Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qQlCZLNvpPUMNc1DPn6N2t1cC4c.cer
File: qQlCZLNvpPUMNc1DPn6N2t1cC4c.cer (raw, json)
Hash identifier: O2Wi8Tlci/IqM2K/jh8OKxcNFd04oqnDNKbE1TIRxOQ=
Subject key identifier: A9:09:42:64:B3:6F:A4:F5:0C:35:CD:43:3E:7E:8D:DA:DD:5C:0B:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC94CF11C2714F8AE4E1CF6D7DBBE7AFD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3dbbf-d359-4110-b8df-3d7028b6eee4/1/qQlCZLNvpPUMNc1DPn6N2t1cC4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/e3dbbf-d359-4110-b8df-3d7028b6eee4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 08:31:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 197475
IP: 46.183.168.0/21
IP: 91.207.196.0/23
IP: 91.207.222.0/23
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:17:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:f1:1c:27:14:f8:ae:4e:1c:f6:d7:db:be:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 08:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9094264b36fa4f50c35cd433e7e8ddadd5c0b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:f5:87:dc:6d:21:44:28:b1:a4:66:c5:38:
21:7a:ba:54:c8:69:3c:2b:00:22:08:1f:c6:c4:a6:
04:65:c3:2a:6a:d4:9c:1f:a8:e2:ac:a6:be:24:fd:
c0:a0:8b:e1:69:0c:de:4e:3a:69:1c:32:11:26:d7:
f1:22:f6:d2:a2:35:dc:b0:63:b8:8b:6e:58:d6:21:
98:c9:5a:99:17:b9:f4:fc:cf:eb:da:4d:fa:16:eb:
b7:eb:22:3e:d4:5f:bf:b2:4b:f7:bc:b1:8e:1a:1e:
e7:d5:44:bd:ee:b3:ad:d0:89:9e:2e:ec:2e:68:ff:
d7:f1:da:00:f4:e0:9b:67:f6:f7:df:ed:8e:fd:76:
fe:60:5a:57:3c:76:57:35:ae:bb:17:43:a0:fc:b5:
3b:57:42:ab:cc:d8:d7:dc:8e:07:65:72:46:05:a5:
0d:ff:64:00:c1:50:05:4d:bd:08:65:be:9a:8d:ad:
0d:46:d1:8f:a7:0e:4d:aa:b0:61:84:a1:65:72:e1:
93:4c:29:3f:d2:c8:10:6e:25:04:a2:d0:d6:2c:be:
fc:e0:44:69:89:e8:47:35:58:2d:0f:05:c7:21:28:
31:04:61:94:0c:48:59:8c:0c:f0:35:a3:0e:c4:03:
ca:a2:a5:fb:c5:b1:ab:e4:5d:8a:3b:13:bf:05:5e:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:42:64:B3:6F:A4:F5:0C:35:CD:43:3E:7E:8D:DA:DD:5C:0B:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3dbbf-d359-4110-b8df-3d7028b6eee4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3dbbf-d359-4110-b8df-3d7028b6eee4/1/qQlCZLNvpPUMNc1DPn6N2t1cC4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.168.0/21
91.207.196.0/23
91.207.222.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197475
Signature Algorithm: sha256WithRSAEncryption
21:f3:4b:a6:3b:5c:c2:5f:4a:5c:b3:ac:1d:1f:74:39:af:7b:
9d:7d:e5:17:6a:df:98:4c:8a:0a:de:27:9f:4f:e4:01:46:4a:
48:77:33:1f:b4:c0:23:19:f2:c7:82:58:5e:43:4e:b1:72:1e:
1d:ea:d6:fb:c7:33:3e:ff:05:0e:91:9f:48:08:d6:04:df:26:
d7:d0:d1:e9:e0:2c:d9:4b:a7:ca:84:88:63:d6:65:68:b0:e0:
06:17:36:d6:e9:a4:cf:1e:b0:35:f9:da:66:25:3c:73:2a:93:
96:fd:15:14:3d:9b:00:85:ee:20:2b:8c:87:d3:ef:83:ab:4c:
10:9f:40:7b:10:46:9a:3a:7d:de:fe:65:78:f4:00:1e:91:ef:
15:f3:48:51:ae:13:0e:f2:2f:5b:95:db:31:81:92:3e:f0:40:
3e:02:13:a5:a9:37:34:a0:8c:8f:40:43:0c:da:45:c0:56:74:
1d:1f:cf:57:cb:59:45:f2:7a:d9:f8:f6:c2:be:23:ed:5a:91:
1c:1e:e4:a8:d4:58:a4:24:16:d7:9a:32:f2:18:35:60:8b:ab:
ec:f2:17:29:39:62:91:56:08:bf:2a:36:f4:5b:5b:8f:44:52:
8a:aa:b7:41:13:30:f0:f5:65:e1:3d:dd:3c:34:36:bf:7e:f7:
c1:d7:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:12 2024 by rpki-client on console-ams.rpki-client.org