Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qw8S74-FjceE_RwlAkQVltEz1gA.cer
File: Qw8S74-FjceE_RwlAkQVltEz1gA.cer (raw, json)
Hash identifier: f/KDH9wzU7YiYfPKxqz3wcw4mE+4pBy8m2lYz10Bd9o=
Subject key identifier: 43:0F:12:EF:8F:85:8D:C7:84:FD:1C:25:02:44:15:96:D1:33:D6:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187222C3518EFA96BB92B825E2E35294721
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/183/430F12EF8F858DC784FD1C2502441596D133D600.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/183
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 27 Mar 2023 08:25:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.116.27.0/24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:2c:35:18:ef:a9:6b:b9:2b:82:5e:2e:35:29:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 08:25:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=430f12ef8f858dc784fd1c2502441596d133d600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:16:d5:0e:6a:ad:2c:8b:d0:d6:82:17:89:ee:
a5:40:1f:d8:ed:7e:69:e2:81:d9:a0:65:45:fa:ab:
3a:2b:5a:f4:67:58:9d:fd:df:69:a4:ec:2e:19:06:
80:e8:19:e8:f3:f3:e2:f0:28:c8:ac:17:bc:cd:31:
d2:8f:7a:fa:b2:e3:d3:3c:27:ef:e7:9e:e5:2d:55:
5a:c9:e7:50:a1:a4:f5:5c:d6:95:df:fd:30:df:a8:
84:a2:d1:10:95:b2:74:f3:cd:f7:9b:5d:19:72:a1:
e5:27:23:4a:73:23:6e:12:66:6c:01:51:5c:3a:b7:
d1:db:41:cf:77:e7:c9:ea:95:a6:40:bc:00:e1:e6:
88:a3:67:25:0c:43:bd:7d:93:04:7e:b3:2b:af:5b:
9b:b3:9d:46:e2:62:41:de:4d:2d:b6:88:bb:dc:db:
08:45:7f:ce:6c:f4:c5:ad:f4:a0:35:46:65:8c:aa:
0e:8d:0b:73:3a:2d:6e:ea:32:4f:8a:a3:b0:94:25:
6b:a5:3e:1d:d0:db:d2:c4:67:8d:a4:85:e4:85:66:
34:56:eb:20:d7:5d:e3:93:99:9d:2c:a2:59:2e:a9:
d6:95:60:4d:97:15:71:22:a4:8b:13:d6:c2:25:ed:
02:37:49:d3:b1:97:bc:8b:f3:2c:3b:c0:cf:8a:1e:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0F:12:EF:8F:85:8D:C7:84:FD:1C:25:02:44:15:96:D1:33:D6:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/183
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/183/430F12EF8F858DC784FD1C2502441596D133D600.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.27.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9b:7d:1b:7f:3c:ca:ee:35:d7:85:e4:cf:b8:43:2f:31:1f:
c8:d1:b8:7c:52:c6:98:88:7d:8c:8a:6f:af:ec:51:94:31:69:
5c:15:ad:53:8e:7c:d8:e8:cf:38:fa:b3:31:56:57:d5:ad:57:
2c:ab:8b:f7:18:0e:f3:bc:e1:58:db:93:f4:8e:7a:ce:74:7a:
32:f7:31:88:e3:77:ac:04:3d:30:06:e6:54:9e:5f:c9:c6:ca:
31:ac:c0:c0:a8:d0:df:a7:1d:51:36:ca:ff:f8:e4:7f:46:57:
2d:e9:42:ad:9e:59:35:7d:3b:46:be:19:a5:99:98:09:62:cc:
8d:24:cf:b5:68:3f:00:f9:26:5c:a3:a3:45:c9:65:9b:a3:a8:
f9:43:8c:8d:f0:ec:87:c7:5d:b1:b4:5d:be:4c:b4:69:78:bf:
90:a9:f0:09:12:3d:8e:c3:9e:e2:4c:ba:bb:a8:02:98:a0:9e:
80:b8:79:e7:9c:a2:9f:aa:79:c9:9d:f4:c8:e4:c3:74:60:d8:
3d:aa:fc:06:9a:06:4b:92:05:c7:82:68:0b:3f:da:81:2d:fa:
f3:39:18:51:ff:2e:9f:91:3e:b9:08:3a:12:7c:cc:c6:11:28:
77:2f:c1:04:18:0d:a2:3d:ad:fd:9f:b7:7d:d4:e3:7a:15:9d:
c2:bb:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:32:21 2024 by rpki-client on console-ams.rpki-client.org