Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
File: QQHhBqnKexSmerQCd4NqGML3EL4.cer (raw, json)
Hash identifier: zuPgFhioslW1CQbo+r4xLEjQDy1LdiUd1cBPtmt+KQE=
Subject key identifier: 41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0192E186A24CDBA310430DC916E09C4ACDD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Oct 2024 07:42:29 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 176.118.160.0/22
Validation: Failed, certificate revoked on Wed 13 Nov 2024 07:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:86:a2:4c:db:a3:10:43:0d:c9:16:e0:9c:4a:cd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 07:42:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:53:9f:7f:d1:9a:fc:c3:b0:49:d5:a2:51:76:
7e:7e:76:b1:ce:a1:2f:eb:b9:ad:0d:6e:c7:57:4f:
9e:ac:90:db:8e:4a:89:23:2a:f6:0b:d0:56:b7:e1:
ef:67:11:6f:14:51:2e:58:1f:d3:7d:94:51:14:4f:
42:06:cd:0f:e1:5d:d0:a8:af:06:9a:5b:e8:83:1b:
2c:3c:b0:c4:4d:60:0e:a2:40:72:21:44:d3:37:ee:
e0:38:9b:cb:b2:57:fd:f9:46:a0:9d:6f:5e:b1:04:
b3:d6:2f:e2:fb:b6:49:38:3f:02:0f:91:11:42:33:
89:14:ab:a2:91:c0:18:c2:37:46:1b:68:cf:2e:8b:
4d:3b:5c:c1:b2:66:20:fd:d2:19:2a:dd:89:38:d2:
b3:9e:1a:68:96:a0:ab:16:f2:d8:ea:f9:f1:d6:c8:
6b:5f:7d:9c:63:08:48:a4:50:9f:64:11:60:23:f2:
4f:27:e1:ea:ff:dc:e2:99:bf:a7:51:1d:e5:2c:cf:
60:ce:35:04:a7:a5:22:43:3b:29:a2:3a:3d:fb:e9:
f8:7a:f9:59:b2:48:d0:c2:64:e1:b5:5b:27:2d:44:
32:bc:24:c9:8d:f0:9d:f7:15:e9:00:11:f9:1e:54:
bc:42:ed:1f:46:6a:ad:ec:70:d2:13:f2:41:e8:86:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:9f:6d:44:02:22:a5:ca:c2:aa:b0:38:fd:60:ba:08:6f:e5:
72:ff:61:c3:37:0a:52:4c:2e:41:5f:5f:f0:74:42:29:72:b6:
94:f0:9e:34:06:cb:ac:c9:d6:9a:30:f1:d5:6b:49:46:90:89:
b7:5c:db:d6:f2:d1:3c:c1:d3:70:52:00:a2:d2:e9:23:04:7d:
45:04:8e:2b:42:76:2d:b0:08:ca:2d:fb:15:03:c7:c5:b6:78:
cc:99:a6:5d:b2:a4:b4:d2:ac:7d:a1:ba:7c:91:01:83:fe:22:
7d:92:d9:16:92:7b:52:04:6c:49:59:78:58:42:dc:4b:76:97:
5f:51:93:ef:67:00:11:64:43:7f:3c:dc:17:e7:94:29:fc:90:
cf:4a:ae:bd:f5:05:aa:b1:d3:8e:16:c6:ed:32:ef:00:cf:72:
96:3d:c0:0e:13:a8:81:fb:81:a8:6e:62:3a:1d:6c:07:40:1e:
ce:15:c8:37:92:be:e5:99:6e:5d:92:c1:fa:4d:45:17:44:e5:
9d:da:32:13:98:5e:fd:cc:9b:db:79:16:ce:a4:1d:86:61:1b:
83:fe:a5:40:e5:99:3b:e3:c1:c6:0d:f5:3e:89:93:48:2f:0d:
cd:a3:fe:ff:13:6f:8a:12:60:e7:cb:a2:96:2e:d0:f7:7c:ec:
c3:da:34:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 10:57:09 2024 by rpki-client on console-fra.rpki-client.org