Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-qj9BJK5PuNNsQWprGQAmqe23k.cer
File: m-qj9BJK5PuNNsQWprGQAmqe23k.cer (raw, json)
Hash identifier: C8cVcVekzyRUb3Ff/oKFaWWHEZQxtKb+pSR+ja/XBsc=
Subject key identifier: 9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC5DC25A5F1B6975969684B321A5C2132
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/m-qj9BJK5PuNNsQWprGQAmqe23k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 16:29:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 213.217.10.0/24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 15:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:25:a5:f1:b6:97:59:69:68:4b:32:1a:5c:21:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 16:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9beaa3f4124ae4fb8d36c416a6b190026a9edb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:4d:7f:8e:a2:e3:5e:f4:92:78:ba:16:fb:
72:98:40:ea:78:b6:81:73:68:4b:ed:e8:a1:7b:ca:
bc:58:80:65:3e:78:5a:32:cf:b6:38:17:a5:f1:e2:
f6:8d:34:62:f1:46:6a:56:ba:1e:2c:b8:7f:0f:37:
d7:ec:e6:ed:9a:b3:01:61:d5:bd:8d:50:de:6e:af:
10:9b:d3:14:8e:83:c9:cb:4e:24:0c:1f:36:c3:7a:
06:ef:81:ba:3a:95:a7:e8:c3:a9:ee:03:97:18:72:
46:e6:31:10:db:48:c8:94:e2:7e:13:28:10:ba:e6:
72:2c:ee:c5:da:ba:dd:57:89:16:f8:92:60:d4:47:
b7:f2:d1:7f:58:4f:31:c4:82:49:ba:1c:ee:24:06:
2e:d0:83:b6:88:23:b1:9b:81:3c:45:5d:53:31:a9:
12:bf:e7:7f:56:1c:c5:dd:3d:9b:13:57:aa:9d:91:
64:a9:03:3a:d8:4e:9d:54:65:e7:86:e8:b3:5b:6f:
94:d7:d1:2c:d5:f8:2c:c9:d8:75:15:5f:1a:f6:6f:
9d:3e:08:00:d5:ea:37:7b:fa:ca:33:53:5f:96:4e:
98:79:8e:e2:0f:75:fc:f1:58:23:5f:fe:0b:ca:ee:
38:d9:90:91:61:b0:3f:08:07:d7:97:85:10:68:f3:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:A3:F4:12:4A:E4:FB:8D:36:C4:16:A6:B1:90:02:6A:9E:DB:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/790303-3b6c-4daf-a31f-efb871d12e46/1/m-qj9BJK5PuNNsQWprGQAmqe23k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.10.0/24
Signature Algorithm: sha256WithRSAEncryption
16:56:07:c7:eb:3c:76:84:25:d9:c6:ae:69:47:36:18:19:39:
de:28:43:b3:98:ea:40:19:23:c6:a4:c2:fa:03:76:dc:00:c3:
9f:7f:ee:87:51:8f:25:5d:3d:af:fb:4e:dd:0a:24:c5:89:60:
db:af:71:b6:60:bc:85:16:69:90:af:ac:34:4b:b3:8b:3d:45:
1e:e1:e1:5f:d1:80:9f:9b:25:2f:cc:44:72:37:a2:29:23:b1:
71:6e:81:e9:9b:b3:5e:5e:ab:3c:0f:c8:c4:03:a4:f0:44:08:
1e:87:69:ea:72:73:2d:c0:4c:c3:ff:23:50:52:0e:8e:9c:67:
5b:21:c8:72:55:2b:f6:26:77:13:15:3f:ba:21:d6:ac:23:01:
2a:88:08:e9:ca:73:cd:cd:da:26:8b:63:85:9b:5b:48:87:d8:
be:7d:bb:70:6e:f9:3a:b9:21:e0:ed:47:85:70:d2:69:ba:d9:
1b:6a:7f:60:e4:ca:32:53:f6:63:70:93:43:14:62:97:a7:29:
34:5f:58:55:08:55:aa:db:64:e5:d6:3b:44:4c:59:16:69:b7:
60:bd:34:0c:df:e7:71:49:92:6f:29:8b:7d:36:66:30:39:54:
2c:40:e7:64:c6:d3:62:58:29:fd:f7:8a:95:2d:6f:b7:e3:54:
3c:14:1a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:12 2024 by rpki-client on console-fra.rpki-client.org