Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
File: oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer (raw, json)
Hash identifier: BmlHYdendiebtY2/rsS2f7h1x1M9I2vd4QiZT5r2BKs=
Subject key identifier: A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94E3648786C9BFFDC3AE4E12A583CFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:33:15 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 29687
IP: 77.71.0.0/17
IP: 185.186.136.0/22
Validation: Failed, certificate revoked on Thu 21 Mar 2024 13:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:36:48:78:6c:9b:ff:dc:3a:e4:e1:2a:58:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:68:22:37:ac:1c:25:cf:63:9d:f1:c8:04:fe:
da:13:ba:d3:1b:26:9d:dd:9c:61:b4:6c:a2:6d:c7:
4f:75:dc:e2:74:2f:6e:a6:41:5d:87:7c:a8:20:a7:
d9:a1:68:ca:89:6f:ec:f5:5d:ea:de:12:9a:26:dd:
f9:d6:24:05:ec:09:83:d8:59:48:53:93:dd:0e:f2:
d5:b7:ad:01:75:7b:eb:53:01:e0:68:8b:f9:8b:3a:
15:10:44:ea:f0:85:46:88:72:f7:4e:82:01:e8:09:
90:25:78:9b:5a:7b:1c:11:66:fe:61:1b:01:00:f6:
c2:2b:9f:eb:ff:48:cc:e1:2b:bf:53:95:cb:97:30:
41:62:b1:a9:e6:a9:aa:01:68:69:cd:b0:4c:2c:0d:
a8:7f:8e:c3:a2:10:6a:c4:35:3f:8b:54:ee:c8:af:
0a:aa:da:0a:46:45:f8:6d:e4:c9:29:79:0a:42:4c:
98:77:9c:84:4c:e8:ff:fd:a1:cd:7c:d0:01:6d:b8:
e7:6c:09:67:1d:08:02:fa:de:fa:41:96:6e:17:39:
20:d4:0f:9e:fa:dd:01:03:49:c1:de:49:74:26:a1:
57:c4:e2:55:8f:86:60:ab:36:3f:6d:6b:9d:7d:5c:
00:d6:46:63:91:bb:cd:db:81:a4:30:0d:cb:ff:26:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0/17
185.186.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29687
Signature Algorithm: sha256WithRSAEncryption
5d:d8:8c:f5:a7:df:01:99:55:7c:69:4d:d1:f2:87:ae:d8:52:
fb:2b:b0:9f:a7:be:74:87:4c:7b:46:4c:40:0f:fc:c5:91:b1:
96:cb:fe:1c:26:0f:7a:e6:fc:10:ab:01:af:c1:dc:bd:ce:cc:
c5:01:d3:ed:f9:03:2f:fe:54:82:c4:00:7c:03:4e:96:44:2a:
19:2c:9a:97:6d:48:9f:55:87:02:cf:0a:51:9d:50:dd:4f:e3:
29:01:b2:7a:b0:ee:4f:fe:e9:eb:e5:50:d7:0b:68:94:37:3a:
f7:a8:22:86:cb:9b:2f:0f:18:61:86:f5:8b:7d:c9:46:3a:62:
e2:39:bb:41:e4:c7:ff:9c:37:b3:2c:a1:6d:00:31:0f:e5:bb:
d3:bb:64:60:b7:ad:fd:10:60:c1:d4:ee:05:bd:94:4a:49:bf:
f3:2e:69:bf:33:f6:da:64:90:1a:6b:74:38:9f:e3:c2:70:2f:
af:cc:c4:e9:26:3e:e3:0e:54:b8:14:7a:9c:b1:4d:87:5b:4b:
f1:21:fa:f5:11:7f:99:8d:b9:10:b3:35:84:0a:a5:36:0a:7c:
4b:fd:f3:1e:bf:04:b3:a6:97:20:2d:c0:7d:9e:b7:a0:06:95:
56:fc:7d:8c:82:26:8c:34:b9:1a:14:c4:14:b0:20:96:e2:7b:
4e:03:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:44 2024 by rpki-client on console-ams.rpki-client.org