Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
File: q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer (raw, json)
Hash identifier: QZ5Sw5MZJC2YjhGPlqN1ZfPD7I7AERgCTpx+DtGkNr8=
Subject key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFA5639DFB83F4460776D7A3C837DC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:17 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.91.0/24
IP: 2a12:8100::/29
Validation: Failed, certificate revoked on Mon 11 Dec 2023 14:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:56:39:df:b8:3f:44:60:77:6d:7a:3c:83:7d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abb558699207297438090cbee19f022b6eeab982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:a0:e8:f8:3a:68:cd:f1:63:68:de:25:69:
62:5f:2f:ac:11:8a:a4:6c:8a:e7:a3:b1:67:be:3a:
f3:34:1d:4a:bf:64:89:e4:f7:81:9a:69:11:06:f3:
ec:6f:10:81:5c:ef:75:34:30:ef:37:d4:74:68:f5:
96:1f:11:59:7f:9e:4a:65:bc:8e:2c:61:26:2f:45:
01:51:11:08:8a:8b:1d:15:4f:40:0b:10:30:b7:5c:
5f:5d:c8:1d:93:e7:13:19:60:76:01:b4:44:dc:57:
4a:5b:80:11:9f:d6:54:9f:f0:9b:43:dd:4a:b5:4e:
33:ff:b7:0b:69:81:6b:3c:8f:53:a3:93:91:0d:4a:
96:10:06:91:eb:40:c6:bf:e4:b5:bb:ba:eb:43:62:
b7:f1:6b:fa:42:a3:a8:fa:5e:85:fd:24:a2:d0:ad:
68:ca:9c:b5:c1:67:01:f5:73:a6:8a:c3:fe:aa:06:
34:fb:3e:8a:73:ba:5b:7a:ed:cc:00:50:44:e3:b1:
f1:8d:a3:6e:2a:11:34:7e:72:7e:43:7a:30:10:b3:
d1:86:d2:33:83:cc:3a:8b:5d:c8:ea:6e:17:48:68:
f3:90:b0:20:3e:4d:db:05:06:5c:bb:7e:7a:40:c4:
30:78:9a:de:ca:13:a1:75:98:e1:7a:99:c6:15:5f:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.91.0/24
IPv6:
2a12:8100::/29
Signature Algorithm: sha256WithRSAEncryption
14:52:e5:f1:c4:a3:06:03:cf:f9:76:42:1d:14:a7:db:33:8a:
71:d6:b5:42:fc:a4:48:17:87:04:58:07:93:a1:03:49:4f:85:
dc:32:83:88:df:28:9f:4b:20:bc:24:d3:89:b1:a3:5f:ec:6b:
cd:e2:6f:8f:d7:a4:85:75:99:df:e4:c8:d3:75:ef:0a:2a:57:
59:16:63:46:82:68:82:3d:e5:da:64:cb:5c:d1:e8:f6:ff:f0:
0a:1c:42:b1:37:9b:ea:cc:a7:0d:bd:62:d1:b9:40:fc:e2:7d:
73:51:bd:d7:05:d9:3e:f5:69:b3:ef:26:bd:0b:f8:88:88:db:
50:e6:ef:ba:68:30:b6:97:ff:d8:6c:7f:a9:03:5a:03:35:89:
e2:da:12:27:4d:2a:38:38:9c:53:fb:b1:26:83:dd:1e:f0:22:
13:c6:8a:7a:9c:4e:4d:0f:98:a8:8c:33:dc:e2:56:a0:b6:eb:
29:8b:84:df:09:91:fc:c4:44:26:2a:ce:45:27:8e:d4:da:7b:
07:ba:98:5c:d0:88:d3:21:50:be:bb:91:7c:c6:9f:0d:20:c7:
be:d6:62:11:c2:29:0f:0c:5c:98:99:eb:47:03:e0:ff:9b:5f:
10:fb:8c:91:33:1d:2b:53:51:df:4c:60:05:48:e7:f7:83:a9:
b5:9a:ac:4b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVu+lY537g/RGB3bXo8g33GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMjAxNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmI1NTg2OTkyMDcyOTc0MzgwOTBjYmVlMTlmMDIyYjZlZWFiOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLCg6Pg6aM3xY2jeJWliXy+sEYqk
bIrno7FnvjrzNB1Kv2SJ5PeBmmkRBvPsbxCBXO91NDDvN9R0aPWWHxFZf55KZbyO
LGEmL0UBUREIiosdFU9ACxAwt1xfXcgdk+cTGWB2AbRE3FdKW4ARn9ZUn/CbQ91K
tU4z/7cLaYFrPI9To5ORDUqWEAaR60DGv+S1u7rrQ2K38Wv6QqOo+l6F/SSi0K1o
ypy1wWcB9XOmisP+qgY0+z6Kc7pbeu3MAFBE47HxjaNuKhE0fnJ+Q3owELPRhtIz
g8w6i13I6m4XSGjzkLAgPk3bBQZcu356QMQweJreyhOhdZjhepnGFV9a7QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFKu1WGmSByl0OAkMvuGfAitu6rmCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBlLzk3NzY2
Ny1hMTY1LTQ5NWMtYTg5ZS05YmU4ZmI0N2E1MjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUvOTc3NjY3
LWExNjUtNDk1Yy1hODllLTliZThmYjQ3YTUyMi8xL3E3VllhWklIS1hRNENReS00
WjhDSzI3cXVZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAkhNbMA0EAgACMAcDBQMqEoEAMA0GCSqGSIb3
DQEBCwUAA4IBAQAUUuXxxKMGA8/5dkIdFKfbM4px1rVC/KRIF4cEWAeToQNJT4Xc
MoOI3yifSyC8JNOJsaNf7GvN4m+P16SFdZnf5MjTde8KKldZFmNGgmiCPeXaZMtc
0ej2//AKHEKxN5vqzKcNvWLRuUD84n1zUb3XBdk+9Wmz7ya9C/iIiNtQ5u+6aDC2
l//YbH+pA1oDNYni2hInTSo4OJxT+7Emg90e8CITxop6nE5ND5iojDPc4lagtusp
i4TfCZH8xEQmKs5FJ47U2nsHuphc0IjTIVC+u5F8xp8NIMe+1mIRwikPDFyYmetH
A+D/m18Q+4yRMx0rU1HfTGAFSOf3g6m1mqxL
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:51 2024 by rpki-client on console-fra.rpki-client.org