Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QjXWnY2Jb67G58IXHTDdCbUBoD8.cer
File: QjXWnY2Jb67G58IXHTDdCbUBoD8.cer (raw, json)
Hash identifier: yltrT3qOZZC72nE/R+iqbL+fJWDDIeXZtEAKgHRQOo4=
Subject key identifier: 42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CAB27B77AA74A3BB4C26426B21A82E391
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 27 Dec 2023 12:02:36 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 188.212.36.0/24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 13:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ab:27:b7:7a:a7:4a:3b:b4:c2:64:26:b2:1a:82:e3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 27 12:02:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4235d69d8d896faec6e7c2171d30dd09b501a03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e6:9a:4c:61:ee:99:68:b1:b9:18:bb:f0:62:
86:8a:ee:16:f3:db:15:c8:e8:3a:51:98:32:b3:d4:
92:dc:40:cd:03:ad:11:aa:c1:4e:d9:d8:cf:c3:c8:
e2:aa:29:d9:f2:10:16:d8:e4:1d:da:c5:a1:23:f0:
34:76:4f:ff:14:c7:d5:cc:49:f8:a0:d2:45:f3:5e:
7e:83:c1:d4:60:dd:aa:af:9d:c3:e2:84:7c:e8:23:
12:0e:10:bc:25:6d:0d:99:37:f9:0e:e1:70:17:39:
19:6a:0a:38:4f:63:30:d4:5f:2a:84:08:58:de:8c:
53:9b:96:79:7e:c3:58:f9:59:55:42:f3:1d:d6:e4:
93:df:26:db:dc:19:81:9e:96:18:02:84:d4:18:f5:
1f:17:4a:e1:2c:84:e3:10:70:03:fc:a7:30:ad:24:
6c:22:e1:2e:fe:ff:23:9f:aa:84:b3:47:56:76:fa:
60:3f:b7:67:68:24:3f:d0:2d:e7:14:d9:ea:f7:eb:
2d:9b:da:44:ee:16:07:09:5f:58:f2:54:6d:88:52:
d7:37:b6:1d:6b:21:8a:d5:48:11:e4:08:d5:02:15:
61:59:dd:c7:38:7c:e7:37:ee:e0:72:35:c1:46:cc:
4b:46:10:15:59:69:ef:55:15:7e:71:4d:07:6e:8e:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:35:D6:9D:8D:89:6F:AE:C6:E7:C2:17:1D:30:DD:09:B5:01:A0:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2da3de-f40c-49bd-af52-a9ae251e2fc5/1/QjXWnY2Jb67G58IXHTDdCbUBoD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.212.36.0/24
Signature Algorithm: sha256WithRSAEncryption
63:94:3c:ba:d2:85:fb:a6:e8:6d:67:bd:92:68:a8:25:be:2f:
d2:13:a5:79:35:29:e3:d9:58:dd:2e:07:42:26:bb:5b:ab:76:
73:db:8a:51:1d:f9:f9:d1:fb:7b:2c:17:fc:11:1d:33:41:99:
87:35:27:96:6c:e4:25:8b:3a:59:74:23:a9:7e:1a:27:18:24:
23:93:19:c7:ad:59:4d:fd:14:a3:c9:59:47:b5:8c:5b:3b:b0:
79:a8:d3:d2:15:ba:bd:d7:fd:11:39:bc:dd:59:83:f8:90:2a:
2c:65:1f:6c:52:8f:1e:3d:bd:cf:4f:32:3f:2b:15:e0:7d:f4:
a6:e8:19:cd:95:4c:b3:83:72:c6:db:a2:98:e0:ad:ce:7e:6e:
a2:f9:b7:bd:42:45:b0:07:13:cd:67:a2:ec:a4:ce:8d:69:30:
90:2d:07:04:f1:0b:f6:49:59:15:c2:be:f3:14:a9:2d:26:47:
7c:d9:d3:c3:84:af:f2:f0:cb:e5:88:34:54:11:36:56:07:f2:
3e:54:10:9c:2e:51:44:6d:80:15:8a:49:85:be:46:1e:5f:6c:
4e:eb:8b:3e:e5:7e:06:de:06:4a:34:91:46:67:b9:19:74:f8:
11:f7:08:25:33:d9:df:86:09:95:ac:83:7d:b2:f9:65:a8:2d:
8b:2c:a2:a6
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYyrJ7d6p0o7tMJkJrIaguORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMjI3MTIwMjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjM1ZDY5ZDhkODk2ZmFlYzZlN2MyMTcxZDMwZGQwOWI1MDFhMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OaaTGHumWixuRi78GKGiu4W89sV
yOg6UZgys9SS3EDNA60RqsFO2djPw8jiqinZ8hAW2OQd2sWhI/A0dk//FMfVzEn4
oNJF815+g8HUYN2qr53D4oR86CMSDhC8JW0NmTf5DuFwFzkZago4T2Mw1F8qhAhY
3oxTm5Z5fsNY+VlVQvMd1uST3ybb3BmBnpYYAoTUGPUfF0rhLITjEHAD/KcwrSRs
IuEu/v8jn6qEs0dWdvpgP7dnaCQ/0C3nFNnq9+stm9pE7hYHCV9Y8lRtiFLXN7Yd
ayGK1UgR5AjVAhVhWd3HOHznN+7gcjXBRsxLRhAVWWnvVRV+cU0Hbo5A1QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEI11p2NiW+uxufCFx0w3Qm1AaA/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzJkYTNk
ZS1mNDBjLTQ5YmQtYWY1Mi1hOWFlMjUxZTJmYzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMmRhM2Rl
LWY0MGMtNDliZC1hZjUyLWE5YWUyNTFlMmZjNS8xL1FqWFduWTJKYjY3RzU4SVhI
VERkQ2JVQm9EOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAvNQkMA0GCSqGSIb3DQEBCwUAA4IBAQBjlDy6
0oX7puhtZ72SaKglvi/SE6V5NSnj2VjdLgdCJrtbq3Zz24pRHfn50ft7LBf8ER0z
QZmHNSeWbOQlizpZdCOpfhonGCQjkxnHrVlN/RSjyVlHtYxbO7B5qNPSFbq91/0R
ObzdWYP4kCosZR9sUo8ePb3PTzI/KxXgffSm6BnNlUyzg3LG26KY4K3Ofm6i+be9
QkWwBxPNZ6LspM6NaTCQLQcE8Qv2SVkVwr7zFKktJkd82dPDhK/y8MvliDRUETZW
B/I+VBCcLlFEbYAVikmFvkYeX2xO64s+5X4G3gZKNJFGZ7kZdPgR9wglM9nfhgmV
rIN9svllqC2LLKKm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-fra.rpki-client.org