Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
File: QvSPf64BKRanddXjtvojEJg0PqA.cer (raw, json)
Hash identifier: GU900nXWujs75zO9v3BXtZ8IdQbUbfxjV4oKojWJkRw=
Subject key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01857288474D2AC9AD5F16C4768E6C5910C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 12:50:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 89.33.166.0/23
IP: 89.35.60.0/23
Validation: Failed, certificate revoked on Fri 27 Jan 2023 11:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:88:47:4d:2a:c9:ad:5f:16:c4:76:8e:6c:59:10:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:50:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:09:ef:40:f5:a3:1c:ba:06:4d:b9:f9:4b:
1f:f4:b7:f6:e5:9e:3e:9e:f2:62:21:56:99:88:85:
4a:0a:cb:f4:31:5b:9a:5a:1c:2f:20:15:25:1c:67:
53:a6:99:ef:7e:64:da:4d:aa:09:2a:8a:c0:ac:dc:
84:3d:1e:80:b6:dd:0a:e8:5b:87:41:81:fd:9e:31:
62:8d:3b:6d:76:82:4b:3c:7f:19:68:15:6a:2e:b7:
82:28:8a:5f:54:de:6f:ef:f4:58:9d:d7:69:22:99:
c0:7f:35:d5:c7:a5:4e:e0:f8:98:bf:aa:f3:1c:dd:
21:dc:ad:7d:48:50:72:01:b3:50:ff:db:d3:25:fc:
83:a5:ef:9a:a6:11:a9:da:9b:5b:a1:39:6e:86:2d:
d2:74:be:47:d0:a0:63:32:5d:a1:d8:78:d4:97:8b:
2f:7a:83:5c:b0:fb:01:e0:5c:31:f2:58:45:9c:8e:
a2:1d:7b:20:a2:b8:f6:7c:06:43:fb:ff:8d:4c:1d:
49:2f:48:4f:61:06:4b:a0:07:44:66:55:d0:74:3b:
53:3b:84:03:f6:1f:81:e8:57:1c:40:d6:26:27:8f:
ba:63:b6:0c:dc:5f:eb:fb:0d:f7:8a:3d:67:02:c3:
2e:70:37:8e:54:6a:d9:2d:06:59:33:24:8f:2e:31:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.166.0/23
89.35.60.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:9a:78:2c:28:0d:2d:53:a8:2d:9f:ff:4f:76:43:09:5a:a1:
9b:a1:b4:98:31:2f:58:e8:4b:da:a2:8f:ef:1f:05:4b:58:2c:
4e:39:8f:4f:dc:40:28:75:f0:ba:dd:6e:25:7c:0a:80:be:78:
3a:c2:95:f5:88:9e:0f:42:de:90:52:90:44:8b:a7:20:6e:1c:
21:3a:ee:8d:f2:16:84:20:91:bc:64:24:ab:b6:c1:f9:37:5f:
20:3c:16:ad:cf:33:df:59:fd:51:20:7a:88:ea:24:a9:a0:70:
4f:d8:b1:4f:1c:b8:f1:10:88:f4:3d:d8:0b:b3:7f:07:23:df:
8c:42:3c:cd:d1:22:ad:80:f6:33:2e:5a:98:e0:36:67:bd:6e:
81:b3:f7:04:cb:40:69:10:06:3e:ed:76:7a:2b:09:9d:b3:bc:
be:c7:78:de:b4:42:e7:bc:1f:2a:7d:30:28:e0:14:7d:da:04:
80:6c:f6:fd:c7:20:97:27:2b:f0:95:b5:d1:36:0b:8c:0f:a1:
68:3c:4b:a9:f0:08:6e:27:00:a5:00:12:21:16:6e:4d:b0:31:
10:5e:50:5a:6a:e6:ec:c9:0e:65:94:8a:32:9e:6e:ee:f9:53:
1c:08:27:78:a8:9d:5a:7c:b4:20:d2:b4:24:5d:a2:33:89:e3:
e5:72:e9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:20 2024 by rpki-client on console-ams.rpki-client.org