Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
File: Q4PDjhk-zeJ3ysjwnaQYf669phY.cer (raw, json)
Hash identifier: ydl4vt6oDd1DnwdOZOrKX2asZLx0xc3gbPgyt/2cLyY=
Subject key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018B854F71A5AD7871BED812BC932C4EFE1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 31 Oct 2023 10:37:38 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.93.138.0/24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:4f:71:a5:ad:78:71:be:d8:12:bc:93:2c:4e:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 10:37:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4383c38e193ecde277cac8f09da4187faebda616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6d:14:d0:30:83:8d:9a:7c:c7:09:d8:5e:37:
15:96:98:c6:da:5a:fc:2e:25:27:2d:98:8d:c5:b6:
ee:9c:eb:d4:67:3e:0c:3a:d4:c4:a0:e5:0a:7a:dd:
0c:62:6d:44:58:40:7b:0d:ea:1f:ca:db:ea:b5:e9:
be:01:87:d3:67:8a:a6:bf:87:ff:e0:ed:74:3c:2b:
f7:c0:5a:cc:65:43:f1:fc:26:97:26:e9:a3:04:f8:
d8:be:eb:1a:5c:b7:ec:02:37:4a:be:03:06:85:e6:
46:98:bd:30:df:18:01:17:fc:15:c9:e1:fd:85:b4:
ac:29:89:ba:9d:2c:b5:2a:af:eb:0b:d0:4c:47:0b:
b9:38:0a:d9:a0:a5:02:e0:62:50:96:d7:f5:db:9e:
ad:e8:2a:64:0b:4b:d8:36:35:23:66:a9:5b:19:a5:
e0:9c:03:9c:77:8e:4c:03:e4:03:2e:81:3a:e0:f3:
9b:01:b5:d3:1b:ce:80:f4:de:de:81:12:5f:03:23:
9e:00:d8:8c:21:fd:d1:2d:1c:b8:30:55:9e:d5:e8:
b5:ef:14:88:0b:1a:73:4e:ab:3f:a6:d0:f9:22:75:
c4:52:7f:33:93:1f:a3:61:43:49:c3:6d:5b:12:4e:
29:48:d5:d0:a3:38:a2:7e:05:e8:7f:9d:7c:5b:de:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
56:60:90:20:0c:05:bf:2b:d5:24:14:37:b0:b6:2a:31:c7:cf:
22:de:3b:5f:a4:cd:7b:83:00:d6:5c:a9:96:d6:8f:a5:bd:a9:
d4:76:8a:44:4e:db:35:ac:56:bc:bb:bf:94:0d:72:5f:91:08:
58:6a:fc:7c:15:f7:07:ab:69:0c:92:69:c7:53:09:85:73:cb:
0a:f9:1a:57:ca:cc:be:cb:43:0b:03:3a:46:a6:24:57:31:0b:
a4:9f:d6:99:e1:ef:97:1d:4d:db:7b:a7:4f:5e:17:9a:de:68:
16:67:b8:fb:ba:5b:14:8e:ec:36:11:94:9e:e3:d6:87:4a:d9:
5b:8b:fd:3b:06:b1:68:f5:c2:2b:54:64:00:83:41:d5:0c:b5:
08:4c:d4:e7:ec:d6:0a:4b:e5:40:da:dc:06:56:7e:55:0b:67:
2c:11:e9:30:d8:32:42:87:8a:b8:f3:19:f0:a9:a3:bf:2c:50:
df:e1:76:07:23:9d:de:d7:9e:aa:6c:f8:c7:80:26:10:25:16:
cf:1a:33:cb:ba:af:7a:ea:cb:e6:3a:f1:35:5a:b2:04:31:f4:
18:53:81:5a:c2:b4:c3:44:15:9c:34:15:b4:7e:a1:72:6b:87:
f6:4d:4e:5c:22:dc:30:e0:51:80:ed:fd:f9:93:fc:02:5f:fd:
ae:dc:28:ea
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYuFT3GlrXhxvtgSvJMsTv4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMDMxMTAzNzM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzgzYzM4ZTE5M2VjZGUyNzdjYWM4ZjA5ZGE0MTg3ZmFlYmRhNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW0U0DCDjZp8xwnYXjcVlpjG2lr8
LiUnLZiNxbbunOvUZz4MOtTEoOUKet0MYm1EWEB7Deofytvqtem+AYfTZ4qmv4f/
4O10PCv3wFrMZUPx/CaXJumjBPjYvusaXLfsAjdKvgMGheZGmL0w3xgBF/wVyeH9
hbSsKYm6nSy1Kq/rC9BMRwu5OArZoKUC4GJQltf1256t6CpkC0vYNjUjZqlbGaXg
nAOcd45MA+QDLoE64PObAbXTG86A9N7egRJfAyOeANiMIf3RLRy4MFWe1ei17xSI
CxpzTqs/ptD5InXEUn8zkx+jYUNJw21bEk4pSNXQoziifgXof518W97LswIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEODw44ZPs3id8rI8J2kGH+uvaYWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2NiYmIy
NS1hMTcwLTRlMjQtYmIwMC05NzBlMmQ1NTVjNDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvY2JiYjI1
LWExNzAtNGUyNC1iYjAwLTk3MGUyZDU1NWM0NC8xL1E0UERqaGstemVKM3lzandu
YVFZZjY2OXBoWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAvF2KMA0GCSqGSIb3DQEBCwUAA4IBAQBWYJAg
DAW/K9UkFDewtioxx88i3jtfpM17gwDWXKmW1o+lvanUdopETts1rFa8u7+UDXJf
kQhYavx8FfcHq2kMkmnHUwmFc8sK+RpXysy+y0MLAzpGpiRXMQukn9aZ4e+XHU3b
e6dPXhea3mgWZ7j7ulsUjuw2EZSe49aHStlbi/07BrFo9cIrVGQAg0HVDLUITNTn
7NYKS+VA2twGVn5VC2csEekw2DJCh4q48xnwqaO/LFDf4XYHI53e156qbPjHgCYQ
JRbPGjPLuq966svmOvE1WrIEMfQYU4FawrTDRBWcNBW0fqFya4f2TU5cItww4FGA
7f35k/wCX/2u3Cjq
-----END CERTIFICATE-----
Generated at Wed Nov 1 09:15:36 2023 by rpki-client on console-ams.rpki-client.org