Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QQaBYaEyN5y4aj3TkPfh9p2TwfE.cer
File: QQaBYaEyN5y4aj3TkPfh9p2TwfE.cer (raw, json)
Hash identifier: GjS7pS9rA06ncOTVG5cwxzBu3gB84hdquT7Qa5rx//c=
Subject key identifier: 41:06:81:61:A1:32:37:9C:B8:6A:3D:D3:90:F7:E1:F6:9D:93:C1:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAEEDA19AD940DB7A3B46A4698F85FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/24587a-f619-45b5-91fb-71dd6f299a61/1/QQaBYaEyN5y4aj3TkPfh9p2TwfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/24587a-f619-45b5-91fb-71dd6f299a61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:33:33 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 31.222.249.0/24
IP: 2a11:8840::/29
Validation: Failed, certificate revoked on Tue 24 Oct 2023 07:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:ae:ed:a1:9a:d9:40:db:7a:3b:46:a4:69:8f:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:33:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41068161a132379cb86a3dd390f7e1f69d93c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:ed:cd:ee:82:e6:4a:cd:dc:57:8f:fb:af:
a2:5d:f3:f8:3d:a8:59:aa:1d:ac:74:30:76:d0:15:
d3:f0:07:d2:fa:9a:ac:27:23:03:1c:0a:ad:d3:d0:
a7:de:bc:3a:87:9d:35:e1:e0:85:2f:a9:34:e6:55:
59:db:3b:83:ec:48:a9:fe:81:22:16:24:74:80:fc:
37:8c:2b:ba:8c:fd:aa:e7:6e:9f:e3:21:d3:fd:b7:
7c:41:03:1c:28:a5:90:7b:53:39:6e:2d:ff:32:06:
12:f3:90:d8:d7:db:c4:5a:1b:0e:d5:b5:2e:cf:44:
1c:84:64:21:8c:66:68:94:da:f2:cc:af:5a:49:93:
81:28:0e:6a:33:3b:78:4b:1d:6a:e2:97:27:d3:eb:
8b:49:f8:b7:72:56:e1:20:5d:d6:6a:da:5e:71:db:
f0:f5:22:1c:d6:ba:13:46:a1:16:4a:61:e5:f8:ff:
e9:33:82:d8:59:6c:34:8d:fb:28:eb:0b:17:0d:77:
9c:03:d0:a6:0b:50:a1:cc:4e:b8:c9:2e:cb:52:b4:
4e:81:39:e0:5b:d8:a8:57:a8:0d:7d:58:31:99:24:
a2:c8:d5:26:26:b7:ce:03:00:a4:e7:48:ed:6b:b3:
ef:ef:d2:69:d6:20:84:f8:bc:55:c2:5a:7e:dd:42:
92:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:81:61:A1:32:37:9C:B8:6A:3D:D3:90:F7:E1:F6:9D:93:C1:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/24587a-f619-45b5-91fb-71dd6f299a61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/24587a-f619-45b5-91fb-71dd6f299a61/1/QQaBYaEyN5y4aj3TkPfh9p2TwfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.249.0/24
IPv6:
2a11:8840::/29
Signature Algorithm: sha256WithRSAEncryption
17:6d:41:b0:fe:68:33:57:53:1c:51:98:0e:b2:dc:a1:7f:5e:
b3:2b:10:76:bd:72:31:4a:7e:6a:e3:d1:71:c6:48:d0:65:43:
0a:4b:97:e8:64:93:86:44:5c:3c:23:8e:e3:a5:d6:b0:6b:b7:
98:ed:cc:35:23:d6:44:44:78:50:ab:70:68:7c:66:6a:7c:e9:
7a:14:cd:0c:3b:d6:51:5a:f4:39:dc:bf:df:f9:11:9e:6e:f4:
8f:cf:91:db:bf:3c:06:c6:2c:77:9d:1c:9b:30:4d:97:bc:f3:
89:14:46:44:fd:d1:84:28:42:32:05:d3:35:f4:15:fc:7b:3f:
6e:a9:26:f1:94:df:39:a2:a2:13:d2:04:cb:6e:07:ac:a0:57:
f4:b2:8d:58:cd:19:1e:3f:6b:fc:51:01:f2:b3:b9:24:8e:0a:
99:cc:24:b7:78:df:bb:90:51:e2:56:2f:3c:47:f9:6d:7a:7f:
22:39:b0:8b:90:30:d6:3e:cb:23:f3:bc:be:3b:e1:d1:c0:d3:
ea:28:e1:c4:51:99:6e:73:85:b0:10:3e:9a:5b:8a:31:14:b6:
18:f5:6e:2e:6c:67:42:fc:d7:ba:9b:1f:0d:0b:a5:79:fb:e8:
95:ae:ad:35:07:83:f5:e8:d2:1e:f2:39:b2:8e:9d:3b:79:59:
09:b3:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:12 2024 by rpki-client on console-ams.rpki-client.org