Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
File: omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer (raw, json)
Hash identifier: e89OVLpy6LqtPPNgspS1JrRrCJwmLa3d61gqJ8BlXCo=
Subject key identifier: A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185701CDE4706F31B284B96FFBC30BD9D45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 01:33:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 212.18.114.0/24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 15:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1c:de:47:06:f3:1b:28:4b:96:ff:bc:30:bd:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:33:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1d:b7:f8:e4:ef:3f:e7:e4:d7:36:01:02:46:
34:1a:66:95:df:ae:b1:d3:d0:4a:06:50:a1:7f:1c:
a1:cc:d6:c8:61:1c:b5:14:2b:96:58:f5:02:30:f2:
94:68:25:11:b5:d9:4d:6b:fa:ef:4e:96:18:3d:d3:
e5:d3:08:33:1e:01:28:6d:eb:a9:36:17:23:c9:4b:
74:3f:4f:61:73:a6:34:dc:e9:a5:cd:6b:d3:bc:f1:
08:13:d2:24:d3:33:13:af:65:ad:5e:bb:78:97:41:
81:11:0a:ac:5e:a3:6e:c1:ea:5a:5f:9f:3e:cc:46:
9b:54:e3:65:e4:b0:d2:8c:cb:cc:a9:dc:88:eb:e8:
34:89:fd:6f:ed:23:ff:d7:c2:20:c4:7b:c7:b5:64:
db:4f:d1:8c:45:23:3f:83:8e:4f:b0:9b:d3:68:2c:
ef:21:7f:14:8c:b8:26:81:6c:f9:dd:01:f9:ca:40:
05:56:76:ae:23:a2:ca:7d:7f:b4:e9:8c:52:32:4b:
a6:6e:e4:d8:19:5c:f3:b0:5b:cb:5b:f4:c3:6a:68:
4e:2d:ae:ad:ec:ab:b6:b3:b0:e6:2b:6e:fa:70:74:
f9:f1:a4:07:34:a8:f1:f5:87:89:1f:49:d4:6e:eb:
4a:be:1f:00:58:c6:a5:8d:5d:1f:65:d3:07:f7:4c:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ff:96:65:43:e7:75:f7:d9:7a:b3:fb:97:d2:db:a4:ea:22:
b7:61:a7:aa:77:8b:35:d3:6f:6f:65:fb:68:1e:7c:1d:5c:fe:
40:f5:4a:9f:b7:e8:56:7c:3b:58:1c:17:92:95:7d:44:19:ad:
eb:cd:c2:2a:fa:36:be:06:a9:35:c3:7d:59:a2:00:ac:0a:1d:
cd:15:fb:e1:cd:36:23:2f:dc:aa:dc:a7:d3:2e:98:ef:c3:75:
33:16:fd:2b:d2:ee:78:d8:31:d5:e1:04:5c:f6:6d:6a:cd:19:
17:f1:a6:34:5c:81:42:48:1b:89:da:5b:ca:e9:dc:93:f7:c3:
22:2d:ee:36:e4:f3:ba:ea:a9:10:81:f9:8d:1f:7b:8c:22:8e:
d7:d8:a1:87:52:89:41:ef:2e:34:df:65:c1:a6:85:dd:74:70:
5b:d0:8c:99:58:cd:d9:73:31:06:78:c6:54:0e:c3:a5:78:e0:
84:00:b6:88:14:e3:5c:6f:65:be:10:f3:f7:1b:14:80:42:17:
47:14:bf:45:a4:08:bd:f4:bb:a6:7b:50:4d:c4:2b:6c:89:1f:
e0:83:7f:32:2f:57:42:40:5e:37:9e:94:27:02:9a:6a:9c:82:
14:4d:4e:56:f5:1f:20:e6:83:d9:83:c4:13:a2:12:25:c7:aa:
fc:ce:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:52 2024 by rpki-client on console-ams.rpki-client.org