Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer
File: QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer (raw, json)
Hash identifier: rPrddrilf04Q42vgCHdSobwsLX9iMLhSRcanxz7Q7vg=
Subject key identifier: 42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8024E748F3FCA497B49D9B002D16A13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:43 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.211.0/24
IP: 2a12:1940::/29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 12:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:4e:74:8f:3f:ca:49:7b:49:d9:b0:02:d1:6a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=42d395fdc17645ef5c34ad8e531d1224d3146453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:bb:69:50:b5:a1:e8:1d:49:de:9a:b5:af:
25:be:de:95:67:39:95:39:ba:20:02:28:4d:0f:78:
55:2a:09:75:69:3d:7d:74:fe:93:0e:22:48:cc:06:
b7:a6:b4:41:a0:cf:14:40:37:7f:e2:0f:29:33:e5:
28:19:f6:ee:c7:32:6e:1b:63:28:49:76:a4:23:4e:
2f:0f:4b:1f:c4:56:64:a7:a4:a4:5d:4f:8d:88:9f:
20:bd:1c:2e:61:ad:2c:3c:c2:90:e6:19:9d:85:45:
d3:5e:a2:0a:fb:f9:57:37:fa:4f:e6:1c:85:e9:52:
64:09:2e:c7:2b:ef:4c:7a:1e:de:48:b6:68:55:22:
16:a3:75:30:f0:0d:33:97:d5:e8:4c:37:88:d2:bc:
57:18:13:eb:53:0f:82:32:1f:a2:c9:a0:1f:6a:4d:
89:ef:b2:0e:35:a2:8a:93:bb:8d:19:28:96:d2:e5:
06:d1:5d:de:0d:7f:e3:fa:9f:15:e0:27:7e:a1:a6:
54:a3:5e:d3:37:ee:d3:37:cd:71:03:bb:c6:5e:76:
ef:60:8d:6a:a0:c3:52:97:42:33:c5:96:62:a0:41:
cd:dd:6e:6c:64:99:51:7f:b0:36:55:b6:77:9b:46:
11:05:2b:a4:6f:08:21:d0:cd:4b:32:e3:bc:e4:67:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.211.0/24
IPv6:
2a12:1940::/29
Signature Algorithm: sha256WithRSAEncryption
14:53:9e:7f:78:0a:f3:bf:e9:af:ca:15:28:f7:fa:06:20:a0:
18:cf:6e:53:ec:48:03:34:4b:f9:01:6f:7c:25:6f:89:94:4a:
35:b5:5a:a0:ba:d6:bc:ee:8a:b6:02:3f:5e:13:52:e6:f1:f9:
55:40:f2:36:a5:0a:4a:8b:ea:da:ce:b1:ce:4c:e6:01:9d:6a:
dc:56:bf:1d:0e:04:dc:ab:0f:8e:14:12:ce:31:9d:b8:86:3f:
19:77:ec:59:f9:ec:60:80:47:85:0e:73:cb:68:47:14:ac:f1:
22:4f:88:4f:8f:6b:d7:51:0e:a1:6d:8a:61:74:8d:f7:de:b6:
69:49:f7:ff:05:d3:22:94:32:ea:85:c2:23:51:08:7d:52:6e:
90:48:3e:08:b9:9b:e8:c2:af:9e:42:39:dc:6d:7b:87:f7:d0:
46:1e:38:bc:78:cb:96:2d:96:f2:e0:72:5e:f5:f5:12:1d:6a:
a8:a3:71:e7:84:64:58:33:3f:9e:70:83:56:14:87:f6:f2:38:
d8:db:26:62:83:a3:b9:66:ab:ab:83:f3:87:00:50:7d:f1:71:
ff:a5:12:43:b6:56:4b:90:44:74:46:a8:40:40:6c:9d:c7:48:
7b:31:4e:cb:1a:bd:a1:91:4c:a9:c0:78:3e:7f:a8:12:a7:63:
d4:59:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:20 2024 by rpki-client on console-fra.rpki-client.org