Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/onfamAUXp9gLHedloMTQsiwRQV4.cer
File: onfamAUXp9gLHedloMTQsiwRQV4.cer (raw, json)
Hash identifier: FPydhuNVxgkRgvbgDFbZksAbKO4E3ub80Idxuo0Np04=
Subject key identifier: A2:77:DA:98:05:17:A7:D8:0B:1D:E7:65:A0:C4:D0:B2:2C:11:41:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B633BB1CD508D15086ED27581C038C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/onfamAUXp9gLHedloMTQsiwRQV4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:23 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 217.114.32.0/24
IP: 2a11:73c0::/29
Validation: Failed, certificate revoked on Tue 10 Oct 2023 11:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:3b:b1:cd:50:8d:15:08:6e:d2:75:81:c0:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a277da980517a7d80b1de765a0c4d0b22c11415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:5f:ef:77:c8:91:b0:30:3d:80:81:64:3d:
f1:c3:49:18:37:c3:56:2d:5d:e4:1c:27:e1:a3:1e:
2d:ab:25:ce:db:08:50:1e:0a:b3:c7:92:ef:a4:41:
ed:2c:97:0c:f8:c5:aa:c5:eb:03:92:3a:1c:ff:0e:
57:b4:d2:9c:75:1f:b9:01:27:a6:f7:c4:7e:a9:2c:
03:d5:fc:28:d5:0c:c9:a9:76:20:07:e8:40:2c:ec:
e9:47:76:a1:a8:6f:47:18:ad:c7:14:64:6b:bf:73:
d3:10:a0:2a:47:3c:4e:8b:e8:65:e6:fe:9c:68:ed:
fb:c3:b6:c0:f2:dd:c3:10:22:70:24:66:3d:74:12:
ce:aa:db:39:32:72:6d:5e:0b:4d:d5:14:d6:7a:0b:
7e:28:a9:3c:0f:35:61:1e:e6:7c:81:a1:6e:4f:46:
59:e4:36:52:93:17:c1:7b:1d:b1:19:4f:3a:73:b4:
e4:3a:af:ff:f1:44:cb:83:8b:b3:2a:c0:40:71:b3:
95:bd:88:f2:c3:1b:2e:df:0c:9a:63:2c:64:33:ab:
41:c2:c4:53:32:34:22:2c:2d:3a:57:44:30:08:c9:
5a:85:dd:81:10:e2:47:c5:61:8b:ef:4f:39:8d:eb:
ab:8a:b1:81:27:02:26:99:3f:b1:b8:78:aa:ed:08:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:DA:98:05:17:A7:D8:0B:1D:E7:65:A0:C4:D0:B2:2C:11:41:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/onfamAUXp9gLHedloMTQsiwRQV4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.114.32.0/24
IPv6:
2a11:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:04:dd:14:6f:42:bb:49:aa:fc:7b:55:91:60:b9:cf:d8:0f:
84:79:b9:dd:b3:8b:88:43:5c:a5:0d:65:94:9d:c7:fb:69:e1:
b2:54:63:0b:bb:81:81:15:d8:c8:99:d1:3b:41:e4:ac:b0:f0:
81:1c:10:29:63:17:6e:87:46:3e:b0:9d:be:ca:4f:d6:6a:56:
7a:85:3f:46:8e:62:b8:c1:2a:ca:f3:e8:fe:27:2e:85:99:d7:
65:d1:12:ca:ba:15:60:41:90:2e:21:8b:2b:00:92:5f:fe:32:
f9:82:db:51:3c:a6:8b:8c:81:47:09:e9:13:b4:eb:66:f9:e9:
7a:6d:db:44:ad:9c:8a:d2:14:d7:40:17:d2:d2:0e:61:3b:b7:
30:ff:c6:a9:33:66:86:82:04:e7:d5:15:8a:87:df:f0:34:4e:
10:36:18:50:19:70:7c:c6:80:aa:a0:e5:2a:3f:a8:3d:8e:ea:
03:d0:11:e4:db:81:83:fe:f3:bb:62:ba:82:3a:03:8f:cb:3a:
b0:40:57:f1:14:b3:21:97:60:33:51:a7:9f:39:af:02:f0:07:
b1:5e:5a:92:2e:0a:03:62:df:6b:34:35:89:f1:32:b2:53:aa:
da:ab:ae:16:16:51:4c:98:19:4e:af:97:ba:5e:06:f7:54:f0:
3f:32:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:56:52 2024 by rpki-client on console-ams.rpki-client.org