Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.cer
File: oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.cer (raw, json)
Hash identifier: fEcGvPAxC9Getmao+M8HoRImRd3uFYRGw+YVzpyb0oQ=
Subject key identifier: A0:E7:09:FE:6C:50:18:B6:4A:AB:F1:54:0E:73:D9:EE:D4:9D:B0:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857169137BF4880C09B40C7DE349438CD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:36:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.201.14.0/24
IP: 2a11:2340::/29
Validation: Failed, certificate revoked on Wed 04 Oct 2023 07:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:13:7b:f4:88:0c:09:b4:0c:7d:e3:49:43:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:36:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0e709fe6c5018b64aabf1540e73d9eed49db0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:38:33:56:14:6e:5e:97:64:c4:43:28:47:
6c:4b:65:ab:49:31:af:34:f1:be:6b:48:ee:8b:29:
15:ad:37:1e:c1:f7:ec:6a:60:d4:dd:6f:b9:30:45:
a4:ad:5c:de:85:9b:20:5e:50:b6:1d:c7:0c:d8:a4:
52:2d:dc:fc:bc:b0:c0:21:ff:e9:cc:9e:1b:12:f8:
d0:ca:ba:d2:60:6c:b2:f0:bf:7c:92:ca:00:ea:ef:
62:65:12:f2:ea:93:60:54:d0:79:ca:11:dc:68:65:
5a:cd:de:db:93:28:65:a0:ca:69:71:77:f4:ba:75:
17:c3:40:3d:0b:0c:14:07:35:d2:0b:55:a0:55:f2:
50:53:7d:63:a9:16:09:4d:63:05:89:2c:f1:eb:b9:
7b:17:13:16:7f:dd:fd:ae:d6:e0:ef:70:63:23:af:
9c:95:4e:91:d2:59:24:48:06:4e:08:d2:60:62:2c:
30:b9:bd:64:4b:81:23:29:bd:db:b8:fb:32:0f:b3:
61:65:89:db:91:80:42:a9:9c:42:33:e1:86:e7:74:
be:7d:fd:63:7f:b0:5d:66:f1:7f:a6:74:6b:6b:d6:
be:dc:ae:61:e8:02:2e:f1:08:c3:aa:13:e7:1b:d0:
30:15:ad:3a:e1:4c:1c:2e:58:4e:7a:70:5e:fe:05:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E7:09:FE:6C:50:18:B6:4A:AB:F1:54:0E:73:D9:EE:D4:9D:B0:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/097364-4724-44d2-bc11-91949b389e42/1/oOcJ_mxQGLZKq_FUDnPZ7tSdsOI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.14.0/24
IPv6:
2a11:2340::/29
Signature Algorithm: sha256WithRSAEncryption
a6:b8:a0:23:bf:c5:14:25:82:9c:64:8d:6c:f7:c3:6c:46:a8:
f9:dd:d4:82:cb:2e:de:6d:48:85:e9:d6:a3:39:ef:6c:d3:03:
0f:df:80:32:fe:26:42:a6:4e:e2:13:23:a2:7d:1b:ce:95:9a:
ce:35:5e:67:89:65:96:08:43:6f:f8:30:bf:dc:70:2f:12:9c:
bc:8f:52:75:04:db:68:8f:28:c1:b7:b1:e9:e7:08:80:76:d1:
72:fe:51:de:65:d0:83:75:c4:c9:be:75:04:5f:7c:58:a9:a2:
ad:1d:3e:01:1e:69:ca:c9:58:38:00:a8:d4:c4:6a:f8:ca:73:
96:da:5e:ff:fd:b8:8d:f6:4a:26:a7:68:03:b9:43:88:0e:8f:
ff:17:bb:00:1e:b4:44:2c:79:6e:22:2c:b2:32:0a:7b:24:5b:
17:3f:e8:db:a8:b8:28:74:1e:12:c6:0e:27:50:28:e7:0c:e0:
1a:38:0e:17:94:35:27:a4:d6:5f:b9:75:e4:12:70:b2:ad:29:
a4:19:2a:9f:a4:14:6b:18:8d:83:7f:c9:f1:97:69:a2:74:ac:
30:86:30:43:be:23:cc:29:23:cf:a0:a1:ff:3e:a6:f9:f5:d2:
a9:b1:d5:cd:48:a6:a7:1a:3b:08:2d:d2:f5:70:1c:7a:ef:93:
d0:90:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:34 2024 by rpki-client on console-fra.rpki-client.org