Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer
File: ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer (raw, json)
Hash identifier: tdKPwE1xXEhe4wcoy1fpwekP2U16MZ1eynStfbAf4qE=
Subject key identifier: A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED424AAD75626C59D077D2CA9C50A55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 46.175.129.0/24
IP: 2a11:9500::/29
Validation: Failed, certificate revoked on Tue 08 Aug 2023 09:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:24:aa:d7:56:26:c5:9d:07:7d:2c:a9:c5:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:c6:44:11:e4:d7:a1:f9:8e:0a:25:ec:9f:
64:32:5f:66:7c:dc:c8:81:60:e3:6a:c6:2b:e9:d8:
04:80:53:38:7b:f6:d9:b0:13:4e:2e:b1:4d:2d:d2:
f8:d7:1f:70:11:30:5a:75:f7:dd:ec:f0:74:dd:56:
a4:c5:d8:46:ec:07:5b:15:bd:ec:9d:b4:71:79:60:
e8:c1:29:25:e9:e8:65:c6:6e:67:f2:9d:04:4b:9d:
79:fb:b3:13:b5:c7:b3:35:b2:3e:25:47:4f:af:bf:
f0:59:11:2d:21:ed:0b:ef:62:46:e9:18:85:88:61:
a7:f4:e9:a7:8a:b8:0f:d4:98:a6:b8:10:f1:bf:5a:
27:8d:ff:e0:3f:fa:ad:a7:6d:ba:89:26:5c:fd:51:
b7:87:f1:60:47:5a:05:c1:a3:70:01:39:64:25:63:
f2:db:c3:91:a3:9b:49:06:d2:8e:5f:12:b8:14:7b:
08:67:4e:cc:1b:4a:18:9c:67:56:05:38:5f:f1:ef:
f6:51:b0:a1:06:88:06:50:a5:1c:bf:e0:b4:7a:32:
b4:1e:bd:37:ea:21:1c:96:49:9b:ea:9e:58:23:8f:
20:ea:a7:40:38:a6:43:7b:28:0f:0f:55:93:7d:b0:
37:e3:36:58:5e:fd:7b:c8:26:97:b7:05:21:6e:d7:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.129.0/24
IPv6:
2a11:9500::/29
Signature Algorithm: sha256WithRSAEncryption
b0:d0:18:e2:9d:0f:5f:e9:77:3e:ff:8b:de:a9:d7:73:3f:5e:
ef:76:f2:61:b4:24:c1:7a:53:74:dd:de:02:fc:90:3d:0f:3b:
57:2b:9a:88:a9:d8:76:99:81:01:59:58:0f:ad:58:7f:e7:2b:
28:39:1d:9b:31:b8:28:05:e9:94:1c:4a:fa:ac:17:a4:59:71:
db:b3:10:f7:5a:40:a5:90:c5:71:30:0a:57:4b:c5:29:d7:f2:
7b:29:e0:8f:ec:39:a0:bf:fe:45:e3:4e:35:77:4a:f3:03:f0:
37:e4:9f:5c:1a:16:09:21:5b:88:66:cd:07:29:58:92:d2:40:
03:37:0d:40:30:12:dd:5d:5d:4f:43:e4:1b:38:db:cf:68:52:
c8:4d:35:f7:19:91:5d:f4:1b:d1:9b:59:ce:4f:54:f3:8b:96:
07:9c:89:64:ed:37:f5:70:c2:22:2a:68:b2:52:19:e4:33:04:
2f:f9:f5:93:d1:ad:04:2f:4d:8a:9a:52:2c:73:34:75:39:72:
8b:e8:22:c8:21:4f:fe:3b:36:44:54:9b:8b:f9:24:a1:52:27:
0b:5f:7c:57:a4:db:ca:6f:f6:7f:97:ac:2e:c9:a4:79:2a:dd:
e2:99:60:f1:54:8c:d5:9c:c4:f1:fe:90:08:8a:70:b6:82:d1:
b0:e9:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:50 2024 by rpki-client on console-ams.rpki-client.org