Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
File: QHSm4qvHNrn_8DtSxNexecQWut8.cer (raw, json)
Hash identifier: y94hu5sIcZEMf9l0zRUIkHHIRysAlA/h1gkcsQaRH/U=
Subject key identifier: 40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BB8CCED6ECF5CB55B79E41275BEE2E471
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Nov 2023 10:35:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.11.244.0/22
IP: 2a02:e620::/30
Validation: Failed, certificate revoked on Thu 16 Nov 2023 10:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:cc:ed:6e:cf:5c:b5:5b:79:e4:12:75:be:e2:e4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 10 10:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:a3:fb:ed:45:3b:03:ba:27:3e:f3:aa:4d:
cd:fd:2c:15:3e:a3:28:5b:18:e5:34:92:43:9b:89:
0a:c7:67:43:79:a7:b6:da:a8:94:3f:b8:e0:ec:4b:
b1:19:bc:5b:71:e0:ad:85:10:ac:04:08:28:00:0e:
06:c7:da:f9:79:1c:ab:55:8a:07:6c:46:75:13:aa:
c0:91:5f:2a:9e:d5:bd:b9:4d:9c:37:5d:3c:c5:79:
ab:d6:47:fa:ee:f1:c0:4a:d9:2e:22:04:5e:71:d1:
85:3e:cb:2c:b0:4f:99:93:87:61:22:85:ab:9b:9a:
40:02:17:81:0d:86:17:77:28:b0:50:78:1d:af:fa:
49:a0:ba:35:85:e0:ac:f4:6f:3a:ad:8e:f1:0e:a6:
8f:ef:82:35:c8:07:55:84:a2:c9:f7:d2:06:af:a9:
c2:f4:fb:02:89:78:f5:c9:73:b1:2d:a0:e6:2b:17:
df:95:d7:08:c7:8e:39:9d:62:24:99:7d:5f:d2:7f:
1e:63:05:4f:a1:cb:a8:50:9d:73:23:38:00:5b:ea:
43:b7:af:52:36:a4:26:e9:59:58:dd:18:91:54:31:
b0:cf:5c:36:85:2f:02:60:3f:7d:81:a9:d4:fb:7a:
1a:25:27:cb:9b:dd:3e:45:bd:ce:4b:a0:f3:29:5d:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.244.0/22
IPv6:
2a02:e620::/30
Signature Algorithm: sha256WithRSAEncryption
45:c4:04:5a:06:65:d0:96:e3:88:82:84:87:f3:c3:cc:c1:2e:
e3:64:6f:4f:aa:29:18:1d:9d:1d:d9:8c:e7:c3:83:25:55:b8:
8d:84:e7:a3:ed:1e:d1:70:d0:4d:34:e5:81:dc:b8:75:6d:07:
93:56:d0:7f:5c:da:64:38:d1:36:94:3f:2f:dc:a0:b3:0f:f0:
66:67:06:9b:a1:d8:1f:30:d6:f2:55:c1:dc:4d:e6:4a:5e:b2:
c2:d6:13:d4:ce:1d:6f:9b:a4:e3:68:ef:71:e1:13:57:dc:c0:
52:b7:d4:5a:81:0f:a1:ba:a5:5d:4c:4f:de:ab:45:17:22:dc:
3e:68:d1:33:75:ef:d3:c1:42:24:81:74:30:82:d1:48:c4:b2:
60:62:d7:32:e2:0a:78:68:a0:9c:3c:b6:8f:e9:8f:be:38:21:
96:df:69:1e:48:ac:c1:f5:f7:56:c5:14:4a:64:8e:3c:d6:7f:
08:d3:9a:9d:63:8b:55:d1:b8:45:63:e5:77:22:eb:6f:36:62:
d8:77:3b:00:8f:db:f1:33:48:a9:48:f0:dc:5f:28:6a:bd:2c:
2d:7d:7f:f0:d0:34:ec:8a:50:9a:62:70:1f:f0:b0:80:6e:ab:
7a:3f:6a:29:36:a0:d9:bd:77:b7:a4:cf:7d:9b:2b:05:ad:f5:
9a:96:34:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:09 2024 by rpki-client on console-ams.rpki-client.org