Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q2yj-OsUlAV_NprmBBMyT80tYr8.cer
File: Q2yj-OsUlAV_NprmBBMyT80tYr8.cer (raw, json)
Hash identifier: H8gU9/AAqoS4dOYvJ/mAf31P/gvXqs6r57Y92r/zpjI=
Subject key identifier: 43:6C:A3:F8:EB:14:94:05:7F:36:9A:E6:04:13:32:4F:CD:2D:62:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222CE1BD1E883FC7AFC288FA8A9E6B93
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.106.72.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:e1:bd:1e:88:3f:c7:af:c2:88:fa:8a:9e:6b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=436ca3f8eb1494057f369ae60413324fcd2d62bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:9b:8c:52:76:ba:22:0c:2e:e9:17:ee:7c:
03:90:72:c9:00:84:82:83:01:72:ae:80:61:76:ba:
6c:0a:a0:5c:95:aa:76:53:75:3a:ce:c8:20:dd:36:
db:40:65:7a:a5:ce:7a:72:ea:70:93:ad:57:ff:67:
e5:7b:15:e6:b5:a0:a7:b2:02:5a:73:ff:40:83:b3:
1c:5c:37:b6:70:1e:85:18:a3:45:7c:7d:2b:b7:92:
48:a8:2a:73:6b:ab:23:21:ff:da:a1:55:fa:aa:0f:
ba:d5:ad:45:c8:50:2b:03:44:fc:57:b4:f1:d0:ba:
a9:d9:b4:40:ce:13:9c:22:d7:50:fb:55:6a:29:84:
a2:5a:15:ca:5d:3f:ec:e5:69:45:68:82:b1:72:51:
15:56:cf:f2:f7:ed:ab:79:50:99:cc:2c:3b:c4:58:
e7:20:30:60:51:74:94:f9:75:e7:c2:f9:15:ce:39:
4a:1a:05:87:97:22:90:79:90:a3:0f:98:6c:6f:e0:
78:47:d3:cd:66:f9:b8:fc:58:84:e0:a2:5f:68:23:
ee:27:7d:bc:8c:ff:15:ce:f8:21:3d:86:60:ce:23:
6a:3d:ea:b2:d8:b7:9c:f4:01:03:b8:b6:f3:2a:2e:
94:db:ae:09:90:0f:ed:c4:03:39:59:e0:e6:c2:08:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:A3:F8:EB:14:94:05:7F:36:9A:E6:04:13:32:4F:CD:2D:62:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/213/436CA3F8EB1494057F369AE60413324FCD2D62BF.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.106.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ea:29:a1:2a:f0:26:d5:2b:47:15:30:8f:03:f1:aa:61:ac:
bc:2c:85:25:3a:ee:f6:88:7d:04:05:1e:b1:10:77:8f:26:18:
17:5e:67:20:4a:a5:69:a3:0c:da:30:54:ea:f4:b6:96:0b:e5:
c0:0b:09:59:a3:29:4e:b8:3e:9f:76:e0:bc:f8:3c:1f:87:62:
66:0f:ff:2a:b9:66:46:fc:21:95:b7:c2:a7:35:2a:3c:ad:db:
8f:d9:97:02:a1:78:a2:0e:db:90:a6:7d:98:f8:82:a6:22:aa:
1a:8f:5a:b0:a7:85:4c:69:0f:a7:bf:e4:82:eb:bf:32:78:49:
5d:6d:e2:af:d5:79:6a:58:08:92:bd:a2:f6:6d:0c:df:a0:ce:
dc:19:68:94:43:a5:41:1e:fd:9c:cc:b5:78:8e:83:75:17:69:
f7:7b:de:7f:b6:8b:e2:19:16:6c:7d:f4:9b:84:6c:82:a9:3b:
1b:c0:51:61:c4:c9:4f:b5:fc:34:f1:34:7e:d1:0c:3f:f7:4d:
a8:ba:0d:5c:c9:dd:d1:d4:ea:eb:ba:9d:b1:74:83:18:f0:d6:
3d:75:8e:f3:0b:dc:7f:d0:36:e4:32:bc:f8:23:a4:0d:22:86:
c4:92:8c:ad:8a:6a:e1:00:49:a2:32:dd:96:c6:ba:9f:32:83:
c0:73:92:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:05 2024 by rpki-client on console-ams.rpki-client.org