Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VqkhMpB3ooM8dwe8trgBZGXgwVY.cer
File: VqkhMpB3ooM8dwe8trgBZGXgwVY.cer (raw, json)
Hash identifier: 5whSlvX0pT1dZFCAC8aSEvSEfRzHQtV5QJRb4r5bZ0I=
Subject key identifier: 56:A9:21:32:90:77:A2:83:3C:77:07:BC:B6:B8:01:64:65:E0:C1:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018E411AAB73F0DE8E039DBAF2C8BF3FA5AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.netiface.net/repo/Pfcloud/1/56A921329077A2833C7707BCB6B8016465E0C156.mft
caRepository: rsync://rpki.netiface.net/repo/Pfcloud/1/
Notify URL: https://rpki.netiface.net/rrdp/notification.xml
Certificate not before: Fri 15 Mar 2024 07:54:10 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51396
AS: 215310
Validation: Failed, certificate revoked on Tue 28 May 2024 16:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:1a:ab:73:f0:de:8e:03:9d:ba:f2:c8:bf:3f:a5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 15 07:54:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56a921329077a2833c7707bcb6b8016465e0c156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:d2:6f:56:70:ba:62:3a:37:2c:69:8c:c7:
8b:94:9f:5b:f1:72:19:d1:de:22:33:35:c2:a3:9e:
b7:ab:3c:7a:85:90:4f:1a:ce:c0:41:92:21:fe:42:
aa:90:9f:30:66:34:84:09:65:5e:8a:f9:72:af:dc:
54:6f:f6:1c:05:0d:3c:4a:93:f8:4b:27:ac:cb:e4:
56:e6:e9:05:57:21:b1:d5:ee:17:ac:2e:ab:c6:65:
0b:54:a6:13:2e:d5:e1:ee:b4:4c:24:05:72:65:5f:
f4:b7:50:ee:ec:87:a7:d1:28:6c:47:02:7e:e2:da:
46:87:0c:f8:49:6c:85:7e:8d:9f:f8:90:7b:83:ca:
67:30:f3:30:a9:39:56:97:13:95:89:67:6c:c0:e5:
7e:e0:a0:e9:1a:9c:31:99:d8:81:e3:75:ef:16:c7:
dc:da:12:01:af:b6:f3:08:52:a7:ae:b6:f0:81:aa:
12:e9:8b:4a:b0:c3:aa:94:b1:6b:bb:a5:de:76:c2:
10:14:bf:e7:01:53:3f:1c:23:ef:01:03:20:42:4b:
eb:96:37:36:ee:4a:3f:e9:c2:6c:08:50:1f:7a:23:
bd:eb:24:b2:74:ce:f7:c4:91:cd:b2:f2:8e:50:21:
b0:75:9e:c7:34:67:47:52:b8:25:92:4e:d4:29:e4:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:21:32:90:77:A2:83:3C:77:07:BC:B6:B8:01:64:65:E0:C1:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.netiface.net/repo/Pfcloud/1/
RPKI Manifest - URI:rsync://rpki.netiface.net/repo/Pfcloud/1/56A921329077A2833C7707BCB6B8016465E0C156.mft
RPKI Notify - URI:https://rpki.netiface.net/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51396
215310
Signature Algorithm: sha256WithRSAEncryption
40:d0:88:6b:d5:bc:4f:25:34:96:04:2d:1b:58:e9:29:d9:3b:
db:16:4c:07:8f:df:f7:46:eb:eb:7b:39:d8:8e:76:7b:a6:d1:
61:b2:42:93:ed:ef:87:22:a8:34:15:3f:53:fe:62:fd:c1:89:
28:2f:e2:fc:85:25:67:7d:38:27:13:08:d5:41:18:c0:8b:f4:
1d:fa:56:b2:8c:79:8a:02:fb:4d:e2:5a:96:18:c7:9b:4a:46:
06:5f:06:e2:59:3c:42:3c:cf:84:91:df:c2:80:9b:f8:f6:cf:
a4:a7:ff:7b:bc:45:6e:6a:e4:6a:74:0b:bf:15:eb:62:ac:a6:
3b:93:f5:d2:60:19:8f:a5:8e:41:91:f4:25:c8:0b:c1:df:af:
76:54:b6:33:c9:ad:f0:05:72:b4:37:b8:c3:07:fa:46:02:8d:
7a:72:8b:12:9e:95:63:02:f1:43:2c:78:0b:9e:84:ea:4c:a0:
7e:50:64:00:d0:21:07:cb:03:91:42:10:43:ea:1b:5f:5c:fb:
33:79:19:4b:09:02:25:a5:0b:7b:a5:53:92:0a:04:be:6c:62:
2c:8a:5c:3a:79:2a:a5:f5:cb:b8:d2:52:76:07:ff:25:a6:48:
04:7b:31:87:64:26:9b:2b:0d:9c:b0:4a:9a:42:9c:08:46:23:
a3:f5:9f:a1
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAY5BGqtz8N6OA5268si/P6WtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMzE1MDc1NDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmE5MjEzMjkwNzdhMjgzM2M3NzA3YmNiNmI4MDE2NDY1ZTBjMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00bSb1ZwumI6NyxpjMeLlJ9b8XIZ
0d4iMzXCo563qzx6hZBPGs7AQZIh/kKqkJ8wZjSECWVeivlyr9xUb/YcBQ08SpP4
Syesy+RW5ukFVyGx1e4XrC6rxmULVKYTLtXh7rRMJAVyZV/0t1Du7Ien0ShsRwJ+
4tpGhwz4SWyFfo2f+JB7g8pnMPMwqTlWlxOViWdswOV+4KDpGpwxmdiB43XvFsfc
2hIBr7bzCFKnrrbwgaoS6YtKsMOqlLFru6XedsIQFL/nAVM/HCPvAQMgQkvrljc2
7ko/6cJsCFAfeiO96ySydM73xJHNsvKOUCGwdZ7HNGdHUrglkk7UKeTVjQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFFapITKQd6KDPHcHvLa4AWRl4MFWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgecGCCsGAQUFBwELBIHaMIHXMDUGCCsGAQUFBzAFhilyc3lu
YzovL3Jwa2kubmV0aWZhY2UubmV0L3JlcG8vUGZjbG91ZC8xLzBhBggrBgEFBQcw
CoZVcnN5bmM6Ly9ycGtpLm5ldGlmYWNlLm5ldC9yZXBvL1BmY2xvdWQvMS81NkE5
MjEzMjkwNzdBMjgzM0M3NzA3QkNCNkI4MDE2NDY1RTBDMTU2Lm1mdDA7BggrBgEF
BQcwDYYvaHR0cHM6Ly9ycGtpLm5ldGlmYWNlLm5ldC9ycmRwL25vdGlmaWNhdGlv
bi54bWwwWQYDVR0fBFIwUDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvREVGQVVMVC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3Js
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQgBAf8EEDAOoAww
CgIDAMjEAgMDSQ4wDQYJKoZIhvcNAQELBQADggEBAEDQiGvVvE8lNJYELRtY6SnZ
O9sWTAeP3/dG6+t7OdiOdnum0WGyQpPt74ciqDQVP1P+Yv3BiSgv4vyFJWd9OCcT
CNVBGMCL9B36VrKMeYoC+03iWpYYx5tKRgZfBuJZPEI8z4SR38KAm/j2z6Sn/3u8
RW5q5Gp0C78V62KspjuT9dJgGY+ljkGR9CXIC8Hfr3ZUtjPJrfAFcrQ3uMMH+kYC
jXpyixKelWMC8UMseAuehOpMoH5QZADQIQfLA5FCEEPqG19c+zN5GUsJAiWlC3ul
U5IKBL5sYiyKXDp5KqX1y7jSUnYH/yWmSAR7MYdkJpsrDZywSppCnAhGI6P1n6E=
-----END CERTIFICATE-----
Generated at Wed Apr 23 16:56:30 2025 by rpki-client