Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QXHlrSelH2TuyEKHsrBL1v0gKPY.cer
File: QXHlrSelH2TuyEKHsrBL1v0gKPY.cer (raw, json)
Hash identifier: aV6YmIODLdd3G6dTZU2ZSBzF30o485xKg7VmYPEEx1Q=
Subject key identifier: 41:71:E5:AD:27:A5:1F:64:EE:C8:42:87:B2:B0:4B:D6:FD:20:28:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570898923A7959BEDD63ABD500CF1151D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/QXHlrSelH2TuyEKHsrBL1v0gKPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:32:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 44632
IP: 194.8.94.0/23
Validation: Failed, certificate revoked on Mon 27 Nov 2023 08:14:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:89:89:23:a7:95:9b:ed:d6:3a:bd:50:0c:f1:15:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4171e5ad27a51f64eec84287b2b04bd6fd2028f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:ad:7b:0b:fd:dd:b7:f6:ff:9d:92:3d:86:
f3:da:23:37:17:92:e8:9c:ea:fc:96:00:48:94:8c:
af:37:b4:9a:1a:b1:1f:b5:7e:d6:89:57:aa:78:5e:
36:fb:2a:c1:7c:6c:42:84:15:17:14:6b:68:6d:82:
10:48:e7:29:24:ea:13:ed:50:8e:4c:be:c2:13:b9:
7e:22:19:82:29:c0:84:f5:38:31:6c:30:4a:67:d5:
df:54:7b:6c:a9:7c:e1:48:30:31:c9:7a:84:87:4f:
f9:9a:67:7b:32:97:de:ce:03:6e:dc:5e:4e:66:b5:
55:f6:69:af:b7:03:e5:1d:ba:80:4f:c0:9c:fc:78:
15:3d:4c:a7:72:d5:39:c4:45:6d:74:fd:9e:df:c0:
55:8b:13:ab:2c:c8:40:b8:7c:3b:63:e6:41:89:5c:
1e:bb:bb:d0:db:7c:fb:0f:10:e8:b5:38:02:78:d9:
63:be:bf:79:2f:ac:7f:5c:95:51:df:ea:49:f7:99:
03:de:1f:3e:70:d6:d8:4d:ba:d7:37:9a:77:03:8d:
03:56:9d:f0:3b:8d:f9:32:3e:01:15:b4:a7:4d:7b:
08:82:a9:0f:f2:30:0c:59:ca:f5:aa:f0:9e:6c:44:
6d:8d:96:9d:17:a0:c8:f9:2d:9b:55:a8:11:d7:89:
fc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:71:E5:AD:27:A5:1F:64:EE:C8:42:87:B2:B0:4B:D6:FD:20:28:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/45a823-d1a8-4ffa-a7c5-bba95cc7a44f/1/QXHlrSelH2TuyEKHsrBL1v0gKPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.94.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44632
Signature Algorithm: sha256WithRSAEncryption
3d:81:cd:47:e0:a6:43:bc:67:43:c2:b2:aa:68:ff:10:c3:67:
0a:b4:97:8b:e0:66:46:3a:9a:90:c0:88:45:83:8e:6e:cb:4b:
40:d2:3e:c4:ae:24:b5:69:32:95:df:d9:d6:eb:de:f3:73:10:
2e:b4:f6:0d:2a:70:95:34:72:a3:d7:83:5a:26:05:11:dd:08:
b8:83:45:e9:5b:8c:c4:1f:c0:16:91:60:e9:c4:a6:6d:c0:73:
98:d6:87:99:fe:76:7b:2e:71:3e:7d:5f:1e:cb:82:fc:85:06:
89:87:82:9b:a5:08:68:f3:e5:e7:92:6e:6d:d0:b8:ab:5a:3d:
1e:38:8f:26:2f:be:f7:ec:91:ff:fb:69:9b:b4:dd:87:11:f6:
5d:ad:7a:87:26:11:6e:cd:f8:77:4e:ec:24:28:9e:d7:ee:33:
47:54:96:7f:c9:e4:f7:b7:47:02:89:e0:1d:81:02:6a:f1:f5:
28:d9:74:46:fd:0c:96:cf:53:bb:0f:8c:06:19:d7:16:be:4c:
86:00:be:e2:a0:86:2f:75:1c:f9:90:a9:12:4b:56:20:2a:81:
d1:a9:cf:85:8a:0c:a4:20:46:1c:b1:2a:99:6c:7a:52:8c:c8:
ea:33:81:1b:a1:2e:71:08:42:29:e4:0a:e0:63:71:46:d5:bc:
3f:76:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:13 2024 by rpki-client on console-ams.rpki-client.org