Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
File: q8hbmhhAC4RRUq4vvSjoWYY-L34.cer (raw, json)
Hash identifier: rHJly9ePeIEvDskEZmwJ+rp7qKtsESnu2vR7BtlLtdY=
Subject key identifier: AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC8715C745DDBBBE99D868F441CDDAA88
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:32:01 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 62.68.89.0/24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 12:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5c:74:5d:db:bb:e9:9d:86:8f:44:1c:dd:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:a3:bd:2a:08:2e:c5:8c:a6:76:fc:77:0e:
ec:62:c8:5f:ea:dd:45:b3:94:55:0e:4f:3e:be:3f:
f7:e4:eb:b9:29:e5:cc:d1:76:20:74:78:90:0c:d2:
35:59:af:63:38:99:06:f6:2e:6c:73:c8:b8:f6:20:
af:da:47:59:4a:c1:fd:c8:f7:65:df:97:5c:37:c8:
81:be:51:e9:a8:54:ff:ce:71:46:5e:61:14:0f:10:
06:d0:ba:be:a4:ce:0d:20:4f:ea:16:54:4b:03:2e:
2f:64:a2:16:e8:7e:a2:2a:ae:6b:a5:2c:45:8e:65:
85:a7:ec:17:97:d1:b5:46:09:ef:b2:51:ac:1f:11:
5f:c4:a7:cc:46:a3:c4:9b:94:3c:f2:7a:3c:65:4e:
13:3c:ce:7c:f2:8b:24:c7:1a:34:91:e2:7f:91:60:
7b:85:47:d3:9e:ab:46:d5:5a:56:71:e4:a4:fe:55:
f4:43:ef:a5:cd:db:7f:22:75:6e:d8:b1:dc:b6:5b:
b0:7b:6e:25:5d:dc:56:c0:25:13:14:27:4d:bf:8e:
73:cc:ec:98:1e:df:8c:9b:ed:c1:9c:79:e4:19:ad:
85:e4:97:99:97:0d:16:38:6a:94:66:0a:a2:61:66:
0c:b5:96:91:f3:88:4f:e8:3b:84:b1:28:7d:ac:65:
13:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
94:65:5e:03:74:e3:99:fb:f5:68:29:cc:ba:8a:c9:75:d9:b9:
f6:f8:12:9e:ae:fc:f7:93:e5:1a:db:37:c9:7c:99:9a:f1:3e:
18:52:b8:47:1a:2b:08:00:30:b8:88:5f:f7:d1:c6:b0:2f:be:
7f:3c:0a:03:85:26:97:95:1c:7a:97:a9:ed:3c:c5:03:0e:b3:
e7:29:a6:90:ea:72:c7:60:c8:9b:6b:e8:02:75:a9:fc:9b:e6:
80:90:2e:77:b2:69:7b:5c:51:b6:5e:1f:92:5d:a7:18:44:37:
13:77:ab:fc:93:db:a6:d5:52:84:85:88:dc:46:37:fc:48:4d:
56:70:88:9e:03:de:7c:61:89:c4:50:8b:b1:5e:d2:e5:dc:44:
29:84:8e:d4:7d:37:de:8a:ec:40:8d:7f:50:5f:73:dc:be:2b:
15:57:b9:a5:6f:9e:91:3d:70:69:0f:2f:ed:96:24:66:c7:db:
f0:bb:6a:70:05:d0:fe:3a:21:58:0a:f7:7d:bf:fc:00:cd:0e:
00:ad:34:de:6a:94:9f:0b:8c:ee:69:d6:57:35:71:6a:3e:90:
a7:a6:5b:36:31:3d:07:b2:08:7f:d1:3b:93:80:58:c4:47:fc:
1f:ea:27:96:53:e9:bd:4a:4b:07:32:37:f3:e1:6c:e7:80:a6:
0f:91:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:09 2024 by rpki-client on console-ams.rpki-client.org