Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oJ7_vQsym3ruvRr7yl5zY_forV0.cer
File: oJ7_vQsym3ruvRr7yl5zY_forV0.cer (raw, json)
Hash identifier: RHa2iJR+6lh/v015JtforS43a5nt27I1U5HWYqYUU7I=
Subject key identifier: A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01887D9D936F7A32A226D52FD2824A2A542C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/A09EFFBD0B329B7AEEBD1AFBCA5E7363F7E8AD5D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 02 Jun 2023 19:37:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.126.105.0/24
Validation: Failed, certificate revoked on Wed 06 Dec 2023 06:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:9d:93:6f:7a:32:a2:26:d5:2f:d2:82:4a:2a:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 19:37:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a09effbd0b329b7aeebd1afbca5e7363f7e8ad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:6c:dc:52:a8:0a:b0:df:c7:08:af:13:f5:
8c:b2:3d:b5:d1:38:50:a9:3e:8d:6a:39:37:aa:da:
4a:b7:47:d6:b1:05:fc:c3:2e:1a:49:b0:68:f0:ce:
0e:78:ac:b5:dc:19:4a:5f:4b:63:f9:11:70:84:24:
05:cb:1f:f2:b4:56:2c:7e:51:1a:83:a5:9f:27:09:
7a:5e:42:a6:da:05:de:17:cf:be:1b:21:99:56:75:
a0:40:83:43:94:1f:81:2b:f3:7c:e6:b6:6d:aa:bb:
30:94:23:ca:e3:c3:77:34:aa:ce:c3:6a:f4:00:f5:
07:6a:54:1d:32:bc:44:57:a2:ae:67:ad:df:c5:cc:
03:c9:01:a1:ca:56:c5:d3:d6:24:12:a9:bb:fc:3c:
03:37:e3:3a:a8:11:b8:ea:23:6b:58:b9:7c:54:df:
d3:e6:3d:18:ee:c6:21:65:a3:3d:10:df:09:dd:a0:
fb:af:df:e3:8b:6d:e3:a7:92:e9:5f:39:6d:d2:66:
8c:12:27:44:31:42:4a:57:d4:68:2b:31:69:6f:65:
49:7a:50:22:41:63:8d:ad:26:a4:25:43:d1:81:9f:
3d:d6:b8:42:a0:db:8f:0f:1f:a7:96:47:0c:e8:ec:
b0:eb:6b:45:4e:db:66:54:53:35:87:a5:25:11:38:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:FF:BD:0B:32:9B:7A:EE:BD:1A:FB:CA:5E:73:63:F7:E8:AD:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/644ca451-4ede-4f68-a705-2a2a510e28f6/0/A09EFFBD0B329B7AEEBD1AFBCA5E7363F7E8AD5D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.105.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7b:04:c7:56:4e:35:f6:48:ae:27:59:ce:72:aa:0c:96:80:
90:90:d0:63:9d:f3:1e:31:c0:f8:09:7d:04:9d:c6:aa:25:c0:
8d:79:6f:70:0d:81:66:80:86:13:6b:f5:b0:d2:bd:e1:02:da:
45:40:9a:3d:1b:d7:09:6b:b6:d6:ec:2f:8c:3d:dd:9b:ad:c0:
94:71:42:e4:11:47:27:81:2d:c1:c6:df:2c:04:15:20:df:ec:
19:52:92:2f:6b:ef:b0:e4:59:97:37:d4:95:b6:e6:99:21:a9:
86:56:24:df:c0:b2:a1:fe:40:d2:ba:b3:10:6a:8f:52:12:3a:
4a:a9:d1:b8:00:08:84:f1:83:4c:ea:50:4b:7c:94:9d:30:09:
df:21:7a:98:e1:f8:1e:8a:da:da:b8:f0:c5:19:b2:ef:b6:ad:
81:dc:bb:55:b0:f4:11:87:04:92:f4:bf:d5:cc:c1:73:8c:f3:
79:b8:23:7a:ae:35:a8:86:e8:3b:cf:43:59:ae:b3:98:7a:df:
32:00:52:76:1d:49:7f:1c:25:32:16:84:87:ba:cb:92:f5:ee:
8b:02:e9:9b:bf:23:19:fa:f0:ef:fb:9f:1a:d9:65:c7:8a:68:
b7:d6:1d:0d:a8:f2:1c:1d:ea:00:c7:41:42:e1:f7:5c:a5:c8:
56:06:9a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:33 2024 by rpki-client on console-fra.rpki-client.org