Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer
File: QJJa-AF-vPfDTRpiZYzEZTCCRcA.cer (raw, json)
Hash identifier: xbjfx2V88qpniGjInA3zrEdBe2DnOojnZlc8o4ClPAQ=
Subject key identifier: 40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222CC31ADEA2505189F07523F06EFA18
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:26:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 80.71.148.0/24
Validation: Failed, certificate revoked on Thu 21 Dec 2023 14:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:c3:1a:de:a2:50:51:89:f0:75:23:f0:6e:fa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:26:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40925af8017ebcf7c34d1a62658cc465308245c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:e2:19:a0:38:05:0d:84:92:c5:60:e8:df:
42:b2:ae:47:5d:f7:4c:ce:a9:20:d6:1a:86:1c:a5:
46:3e:50:3a:7f:4d:f0:50:ee:d0:6e:4e:62:9b:93:
b6:be:9c:44:f5:9d:57:e4:d9:a7:2f:81:17:a1:d6:
97:ab:df:eb:1b:97:dc:e0:c1:b1:dd:d2:f3:fe:5b:
58:de:f9:0c:d9:01:96:41:2a:c5:bd:e1:5b:8d:36:
c2:d4:e1:c4:5a:a5:84:ff:2d:06:91:db:ae:5a:45:
23:c5:2d:d4:02:6e:0e:31:21:52:83:a4:f5:67:62:
ec:dd:8a:cc:05:ef:6c:25:b1:57:03:48:dd:13:bc:
c2:e0:7d:81:e2:05:43:7e:13:8e:c3:02:94:8d:03:
fc:b7:b4:a3:f3:07:9d:b8:18:a8:74:ce:f5:30:5e:
3f:bb:c0:49:ae:61:c7:58:6a:1b:19:5d:2e:4c:7a:
d1:bb:4b:cd:89:90:ab:45:be:d5:41:44:ac:b1:a0:
ce:57:bc:d7:a5:28:1c:c1:f7:d5:1c:28:68:7c:f4:
e2:9c:c6:cb:92:1a:b5:88:d8:ba:2b:7e:d8:18:4e:
a7:6c:ca:5d:75:d4:00:94:12:c8:91:d1:9c:e8:fe:
c5:d9:6f:fc:bf:b2:84:a9:0f:55:b8:f3:94:3f:16:
e7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:5A:F8:01:7E:BC:F7:C3:4D:1A:62:65:8C:C4:65:30:82:45:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/214/40925AF8017EBCF7C34D1A62658CC465308245C0.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:96:d8:0c:80:60:eb:10:60:80:c5:45:d7:51:7c:cd:6e:31:
2e:e1:7f:7b:3a:b0:8b:3a:80:77:13:9b:46:d4:0d:45:68:61:
3e:b6:b4:db:4a:27:6b:1f:60:3e:d5:f4:dd:e2:1e:11:89:09:
62:ae:72:21:75:e0:11:08:26:47:56:69:a9:92:af:19:21:ec:
47:fb:6f:2c:40:79:d3:c4:ba:9a:9b:de:67:f6:3d:8f:45:f2:
1b:84:ee:6b:ed:a8:f1:fa:1b:21:76:76:ba:ba:b8:43:c0:63:
0e:99:8c:6e:39:1a:57:a5:38:b6:6a:95:21:ef:8e:04:7a:39:
19:b4:d7:ad:06:4d:27:95:8c:10:d5:16:14:d0:c4:d5:3c:7d:
69:d8:b1:9e:41:57:1a:16:f3:4e:70:58:49:6a:2e:bc:74:e0:
fe:49:7a:73:a2:01:3a:b8:bd:78:a2:12:ac:60:5a:65:7a:3d:
e4:cf:9a:5b:72:85:be:83:88:5b:11:6f:e2:76:71:4d:e0:c3:
93:e5:97:8d:23:8c:12:05:99:a1:30:67:20:ac:de:ce:7a:51:
7e:ee:05:10:11:74:f7:d3:28:72:e9:b0:d0:c1:b0:5b:85:0f:
62:4c:2b:46:d4:fb:f6:4f:73:d9:03:78:a7:03:4c:f2:56:60:
1d:80:23:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:10 2024 by rpki-client on console-ams.rpki-client.org