Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
File: Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer (raw, json)
Hash identifier: 0h5huLJsVvkhisDd0NmJJinOtMOIh50bCOIimg60Cak=
Subject key identifier: 42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC64B84A83C4F08855EE5B5E1F35D7D96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 18:31:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.209.50.0/24
IP: 2a12:d180::/29
Validation: Failed, certificate revoked on Fri 09 Feb 2024 09:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:84:a8:3c:4f:08:85:5e:e5:b5:e1:f3:5d:7d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:18:91:48:e6:8a:12:f5:42:04:44:4a:86:
f5:76:85:17:0e:db:8e:90:8c:f1:46:ed:33:8e:32:
5d:20:0d:f4:f5:32:76:cf:76:20:72:48:4c:37:50:
1b:1b:7d:c4:8f:86:88:2a:26:07:3a:5d:0e:00:88:
c1:42:b9:ab:8e:ef:1b:32:d5:0a:40:4f:ac:54:e8:
19:56:6a:df:1c:81:40:39:20:6f:ee:92:3d:ca:49:
47:54:7b:a2:07:cd:2b:e5:43:2f:31:84:e6:38:2b:
ad:6f:35:86:13:8b:23:24:bc:31:ad:53:4d:a4:f9:
fb:59:b1:5f:1b:52:b3:ca:51:22:af:04:49:ca:9e:
dd:88:37:38:1b:cb:07:6b:b4:af:b4:79:ad:1e:02:
1d:c1:fc:46:a9:71:8b:3e:de:d2:e7:ac:b5:3e:ac:
6f:75:1b:52:0a:bc:19:cd:93:d3:1b:61:ea:e2:25:
cc:e6:e5:fd:14:89:fb:b3:c5:0d:ab:e9:4d:f4:3f:
d0:09:3c:27:ee:94:21:46:4e:c2:a9:25:fd:03:5b:
4d:15:5e:61:d6:79:51:2f:3d:38:98:e0:45:45:04:
72:81:ac:96:d2:ee:d5:87:f3:dd:d9:9c:65:48:87:
6e:6e:26:a6:77:1c:1c:c3:59:bf:2b:57:85:f0:72:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.50.0/24
IPv6:
2a12:d180::/29
Signature Algorithm: sha256WithRSAEncryption
97:26:bc:fd:9a:92:83:15:33:eb:d1:f3:e3:7b:6e:91:8b:fb:
67:75:c0:63:0a:3a:fa:2b:78:2c:79:da:bf:06:e6:69:60:b5:
9c:d7:fc:17:8c:48:2e:5d:00:fe:c4:cd:a0:16:c4:78:2d:1a:
6b:f3:9b:b7:51:1e:71:8d:d6:9b:06:7f:88:a7:51:f8:56:fc:
e2:5f:eb:61:c7:2e:42:e3:f1:f5:ed:d1:67:ad:6a:12:46:53:
60:5e:ce:03:bd:4c:ff:86:2c:90:d9:96:ed:dd:af:0d:7c:a1:
77:c4:8b:bb:fd:a5:fd:45:4b:5d:17:3f:5d:d7:2e:e3:88:c8:
9e:7e:41:6c:12:8e:c4:a1:f4:60:34:00:6a:b8:ce:88:b1:12:
48:e0:cb:e3:a2:28:e7:43:28:7f:e6:2b:ee:03:a9:76:d6:f5:
60:af:05:56:d1:c0:0e:20:92:c1:36:18:86:c1:56:aa:91:dd:
5f:5a:d7:36:12:c1:62:a0:35:b2:4f:0e:b5:8b:0f:3a:63:12:
0d:1b:fe:95:4c:d7:21:27:d8:c3:3c:08:18:5a:37:d2:92:0d:
17:24:3e:98:75:ef:e9:78:16:41:3c:fc:83:d3:95:cf:08:9c:
27:01:93:dc:52:24:cd:34:e5:e8:37:c7:6a:80:b9:10:06:bf:
6e:58:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-fra.rpki-client.org