Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qw0noqCdBZMVonRs5ZNLbMkcEGY.cer
File: Qw0noqCdBZMVonRs5ZNLbMkcEGY.cer (raw, json)
Hash identifier: RzsJbNJ0PXeRFxqn1x2YadxCSa5A1X1Uk7HIs+PLTEk=
Subject key identifier: 43:0D:27:A2:A0:9D:05:93:15:A2:74:6C:E5:93:4B:6C:C9:1C:10:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C3F4321B9209C2754F1D40C0434CF8AB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/Qw0noqCdBZMVonRs5ZNLbMkcEGY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Dec 2023 13:13:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.247.0/24
IP: 2a14:1b80::/29
Validation: Failed, certificate revoked on Fri 08 Dec 2023 09:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:43:21:b9:20:9c:27:54:f1:d4:0c:04:34:cf:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 6 13:13:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=430d27a2a09d059315a2746ce5934b6cc91c1066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:97:99:81:e0:bb:4b:14:b1:b8:2f:b2:55:b0:
3c:e4:ab:09:2c:3a:58:b1:f9:dc:77:87:8d:9b:72:
29:f9:e7:e8:ee:32:63:7f:c0:cf:fd:e9:1c:f4:c0:
7e:77:45:7b:09:9a:26:54:4e:41:92:90:9f:6e:7e:
04:b1:c2:c6:5f:a5:73:d7:ba:84:d2:2a:54:6a:4b:
49:3a:73:2e:9c:dd:dd:ac:30:c8:92:c8:3e:05:99:
3a:6f:66:c0:57:34:35:53:4c:1e:e1:8d:71:f3:c0:
bf:07:1f:e1:78:fc:fe:a7:a8:ec:e8:9a:9d:92:52:
9d:a0:78:57:02:c7:fa:14:a4:06:4b:84:ee:ba:58:
9c:0c:55:e4:48:71:19:4c:41:32:73:76:86:3f:bf:
09:b3:f8:cb:48:75:0c:9a:b2:cd:9b:4b:41:ff:15:
a4:fe:4d:25:cc:77:dd:c9:66:d3:c9:3e:15:86:35:
73:08:7f:fa:30:a4:18:7c:36:90:de:1d:c9:76:a2:
ae:58:6e:8d:0d:50:50:26:7a:c8:21:3f:7d:24:96:
f0:27:76:16:94:0c:b7:ef:c2:da:8e:00:40:f1:d5:
56:e9:c9:80:78:df:de:0b:0a:27:47:cb:f2:69:3a:
fe:eb:f6:f2:43:50:a8:e5:ea:60:1a:97:e3:02:61:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0D:27:A2:A0:9D:05:93:15:A2:74:6C:E5:93:4B:6C:C9:1C:10:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/Qw0noqCdBZMVonRs5ZNLbMkcEGY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.247.0/24
IPv6:
2a14:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
83:31:72:d5:33:ec:ad:d9:89:2f:3c:b9:c6:f1:6c:92:1a:0f:
62:3a:86:d7:1e:ae:ed:fc:ff:d4:ea:65:17:9a:21:aa:49:9c:
fa:60:e4:c3:4d:3f:53:85:e5:3b:d5:88:03:7b:71:2e:9a:b2:
54:d8:e9:00:fe:80:52:38:07:0c:a8:ed:22:2e:1e:71:e1:1f:
51:f7:9d:42:a2:0d:69:bc:35:df:f0:7d:9e:7a:7b:52:e4:c2:
54:08:b6:6a:35:97:2f:9f:da:2a:05:bc:eb:96:e6:ee:5d:41:
47:00:8b:a5:ac:ef:a6:2d:f6:3d:44:f4:a5:a0:52:24:b0:8d:
20:e1:d0:04:a6:6a:fc:22:1b:7d:19:fd:f5:ee:63:07:5f:48:
58:b4:69:8f:23:b6:5f:9a:30:d8:7a:09:e5:9e:7e:84:fa:20:
ae:20:09:96:27:db:4c:aa:e5:2b:96:53:f4:0c:67:e7:e8:ef:
62:23:69:b8:43:87:31:c4:c7:d1:66:2a:5a:3f:75:bf:54:70:
34:f6:f3:5c:f0:84:1b:37:b8:40:17:4d:fc:e4:08:be:a9:5a:
bf:b6:7c:60:1a:01:a5:8a:19:5d:5e:0b:f4:2c:87:39:45:67:
6a:0c:52:68:16:b9:c5:55:54:62:f9:67:90:25:6d:c6:a1:03:
18:e8:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-fra.rpki-client.org