Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QFXRM-bE40Kh4o5fbEfKSa69NfE.cer
File: QFXRM-bE40Kh4o5fbEfKSa69NfE.cer (raw, json)
Hash identifier: d7gyDVe2pQYtJT5fhKkuA2XjHkOLcxiX+h5xXndsWgY=
Subject key identifier: 40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E7C1B91C583A7C2FDDC5EC4F10AB6E0E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 26 Mar 2024 18:52:45 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51741
IP: 91.217.219.0/24
IP: 2a12:62c0::/29
Validation: Failed, certificate revoked on Sat 13 Apr 2024 10:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:1b:91:c5:83:a7:c2:fd:dc:5e:c4:f1:0a:b6:e0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 26 18:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4055d133e6c4e342a1e28e5f6c47ca49aebd35f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b4:f6:36:f7:e4:49:a1:d4:e3:55:a6:fa:c8:
1f:f3:d5:b9:09:e6:2c:b1:04:0f:8f:cb:f4:01:78:
f1:71:66:05:1b:2c:c8:66:c4:eb:06:4c:3d:d0:de:
23:35:88:5c:7e:c4:e9:e0:54:96:dd:ea:1e:64:49:
7c:60:a5:7a:72:97:0b:25:95:4f:9d:b8:cd:57:e5:
34:e4:4d:b4:43:af:5b:5c:06:c9:6f:c1:89:f2:12:
b1:cb:47:5f:b3:ef:64:19:5d:4c:c4:e4:40:37:49:
ca:15:2d:aa:ea:52:c8:03:50:a7:24:12:11:cb:82:
1b:2e:75:67:5c:df:cb:13:9b:b0:98:79:70:f5:80:
a3:93:f1:6b:e6:40:91:44:0c:16:1b:a2:c8:5f:ee:
4e:7f:c9:03:37:d9:3e:ce:2c:a9:d9:7b:3b:86:e7:
65:d0:c3:78:d1:fe:27:80:16:b4:03:03:9a:38:74:
0c:c4:df:be:15:55:9b:11:f3:03:5a:b4:5d:84:b1:
fb:3e:00:07:16:04:a8:ce:0f:fc:75:f9:4b:5f:58:
70:45:c9:96:b7:b6:c0:9f:19:47:d7:34:9b:29:74:
24:e5:fc:1f:50:24:e1:f2:8b:40:63:ec:e8:98:b1:
a9:27:93:55:c0:95:35:13:bc:0a:6c:37:9b:bb:fe:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:55:D1:33:E6:C4:E3:42:A1:E2:8E:5F:6C:47:CA:49:AE:BD:35:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/5ba53c38-6e6c-48d0-9f29-5428a4f3744a/0/4055D133E6C4E342A1E28E5F6C47CA49AEBD35F1.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51741
Signature Algorithm: sha256WithRSAEncryption
52:b4:b9:7a:3a:d3:b4:3f:bc:da:f7:7b:ea:8d:fa:b9:bb:2f:
e3:94:29:a3:ac:f8:a4:ca:5b:c5:e0:f1:70:3a:6a:47:eb:fc:
dd:75:6c:4e:0c:03:c6:64:c4:8b:bb:02:52:1c:b4:31:05:9f:
03:51:37:dc:cb:f5:a9:0b:89:78:2a:a0:09:80:1e:cb:a2:5b:
00:06:6e:f2:dd:5b:3c:3a:dd:a7:cc:d1:6c:5f:21:41:22:72:
9b:36:55:28:cb:d9:f0:90:7d:78:9f:c4:52:5e:ad:e5:9f:20:
be:8b:9d:08:b2:49:6b:17:80:0e:86:33:2d:37:e1:8b:3c:b3:
e6:13:d7:06:6d:14:83:4d:b4:9f:87:7a:0c:ac:c7:95:d5:71:
78:5c:5e:85:a3:28:fd:d3:04:eb:0a:d3:03:de:87:6f:a0:02:
2b:8a:ff:16:f1:ea:46:38:c8:e8:ac:17:df:69:75:ed:59:e8:
11:0e:d6:81:af:a2:0f:5f:3e:67:ab:ec:e3:96:56:76:b9:d9:
0e:a8:77:be:0f:e3:f4:56:9c:64:72:bc:99:5e:35:2d:19:61:
fb:84:e2:be:74:dd:fd:ce:84:b8:f2:68:5f:b8:30:bf:d7:3b:
58:79:45:6c:1a:c1:06:86:49:d3:9e:37:d0:70:b7:4b:23:0d:
28:89:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:08 2024 by rpki-client on console-ams.rpki-client.org