Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QLtgwd5qpQVL7itzPxwWdB2D_EU.cer
File: QLtgwd5qpQVL7itzPxwWdB2D_EU.cer (raw, json)
Hash identifier: G48f08yicjrCtehcA4I5Qm90Z4UKRR4TQjZv4kQo5jE=
Subject key identifier: 40:BB:60:C1:DE:6A:A5:05:4B:EE:2B:73:3F:1C:16:74:1D:83:FC:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED42D4C1D6970B637022407EAF68202
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/QLtgwd5qpQVL7itzPxwWdB2D_EU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.122.191.0/24
IP: 2a11:cb00::/29
Validation: Failed, certificate revoked on Wed 04 Oct 2023 07:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:2d:4c:1d:69:70:b6:37:02:24:07:ea:f6:82:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40bb60c1de6aa5054bee2b733f1c16741d83fc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:d9:d0:bb:ae:23:60:7e:e7:eb:fc:9d:80:
fe:bc:b8:11:4a:2a:5f:70:8e:7b:25:eb:3c:d2:05:
a5:9d:b5:83:9e:7f:54:18:89:78:98:d7:20:a2:fd:
79:47:95:80:21:d0:cb:ea:37:20:ec:38:a2:b9:d0:
41:2e:f0:b1:3a:da:fe:a7:46:79:4c:d7:af:b4:5f:
e2:e1:ed:d3:c3:24:d5:d4:5b:fe:e8:5d:06:df:59:
fd:8b:2b:e8:de:b5:aa:f5:3b:79:2f:2a:10:8f:22:
88:a2:7a:15:f5:c1:ad:fd:6a:18:1e:a9:ed:d4:81:
7c:01:4e:d3:97:50:0a:9b:c2:2a:78:76:bb:5f:51:
fb:37:ca:07:92:c0:69:af:58:58:ce:28:92:f6:64:
74:54:1b:1b:f6:38:07:29:08:93:f2:13:77:b6:95:
e5:10:da:86:f5:83:53:16:ad:fc:8c:ef:e8:a2:a7:
47:7b:e2:eb:97:27:d6:96:56:8f:61:0e:5f:a6:26:
b0:79:68:ba:b0:c5:c9:78:95:3a:2f:df:9b:78:ea:
90:1b:3d:6f:e3:78:e6:79:f5:01:87:83:27:8b:81:
f4:a6:66:2f:5c:5b:c8:f5:9d:80:91:ce:fe:52:b4:
d3:66:3f:1b:9b:eb:d7:51:96:99:70:57:fd:f3:8e:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:60:C1:DE:6A:A5:05:4B:EE:2B:73:3F:1C:16:74:1D:83:FC:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/72cda5-d05e-4881-9e2b-a6b6a2ce45f1/1/QLtgwd5qpQVL7itzPxwWdB2D_EU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.122.191.0/24
IPv6:
2a11:cb00::/29
Signature Algorithm: sha256WithRSAEncryption
6c:0d:69:73:d9:b3:c8:e1:f6:e6:23:a0:d0:95:fe:59:8a:31:
bd:f3:db:93:08:e0:b5:e8:d1:2c:59:4a:74:10:5e:f5:0a:86:
b3:15:e1:24:fe:99:a7:46:4e:6f:90:23:fa:34:89:1a:f5:00:
1f:9c:f9:79:d7:e0:9e:10:25:b6:94:b5:dc:47:a4:d5:24:08:
68:cb:b1:9e:d6:e6:f4:cc:59:ac:9d:a7:77:78:bd:79:b3:34:
c8:c9:60:ba:80:a0:fe:fc:5e:e7:de:7f:01:6c:21:89:e1:9a:
63:b9:18:dc:13:63:d8:f4:7a:d2:16:6d:46:d3:0a:54:af:64:
6a:cd:68:3c:a3:14:8c:1e:80:dc:d7:0d:a6:0f:0c:3c:7b:43:
6d:24:c7:51:63:99:5d:19:8c:f5:27:0f:78:f0:3f:51:88:f3:
fb:6f:61:3e:e0:5f:c1:2e:aa:3d:db:86:df:14:e1:c5:48:96:
5c:99:df:87:70:7c:a2:c4:b3:3d:92:3d:86:e0:bb:7b:e0:66:
6a:dc:1f:e5:51:37:77:10:03:6f:93:a0:05:60:66:5e:d5:48:
4e:bb:67:cc:72:b8:32:20:70:cf:58:84:90:3f:a6:dd:7a:fe:
70:fb:dd:32:02:ba:01:ea:72:dd:d1:87:20:54:b8:72:ba:10:
9e:e7:9b:99
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu1C1MHWlwtjcCJAfq9oICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMTkzNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGJiNjBjMWRlNmFhNTA1NGJlZTJiNzMzZjFjMTY3NDFkODNmYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1HZ0LuuI2B+5+v8nYD+vLgRSipf
cI57Jes80gWlnbWDnn9UGIl4mNcgov15R5WAIdDL6jcg7DiiudBBLvCxOtr+p0Z5
TNevtF/i4e3TwyTV1Fv+6F0G31n9iyvo3rWq9Tt5LyoQjyKIonoV9cGt/WoYHqnt
1IF8AU7Tl1AKm8IqeHa7X1H7N8oHksBpr1hYziiS9mR0VBsb9jgHKQiT8hN3tpXl
ENqG9YNTFq38jO/ooqdHe+LrlyfWllaPYQ5fpiaweWi6sMXJeJU6L9+beOqQGz1v
43jmefUBh4Mni4H0pmYvXFvI9Z2Akc7+UrTTZj8bm+vXUZaZcFf9847mtwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEC7YMHeaqUFS+4rcz8cFnQdg/xFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzcyY2Rh
NS1kMDVlLTQ4ODEtOWUyYi1hNmI2YTJjZTQ1ZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNzJjZGE1
LWQwNWUtNDg4MS05ZTJiLWE2YjZhMmNlNDVmMS8xL1FMdGd3ZDVxcFFWTDdpdHpQ
eHdXZEIyRF9FVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAPnq/MA0EAgACMAcDBQMqEcsAMA0GCSqGSIb3
DQEBCwUAA4IBAQBsDWlz2bPI4fbmI6DQlf5ZijG989uTCOC16NEsWUp0EF71Coaz
FeEk/pmnRk5vkCP6NIka9QAfnPl51+CeECW2lLXcR6TVJAhoy7Ge1ub0zFmsnad3
eL15szTIyWC6gKD+/F7n3n8BbCGJ4ZpjuRjcE2PY9HrSFm1G0wpUr2RqzWg8oxSM
HoDc1w2mDww8e0NtJMdRY5ldGYz1Jw948D9RiPP7b2E+4F/BLqo924bfFOHFSJZc
md+HcHyixLM9kj2G4Lt74GZq3B/lUTd3EANvk6AFYGZe1UhOu2fMcrgyIHDPWISQ
P6bdev5w+90yAroB6nLd0YcgVLhyuhCe55uZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:11 2024 by rpki-client on console-ams.rpki-client.org