Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oNsSTvNcIiFniUpaXpNwSoEcNKw.cer
File: oNsSTvNcIiFniUpaXpNwSoEcNKw.cer (raw, json)
Hash identifier: 7gW5ABJPkznNAG4DfXj4kUOf72AOr5ToW2LyiXZsaLc=
Subject key identifier: A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856DF785D27F8E6C01D447A3F5E11E1EC1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/oNsSTvNcIiFniUpaXpNwSoEcNKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 15:33:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 20926
AS: 35152
AS: 200411
IP: 79.98.16.0/21
IP: 80.74.64.0/20
IP: 84.239.64.0/18
IP: 141.101.56.0/21
IP: 185.10.176.0/22
IP: 185.47.240.0/22
IP: 185.137.254.0/23
IP: 2a00:6900::/29
IP: 2a03:5d40::/32
Validation: Failed, certificate revoked on Fri 01 Dec 2023 08:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:f7:85:d2:7f:8e:6c:01:d4:47:a3:f5:e1:1e:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:33:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0db124ef35c222167894a5a5e93704a811c34ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:38:e5:6c:79:3d:10:6a:46:3f:ee:ae:ea:
79:b7:90:6b:3d:1b:9c:da:43:a8:b7:2f:db:1b:62:
8c:0c:04:fe:60:8d:65:e0:69:07:0d:5c:95:ca:06:
5b:01:97:76:60:db:07:b5:40:88:69:08:94:ad:02:
c2:33:72:43:80:d2:1b:6f:11:ce:76:7f:85:ca:3d:
4f:98:e5:fd:a5:dc:55:81:ea:1a:a3:0f:08:91:94:
42:c2:bd:71:ce:74:37:bb:e5:70:5c:6b:26:37:9d:
02:36:30:27:28:79:38:a3:f2:40:48:d2:bb:79:1b:
be:69:a0:85:6a:0d:68:1c:ba:52:dc:f0:05:6f:91:
c1:c4:45:f5:51:70:d1:e1:ab:f0:ec:cd:11:bb:48:
fa:d8:93:0e:83:51:77:05:44:45:fa:4c:28:53:56:
9f:f6:0c:ea:9c:fe:06:f7:c7:d2:a1:80:4d:c8:39:
6c:6a:88:2c:79:d2:73:98:2f:65:5e:ed:d0:6c:01:
dd:2f:b8:89:4d:0e:64:39:89:94:fd:c3:c4:7b:74:
3c:46:f3:51:a4:56:1c:9c:e8:bc:cd:09:b9:bc:fc:
c4:48:1d:a7:1a:d4:ba:12:da:02:95:24:8a:7f:63:
0d:fc:15:a0:64:9e:f4:33:aa:b7:cf:9b:82:4c:ab:
a4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DB:12:4E:F3:5C:22:21:67:89:4A:5A:5E:93:70:4A:81:1C:34:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2dec93-7b0a-4614-a059-f7e092ce2170/1/oNsSTvNcIiFniUpaXpNwSoEcNKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.16.0/21
80.74.64.0/20
84.239.64.0/18
141.101.56.0/21
185.10.176.0/22
185.47.240.0/22
185.137.254.0/23
IPv6:
2a00:6900::/29
2a03:5d40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20926
35152
200411
Signature Algorithm: sha256WithRSAEncryption
60:e8:4c:ef:8c:0b:ab:23:d0:fe:06:5d:9e:26:fa:54:e5:f0:
6e:f6:6c:d4:c2:ee:c8:4d:8b:41:f4:47:0e:a5:3c:3f:20:42:
64:39:68:51:56:ff:31:e1:dc:95:c0:b1:86:6e:3e:0e:bc:e0:
99:f3:07:04:8e:e2:97:10:7f:66:e0:93:36:de:17:fb:d1:fd:
7d:21:d4:bb:05:2b:47:bd:05:be:8c:c3:24:08:b9:fc:a2:4c:
5a:8a:d9:39:b1:ed:4d:9d:d5:1b:4a:70:be:1e:1f:c7:34:3d:
07:39:4a:0f:75:2e:0c:9a:20:4b:1d:17:0e:17:07:4f:58:09:
bc:c5:cd:3f:b4:1f:02:a9:b0:34:ac:c2:2e:60:06:78:31:70:
c6:22:f8:1a:8b:02:9b:d7:15:b3:1f:f3:bd:fb:36:88:68:96:
39:bb:99:84:a4:84:06:57:d3:8d:41:dc:2b:bf:7a:c1:17:93:
89:25:34:c0:8d:34:e4:ca:55:14:f9:40:ab:16:7d:4f:27:b5:
38:cc:6d:77:13:14:e7:a7:e7:fa:7f:50:f0:19:bd:e3:b7:fe:
fa:a9:f6:57:5b:9a:73:79:9f:01:c6:82:3d:50:81:49:66:b0:
7e:4d:07:93:d2:10:e7:6f:ff:f2:8a:35:8c:57:1c:af:55:05:
ab:84:d1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:43 2024 by rpki-client on console-ams.rpki-client.org