJuWGhpak83SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAH97tMA0EAgACMAcDBQMqEYHAMA0GCSqGSIb3
DQEBCwUAA4IBAQAcNjvEQ/iT76RgiZQmQUJH+eA3Aqlr6tw392LtzKK0M2yzudP8
8AAV1zRXW4nKWiGIg1dLIgGwEaH7jOJjByQ9Uesz6jTJCCffKdWJnEdFpwZQmv6O
xgM9BJ/iv0efu/q/a6PWceeCICYr2w7kCH//rUoxvVB2712cqIqRN1qZGbWL0tEY
UPsPj18kxbL3uW6TfE2EyF/ZuMbD4zXCfghKHGgHIjYrrzox7yN7Rdkys3neZ868
oOk5CQi3XJDVuMPg/cI1KhVtg/jCkkNIxoJzlLJFfSbOEMOegIko8N6tIMiPkb0A
Zke8NXPW4ivM2E4aVOWLJ5GA0s09ZgVN1YnN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:41 2024 by rpki-client on console-ams.rpki-client.org