Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oLqAsMghSZVadTRDhEBBgIRF3a8.cer
File: oLqAsMghSZVadTRDhEBBgIRF3a8.cer (raw, json)
Hash identifier: csqFljxDcnaNNCvC8iI/KUs8kGyf0+UrKic33ko2xgU=
Subject key identifier: A0:BA:80:B0:C8:21:49:95:5A:75:34:43:84:40:41:80:84:45:DD:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856BD119F5ADAD414BA36CAB4A941407AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/oLqAsMghSZVadTRDhEBBgIRF3a8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 05:32:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.130.232.0/22
Validation: Failed, certificate revoked on Mon 30 Jan 2023 12:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d1:19:f5:ad:ad:41:4b:a3:6c:ab:4a:94:14:07:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ba80b0c82149955a753443844041808445ddaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:1a:e7:82:71:bd:5a:27:9c:be:94:b0:6b:
2c:d5:07:f6:2c:61:a7:e9:f0:7e:5e:85:60:e2:77:
4e:9f:c4:4e:bd:3e:53:3c:f8:2d:5c:19:44:28:a4:
f9:0c:f6:15:17:58:2a:5d:9c:61:4f:3b:5f:f2:23:
9d:13:f2:78:9c:b7:10:bd:bc:bf:f0:60:80:85:58:
92:2d:34:1f:1b:52:c7:3f:66:0e:06:b3:c4:1c:dc:
be:ae:bb:d3:d6:26:74:77:02:65:36:9e:e6:51:3a:
96:2c:2d:7b:1e:dd:a3:69:74:02:14:74:82:30:c1:
82:2e:de:eb:39:fc:65:38:2f:b3:e3:94:55:00:59:
0d:86:00:c8:32:14:e0:a7:d8:e3:9e:f3:21:df:e3:
89:f6:2f:7a:78:28:2d:d1:ca:d5:59:48:14:f8:5b:
c1:e9:f3:92:ef:af:2d:45:68:1f:7b:f5:ab:01:33:
95:6f:3e:c7:82:47:e8:2e:81:27:0d:7e:19:5d:c7:
88:93:1d:dc:5f:be:19:f7:e4:7d:a7:9a:91:e5:95:
fd:20:e4:a6:2b:6b:6a:5c:9b:fc:6f:ec:82:f0:71:
74:98:82:fa:93:05:cb:13:d2:b3:cc:37:45:32:7e:
f5:26:28:63:a4:cf:0c:d6:47:a0:f9:08:97:e7:ee:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BA:80:B0:C8:21:49:95:5A:75:34:43:84:40:41:80:84:45:DD:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/oLqAsMghSZVadTRDhEBBgIRF3a8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.232.0/22
Signature Algorithm: sha256WithRSAEncryption
10:8c:10:d8:0c:75:e5:99:50:f0:7c:f6:18:19:0c:7b:a8:fc:
74:57:ca:05:be:8f:7c:69:cd:2b:59:b4:2f:09:d0:40:8a:80:
30:56:39:bb:13:71:29:7d:30:8e:74:40:32:94:a3:df:56:14:
ff:6f:5a:73:80:e8:90:23:b8:3e:15:0c:9b:2a:80:f9:ba:06:
a0:57:cb:09:bc:4b:42:eb:7d:eb:54:7a:65:d5:e9:4a:82:34:
ca:4d:a3:b4:26:42:de:e0:05:71:83:62:96:99:47:55:06:ba:
38:85:8d:11:13:ac:5e:58:16:67:4f:25:52:70:d0:d3:e9:4d:
c1:7b:8c:f2:cf:7b:9c:32:3e:ac:e3:dc:b2:2a:22:c6:ea:9c:
2b:db:ed:78:4c:56:e6:dd:24:4f:81:64:e1:10:0d:db:00:76:
1c:bc:5b:ed:80:37:3b:bb:2f:7a:5d:f7:f8:8f:02:fe:5a:17:
cf:1d:ac:2c:5e:85:df:46:98:d2:2f:59:ae:07:37:c2:4e:da:
df:c5:18:1d:ad:bd:69:fc:23:f8:b3:3e:5a:50:b7:7c:ef:94:
4d:93:57:80:a4:29:fc:1b:e1:14:57:1b:3f:18:cb:40:30:82:
c9:d5:aa:31:72:ed:39:65:07:1f:89:20:f4:bd:65:a7:08:e0:
5a:86:37:86
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYVr0Rn1ra1BS6Nsq0qUFAesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDUzMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGJhODBiMGM4MjE0OTk1NWE3NTM0NDM4NDQwNDE4MDg0NDVkZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs0a54JxvVonnL6UsGss1Qf2LGGn
6fB+XoVg4ndOn8ROvT5TPPgtXBlEKKT5DPYVF1gqXZxhTztf8iOdE/J4nLcQvby/
8GCAhViSLTQfG1LHP2YOBrPEHNy+rrvT1iZ0dwJlNp7mUTqWLC17Ht2jaXQCFHSC
MMGCLt7rOfxlOC+z45RVAFkNhgDIMhTgp9jjnvMh3+OJ9i96eCgt0crVWUgU+FvB
6fOS768tRWgfe/WrATOVbz7HgkfoLoEnDX4ZXceIkx3cX74Z9+R9p5qR5ZX9IOSm
K2tqXJv8b+yC8HF0mIL6kwXLE9KzzDdFMn71JihjpM8M1keg+QiX5+5NfwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKC6gLDIIUmVWnU0Q4RAQYCERd2vMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2FhMTY0
Zi1lNWFkLTQyMzctOWJiOS0wZTU3YmQ5MmI3OTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvYWExNjRm
LWU1YWQtNDIzNy05YmI5LTBlNTdiZDkyYjc5OC8xL29McUFzTWdoU1pWYWRUUkRo
RUJCZ0lSRjNhOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLYLoMA0GCSqGSIb3DQEBCwUAA4IBAQAQjBDY
DHXlmVDwfPYYGQx7qPx0V8oFvo98ac0rWbQvCdBAioAwVjm7E3EpfTCOdEAylKPf
VhT/b1pzgOiQI7g+FQybKoD5ugagV8sJvEtC633rVHpl1elKgjTKTaO0JkLe4AVx
g2KWmUdVBro4hY0RE6xeWBZnTyVScNDT6U3Be4zyz3ucMj6s49yyKiLG6pwr2+14
TFbm3SRPgWThEA3bAHYcvFvtgDc7uy96Xff4jwL+WhfPHawsXoXfRpjSL1muBzfC
TtrfxRgdrb1p/CP4sz5aULd875RNk1eApCn8G+EUVxs/GMtAMILJ1aoxcu05ZQcf
iSD0vWWnCOBahjeG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:43 2024 by rpki-client on console-ams.rpki-client.org