Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QeSLE1UcTzAnIqgPjGLm79U2ntw.cer
File: QeSLE1UcTzAnIqgPjGLm79U2ntw.cer (raw, json)
Hash identifier: REdo9A27CyqNm+mNJEFec/1TLoJN2duO4lYqCs+WMH4=
Subject key identifier: 41:E4:8B:13:55:1C:4F:30:27:22:A8:0F:8C:62:E6:EF:D5:36:9E:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB1ABFB42C0E172B923BD7171FDB04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 34660
AS: 43539
IP: 94.199.24.0/21
IP: 159.253.48.0/21
IP: 178.23.160.0/21
IP: 185.52.196.0/22
IP: 185.52.220.0/22
IP: 217.168.144.0/20
IP: 2a00:1fb0::/29
IP: 2a02:20d0::/29
Validation: Failed, certificate revoked on Mon 28 Oct 2024 13:28:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1a:bf:b4:2c:0e:17:2b:92:3b:d7:17:1f:db:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41e48b13551c4f302722a80f8c62e6efd5369edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:d8:06:35:cf:62:c5:9c:e9:89:bf:ed:f5:
5f:b2:92:43:99:17:98:eb:e3:88:9a:1f:a9:1d:67:
61:0a:88:f9:af:5e:9d:eb:7a:b6:d3:3c:63:ab:bb:
1a:ac:d4:f6:55:c5:30:73:70:b0:95:25:df:4b:4f:
60:5a:96:7e:ca:8b:07:65:20:16:a7:f5:d8:d2:be:
bb:45:b6:dc:e4:1e:33:cf:13:15:bd:ca:4c:4b:d3:
da:60:2f:19:26:f7:3e:e9:3e:0b:9f:b5:fb:0e:58:
a7:47:36:15:36:62:ee:b9:8c:5b:30:76:86:20:73:
47:ac:a5:16:12:e9:f1:7a:97:6e:61:04:02:7d:a3:
d9:b5:ac:95:9e:95:53:da:f3:92:78:32:e0:dc:2d:
a4:64:0f:45:09:18:ad:e2:9a:5f:43:85:6e:c3:ff:
e1:62:16:9a:64:a7:49:66:38:fa:55:7e:cd:7b:02:
78:30:6e:bb:57:7f:64:c4:57:90:fb:bf:03:9e:ad:
e2:e1:51:00:8c:41:bd:15:fa:f5:f5:c2:0d:b8:d3:
e4:94:02:69:40:d9:62:09:45:15:1d:7a:12:ec:d1:
62:7f:67:da:cd:06:ea:65:b3:02:aa:35:3b:01:a7:
df:f2:53:36:70:c0:a8:44:e4:f9:d6:c4:66:79:81:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:8B:13:55:1C:4F:30:27:22:A8:0F:8C:62:E6:EF:D5:36:9E:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/179684-cb21-4dcc-9621-5f911603945a/1/QeSLE1UcTzAnIqgPjGLm79U2ntw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.24.0/21
159.253.48.0/21
178.23.160.0/21
185.52.196.0/22
185.52.220.0/22
217.168.144.0/20
IPv6:
2a00:1fb0::/29
2a02:20d0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34660
43539
Signature Algorithm: sha256WithRSAEncryption
2a:69:ae:37:74:51:62:53:34:46:1d:06:eb:6e:ab:ec:d8:3f:
85:e1:19:b2:eb:8a:5a:dc:01:8b:d5:eb:a1:11:e2:05:19:db:
09:21:83:93:f3:e1:98:a0:88:a5:51:55:b1:fb:a8:b4:f7:a6:
09:e1:9b:2b:cd:45:b5:38:94:9b:ac:69:3c:af:ce:8b:5f:80:
6f:44:7f:9d:c9:38:48:d4:a1:39:79:78:62:83:33:a0:91:20:
33:9d:66:83:ef:1b:69:6b:ee:ab:1e:47:71:2d:aa:c2:e4:ef:
2c:ea:e5:5f:80:ec:06:ac:aa:9b:e6:e2:88:3a:1a:08:8c:09:
33:bb:64:64:20:49:65:eb:7a:f6:92:74:11:6d:2f:6a:98:64:
c8:98:71:2a:92:43:f3:8e:cb:f7:60:f3:45:8e:e8:9a:d4:a1:
c0:3a:bf:9b:4d:7b:5a:f5:89:18:cd:ee:bd:f6:12:1b:b0:06:
01:d7:eb:b2:d9:7b:32:57:ee:33:77:7d:f0:a1:b7:63:a2:ec:
c5:c1:5a:ab:73:a1:e4:5a:71:be:63:5c:3d:86:40:eb:fb:de:
03:85:57:b3:61:86:01:51:41:a1:ff:5c:c1:5e:de:49:4e:35:
79:22:cc:fa:43:3e:0f:46:3d:3d:1f:b5:07:f5:62:89:5a:97:
3c:df:88:a4
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAYzC2xq/tCwOFyuSO9cXH9sEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWU0OGIxMzU1MWM0ZjMwMjcyMmE4MGY4YzYyZTZlZmQ1MzY5ZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQfYBjXPYsWc6Ym/7fVfspJDmReY
6+OImh+pHWdhCoj5r16d63q20zxjq7sarNT2VcUwc3CwlSXfS09gWpZ+yosHZSAW
p/XY0r67Rbbc5B4zzxMVvcpMS9PaYC8ZJvc+6T4Ln7X7DlinRzYVNmLuuYxbMHaG
IHNHrKUWEunxepduYQQCfaPZtayVnpVT2vOSeDLg3C2kZA9FCRit4ppfQ4Vuw//h
YhaaZKdJZjj6VX7NewJ4MG67V39kxFeQ+78Dnq3i4VEAjEG9Ffr19cINuNPklAJp
QNliCUUVHXoS7NFif2fazQbqZbMCqjU7Aaff8lM2cMCoROT51sRmeYHf+QIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFEHkixNVHE8wJyKoD4xi5u/VNp7cMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzE3OTY4
NC1jYjIxLTRkY2MtOTYyMS01ZjkxMTYwMzk0NWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMTc5Njg0
LWNiMjEtNGRjYy05NjIxLTVmOTExNjAzOTQ1YS8xL1FlU0xFMVVjVHpBbklxZ1Bq
R0xtNzlVMm50dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF
BwEHAQH/BEQwQjAqBAIAATAkAwQDXscYAwQDn/0wAwQDshegAwQCuTTEAwQCuTTc
AwQE2aiQMBQEAgACMA4DBQMqAB+wAwUDKgIg0DAfBggrBgEFBQcBCAEB/wQQMA6g
DDAKAgMAh2QCAwCqEzANBgkqhkiG9w0BAQsFAAOCAQEAKmmuN3RRYlM0Rh0G626r
7Ng/heEZsuuKWtwBi9XroRHiBRnbCSGDk/PhmKCIpVFVsfuotPemCeGbK81FtTiU
m6xpPK/Oi1+Ab0R/nck4SNShOXl4YoMzoJEgM51mg+8baWvuqx5HcS2qwuTvLOrl
X4DsBqyqm+biiDoaCIwJM7tkZCBJZet69pJ0EW0vaphkyJhxKpJD847L92DzRY7o
mtShwDq/m017WvWJGM3uvfYSG7AGAdfrstl7MlfuM3d98KG3Y6LsxcFaq3Oh5Fpx
vmNcPYZA6/veA4VXs2GGAVFBof9cwV7eSU41eSLM+kM+D0Y9PR+1B/ViiVqXPN+I
pA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:22 2025 by rpki-client