Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
File: 5QH-CXiXc5xb-bJXMTp2l04kJVY.cer (raw, json)
Hash identifier: aeI4CFPB/8m+C0lRBXKjneC5dwl3nrmywAJZ+UqGltI=
Subject key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BA95A293EBA6FEECDB8693BD276384FD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 07 Nov 2023 10:35:40 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.3.35.0/24
IP: 2a14:1f00::/29
Validation: Failed, certificate revoked on Thu 23 Nov 2023 11:13:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:5a:29:3e:ba:6f:ee:cd:b8:69:3b:d2:76:38:4f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 7 10:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e501fe097897739c5bf9b257313a76974e242556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2d:cf:63:25:4b:17:c0:68:7c:db:17:71:13:
b3:a1:fc:1a:6b:0e:e0:6e:53:92:5e:2c:e1:21:2c:
c8:a8:d6:8e:1d:e5:dd:9b:83:7b:f0:24:df:53:7f:
26:b7:a8:31:ff:e1:53:86:a2:b2:bf:a9:87:e3:47:
b8:15:45:e7:fd:15:d6:d4:52:96:e7:52:f0:8f:96:
5c:18:06:ba:a5:4d:d7:91:56:2a:cb:01:ab:d3:dd:
2a:dd:0e:c1:21:e7:8c:02:d2:ac:d0:9f:53:fe:d3:
b1:d0:63:c4:98:2c:5d:b6:2a:16:c2:d3:fc:a5:fe:
1d:cc:9e:5a:11:84:75:63:f9:c2:76:31:27:de:c6:
eb:8b:55:6a:7f:32:7b:26:88:7d:1e:a5:44:56:73:
b9:4e:fa:e7:ab:eb:0a:54:8a:d1:8d:0e:55:08:f7:
fd:9d:64:13:ef:b2:ad:9d:71:44:a9:cc:ed:c5:17:
26:a1:10:8c:8c:9f:5e:e5:66:22:fc:37:b3:d3:69:
0a:ad:98:5c:d9:52:a9:c5:b8:aa:6a:3d:20:68:0d:
3e:1a:3c:27:0e:7c:32:bb:5c:fc:79:d2:7c:b8:b8:
44:ea:2c:00:ec:65:83:85:b6:d4:97:a5:f8:33:2b:
91:f2:37:35:0e:f3:85:67:51:11:c2:a2:f1:ea:d8:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.35.0/24
IPv6:
2a14:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
7d:4f:36:42:99:bb:08:ab:29:80:02:e4:da:12:05:cb:0c:f7:
69:8a:59:02:00:1a:2f:d7:b4:a0:fd:66:71:5a:4b:13:df:bc:
e5:96:ae:bf:b2:d2:d5:77:60:b1:e7:f1:01:b4:0b:72:5f:f5:
f0:b3:68:bd:f5:b9:93:54:39:2e:30:81:97:10:ca:d1:7f:10:
39:95:91:5f:2f:af:3c:16:07:e6:15:6c:0c:92:41:8f:b9:4a:
19:70:7b:37:6f:d3:32:bd:18:15:46:65:f9:0f:8b:e1:20:e1:
28:7f:ef:03:ad:f4:9f:de:91:39:50:f2:47:34:57:9c:e5:b4:
08:bc:4a:89:b5:1a:b1:ff:c4:b7:db:f3:b5:8c:a1:4f:5d:4a:
c9:2a:4b:7e:3e:90:1d:6d:93:3b:cd:54:98:40:29:0f:96:eb:
15:73:f3:ed:76:c8:d4:83:77:69:02:99:81:15:f2:7e:ae:4a:
59:8b:0a:66:65:14:5f:25:16:e7:83:63:78:42:5e:ef:69:27:
e8:63:08:91:0e:86:68:69:19:f3:d1:04:34:95:60:1e:89:66:
2a:8a:3a:d2:59:ca:4f:0d:5c:f1:ec:d6:75:b8:f0:ce:d3:4a:
29:85:f8:0f:8d:03:82:53:d3:e2:d3:a6:af:32:24:53:20:00:
44:0c:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:54 2024 by rpki-client on console-fra.rpki-client.org