Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sxOubzIlXQxspDo07G4UnA71jGA.cer
File: sxOubzIlXQxspDo07G4UnA71jGA.cer (raw, json)
Hash identifier: AdGhW5irlv2M3R6YoVkKFOJl35ViXVYBAwRq3nGQQdM=
Subject key identifier: B3:13:AE:6F:32:25:5D:0C:6C:A4:3A:34:EC:6E:14:9C:0E:F5:8C:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018ADB09C7ACB9CB61D92FBF404285BF6F62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.roa.net/rrdp/xTom/50/B313AE6F32255D0C6CA43A34EC6E149C0EF58C60.mft
caRepository: rsync://rpki.roa.net/rrdp/xTom/50/
Notify URL: https://rpki.roa.net/rrdp/notification.xml
Certificate not before: Thu 28 Sep 2023 09:06:05 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.222.43.0/24
Validation: Failed, certificate revoked on Thu 14 Dec 2023 11:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:09:c7:ac:b9:cb:61:d9:2f:bf:40:42:85:bf:6f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 28 09:06:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b313ae6f32255d0c6ca43a34ec6e149c0ef58c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:4b:f1:9c:e4:5e:b2:82:7d:ae:d5:05:54:
3a:6f:b8:4a:56:9d:b6:4e:8e:9d:1b:e2:bc:59:41:
12:63:fc:0f:e9:9e:e7:00:50:bc:da:55:28:1b:a1:
22:5b:a4:01:f4:83:2f:c2:7a:09:20:73:d8:79:b6:
2c:22:05:f6:52:7b:36:51:7b:c9:97:95:95:33:5c:
e8:43:c0:6d:76:65:5e:12:11:42:a7:7b:22:f0:8a:
fd:27:93:6b:13:0a:21:e5:08:52:c6:b2:37:9f:c4:
17:7d:5c:32:78:23:20:6e:d4:49:a6:f9:a3:19:88:
35:06:5c:e8:c8:b5:20:b5:89:c0:76:46:b9:f9:6c:
cf:ad:52:de:b8:16:9b:8d:69:25:68:76:fd:c1:a2:
1c:c6:21:3f:a9:0f:b9:2f:f5:b9:a2:34:ba:17:88:
1a:b3:c8:66:d5:05:2b:dd:f2:b2:14:84:a0:8b:f5:
1d:0a:9b:f8:7a:82:8f:3a:71:1d:ff:95:55:6b:ca:
3f:e4:79:d8:aa:20:14:b4:ba:6c:73:a7:c1:cc:68:
e7:53:bd:a2:ee:73:2a:ee:14:5c:61:53:23:89:b3:
eb:21:18:b7:5c:c3:51:1f:bb:2d:6c:2f:d2:15:2e:
06:f2:63:54:23:77:f1:a5:4d:96:05:3b:d9:bd:4c:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:AE:6F:32:25:5D:0C:6C:A4:3A:34:EC:6E:14:9C:0E:F5:8C:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.roa.net/rrdp/xTom/50/
RPKI Manifest - URI:rsync://rpki.roa.net/rrdp/xTom/50/B313AE6F32255D0C6CA43A34EC6E149C0EF58C60.mft
RPKI Notify - URI:https://rpki.roa.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.43.0/24
Signature Algorithm: sha256WithRSAEncryption
57:7b:c2:37:99:a0:f4:2c:5a:af:28:09:8a:08:aa:9a:26:07:
e1:e8:9e:60:13:44:2a:05:42:ba:51:87:b4:8c:f9:18:cb:a2:
ae:ff:a9:8b:e1:34:93:44:80:b6:79:89:9b:bb:79:00:09:e7:
4d:1e:b2:43:6f:18:44:6b:60:91:23:17:b7:ac:d9:03:a4:d6:
7d:1f:40:06:0f:0c:35:d5:1e:27:e0:74:e5:2f:6d:a7:1f:f8:
44:0b:ce:63:2d:c1:64:fd:4c:db:24:b5:65:44:e7:04:c3:0a:
96:24:3a:f6:06:54:40:2d:51:46:56:41:1d:7c:27:5a:25:28:
ad:1e:a4:1b:18:02:b2:d7:67:1f:c2:36:48:c2:05:0f:0e:dd:
14:b2:0f:a6:9b:80:89:8d:a3:01:68:d9:4c:a0:2a:49:26:47:
a8:6f:a4:9b:1c:d5:d0:4f:d5:50:aa:b2:da:64:65:63:64:fe:
4f:bb:f0:8c:e9:3c:8f:58:c2:35:4f:99:71:ab:d7:c5:dd:b2:
83:9d:60:bd:4a:e2:68:cb:cd:06:80:ad:c0:5a:a0:a6:96:b9:
ff:1b:11:ba:77:53:d4:d6:74:1e:9c:c8:29:f0:e8:db:bd:de:
93:14:29:0e:df:3d:73:e2:69:2a:af:a5:21:67:fe:41:6f:95:
45:4f:19:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:03:18 2024 by rpki-client on console-fra.rpki-client.org