Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer
File: Q-bso03HDB8b8cTdGwqCCTs1S3I.cer (raw, json)
Hash identifier: rp0nHNEjam9VmHQUQ36CLtJC7jfh0e9MdQFPUPQmF9Y=
Subject key identifier: 43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA2A48CF14F42CD463ABC7013910913B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:37 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 45.132.3.0/24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:48:cf:14:f4:2c:d4:63:ab:c7:01:39:10:91:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:5c:1d:c9:e5:5f:4f:92:d2:69:e2:da:35:
3e:71:6b:63:35:d4:1a:da:01:d1:2a:16:61:6e:a0:
03:a0:54:f9:f5:aa:d0:4f:2e:37:eb:ff:0e:79:cf:
eb:eb:bf:f8:ee:fd:8d:e9:9c:8d:9d:7c:66:7e:d0:
69:5b:7b:d3:f8:ec:43:10:be:f8:b8:be:49:84:70:
4e:80:58:ea:72:d5:aa:91:59:25:d3:88:0f:b6:54:
69:64:d3:30:e9:2e:f7:f4:d3:05:e6:b3:12:c3:33:
f1:a3:6a:7a:70:9c:8f:05:35:f9:cc:f0:6c:85:4b:
a6:bc:80:50:8a:70:08:bd:53:44:0f:4b:da:6d:cd:
2d:19:d3:4c:21:6c:30:39:ea:e9:1d:28:19:cf:e8:
cf:81:15:b5:80:30:57:5d:d0:2c:c4:6e:18:b4:a5:
2f:8f:03:0f:99:78:9d:8c:fd:e0:f9:1c:d7:0e:be:
46:54:4b:b9:ef:3c:8f:62:13:a1:93:c2:ed:b0:b7:
85:0d:ea:11:e4:9d:5b:de:96:c4:3b:ed:9c:81:14:
e6:e9:5d:5e:e8:12:c8:d9:86:63:c3:34:34:77:28:
08:72:ca:f7:85:18:47:cc:84:22:bc:c1:56:8d:41:
9b:f8:eb:62:61:32:bc:49:ce:da:1a:21:9c:3a:f0:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:68:53:18:fe:2b:09:7f:92:19:86:c9:4f:e6:4b:fb:be:21:
43:5e:45:1d:64:5d:14:6b:53:6c:97:39:ff:19:4f:dc:de:fa:
b2:e7:af:bc:06:01:ff:d7:1f:68:bc:8b:fd:8d:39:64:4e:91:
55:54:e3:3f:e8:ab:a7:1b:05:56:63:1d:32:3f:b4:04:bc:77:
18:11:3b:d6:8b:4d:4c:89:f9:e9:c0:55:c3:9e:42:99:19:ba:
37:0f:ab:c0:bb:07:b2:0a:71:a7:f5:a5:0b:b6:3d:b2:2a:c3:
81:2f:d7:58:ac:16:32:54:7b:27:fb:30:06:a6:e1:94:5c:73:
07:b3:d9:12:bc:23:a9:2c:3a:f3:ad:63:82:ed:58:91:39:ae:
ea:e0:d5:4f:a9:65:97:01:3e:b0:4f:e3:4e:39:ad:70:96:f5:
be:f3:42:b5:bf:93:06:57:72:f9:b0:a6:61:9b:98:90:96:bc:
f8:6c:67:64:d9:56:6f:bc:81:0a:a8:b3:04:4e:44:e1:06:6f:
cb:27:f2:77:34:97:ed:f1:03:71:14:70:39:ee:1c:7c:46:4b:
90:d3:7a:9d:8f:b2:38:fc:89:51:11:05:f5:86:06:17:aa:98:
1a:87:32:90:fb:b0:81:f7:02:9c:d8:e8:19:08:67:cf:5a:54:
1c:d1:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:04 2024 by rpki-client on console-ams.rpki-client.org