Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
File: Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer (raw, json)
Hash identifier: 37M9IiwEUdWlqScY2mVP1HSdCUrNfadrffLTSG7urgU=
Subject key identifier: 42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC7949C06561AD95926DEB3D0B21510AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:54 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 217.198.180.0/24
IP: 2a11:fcc0::/29
Validation: Failed, certificate revoked on Mon 12 Feb 2024 14:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:9c:06:56:1a:d9:59:26:de:b3:d0:b2:15:10:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f9:a6:75:15:af:0c:5e:f9:87:5a:ab:95:f3:
e5:4e:7e:fc:59:bf:30:44:6e:7c:f7:8d:5e:90:c1:
cf:33:72:4b:7c:2c:ce:e2:59:67:aa:97:5d:8e:9b:
eb:f5:ae:a2:a4:86:3f:26:e7:a3:f5:81:f3:43:c6:
a1:fd:e5:14:e5:5e:ec:a1:16:d5:a9:13:28:9a:a1:
fe:91:d3:2d:45:6e:8f:81:5a:16:7b:39:a8:af:a0:
00:c7:d4:f1:10:12:ad:a5:88:bc:f6:c8:1d:29:5f:
23:d3:6e:27:33:50:86:8e:6f:fe:47:12:d9:e7:a8:
03:bd:36:12:73:23:d9:f0:98:65:55:34:ff:d4:29:
c2:62:30:c6:8f:91:15:41:5e:58:54:3b:9c:67:09:
ea:b4:8d:c7:fb:95:e0:35:4f:e0:ff:30:00:42:91:
1e:17:e2:25:e7:23:8a:8c:70:e0:ae:f7:3a:e1:27:
9b:23:d6:d7:c0:a5:bf:2d:f0:59:40:72:ba:e6:ab:
3b:4c:fb:d7:19:2c:42:5a:ee:ea:a1:54:8d:7b:1f:
d6:f3:06:ed:96:7a:e6:af:07:f8:4f:db:ed:24:26:
c1:a4:9c:a5:a3:85:92:6f:c7:dc:9c:b9:c7:6e:89:
d0:4b:c1:04:58:fa:5c:cf:15:a7:fb:c9:04:1f:11:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.180.0/24
IPv6:
2a11:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
64:95:ed:42:f0:e7:c6:13:72:e5:27:fa:c0:a4:ad:4a:d4:5b:
db:8f:f1:35:97:39:f2:4e:63:08:81:7e:75:b9:8a:84:28:c7:
40:05:b5:a9:9a:ca:23:22:d3:1a:f5:f0:c7:8b:4f:09:f1:e6:
ef:52:2f:31:62:20:6d:9a:12:13:ce:1a:3e:9e:4d:ac:87:7b:
57:39:a0:12:52:ee:da:38:ba:24:77:eb:4f:be:81:bf:24:10:
b6:bb:7d:a2:0c:45:b8:aa:31:f9:1d:7a:04:10:01:f9:b7:d1:
54:5a:78:ab:ae:1b:8b:13:2a:5e:85:fc:30:7c:a0:dc:34:b3:
09:59:fb:b8:9c:50:a8:14:7a:0b:26:38:c3:36:08:8a:1d:eb:
4a:c9:56:d6:b5:3d:b0:e1:13:31:96:b2:a4:86:1d:93:8d:08:
dc:80:95:7c:f1:cf:a1:03:4a:8f:c7:23:c5:9e:01:eb:72:af:
bd:5d:53:6b:0d:36:ef:98:97:f6:f9:6c:34:9d:c5:2e:d8:27:
8f:03:ae:27:a9:d5:95:bf:46:fc:cd:0f:75:7d:45:e3:79:c8:
74:76:9e:f9:59:88:5d:ab:06:dd:26:4f:eb:aa:af:4a:93:97:
85:33:bd:57:c6:17:ce:f5:c2:77:32:c1:d4:70:73:d9:54:83:
42:e4:86:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-fra.rpki-client.org