Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q8uoJhP47OrOp5-7JmAIyBu7Kzo.cer
File: q8uoJhP47OrOp5-7JmAIyBu7Kzo.cer (raw, json)
Hash identifier: nt49+azNq6llSQv3uLlwjK3dstcRDfChG+LwhikcwNU=
Subject key identifier: AB:CB:A8:26:13:F8:EC:EA:CE:A7:9F:BB:26:60:08:C8:1B:BB:2B:3A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856C3E866EF4DC91DA3B2DE8C48E5B3944
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 07:31:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 49373
IP: 91.214.76.0/22
Validation: Failed, certificate revoked on Fri 22 Dec 2023 09:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:3e:86:6e:f4:dc:91:da:3b:2d:e8:c4:8e:5b:39:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:31:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abcba82613f8eceacea79fbb266008c81bbb2b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:78:77:ab:c0:44:ec:7d:f7:fa:fd:9e:d4:
aa:05:ad:6c:90:58:45:df:61:fd:26:7d:01:95:18:
df:21:76:0e:ab:5e:1d:c8:c2:6d:a1:b2:75:75:bc:
2e:3c:7f:cd:9b:ba:74:5d:97:a5:ae:d4:85:a1:ee:
47:2b:0c:34:b6:b1:2d:1e:61:c1:7b:ab:05:e3:fc:
cb:15:3b:fa:30:72:8b:3e:b1:d2:f8:15:d6:fa:79:
d9:74:20:20:01:d6:97:04:58:4a:43:64:ca:84:48:
ad:61:51:ee:c7:cf:fe:10:6b:99:a6:35:a4:26:7e:
fa:02:4b:93:ce:88:04:bd:0f:11:85:de:86:3b:ad:
45:49:a6:aa:45:71:7b:37:1f:11:db:76:c9:86:d8:
b5:ad:a0:6d:ce:69:a7:22:a3:9d:d6:9c:2b:32:5f:
19:30:05:b9:3f:7c:f4:e0:35:06:4b:27:4a:ae:70:
47:c2:ad:63:b3:9e:ce:77:43:70:f1:74:f5:3f:b4:
0e:37:70:22:23:80:1c:cd:56:c0:74:9f:86:d0:9e:
86:3a:1c:d8:a7:6d:94:bc:57:89:45:7b:a7:9a:89:
ee:f3:d6:cc:37:13:c6:c4:ae:45:5b:25:31:eb:e5:
84:0e:cc:61:66:d6:ad:d9:99:ca:9d:75:49:c4:ca:
e5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CB:A8:26:13:F8:EC:EA:CE:A7:9F:BB:26:60:08:C8:1B:BB:2B:3A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.76.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49373
Signature Algorithm: sha256WithRSAEncryption
7b:73:d6:8d:90:b7:60:78:51:24:3e:8b:23:41:05:ce:7d:b4:
b6:e8:ac:74:ae:f8:ea:72:f5:0f:9d:72:cb:b8:bc:ff:3b:8b:
d0:56:2f:de:d0:f8:0b:c1:90:2f:f9:0c:6c:7f:ce:63:7f:8e:
52:1d:69:f4:62:61:e5:c1:c8:c0:80:5d:cd:f9:0f:24:bf:fe:
38:a8:2b:63:1d:fb:77:e9:68:dd:ae:44:a7:dd:73:19:25:60:
c4:79:7a:cf:8b:38:9e:b3:96:c6:fd:d3:66:61:da:81:b5:c0:
7f:62:3b:86:52:22:56:c7:5f:60:b9:e7:74:7a:27:21:b3:95:
aa:dd:62:bf:db:83:cf:6f:61:cd:3c:bc:ce:c9:a0:24:c5:42:
8a:07:95:da:a9:08:72:b0:77:61:52:c7:41:51:cf:95:b8:d0:
52:af:3e:67:4b:3f:10:47:75:0b:7b:ef:7a:c4:aa:62:c9:8b:
56:c0:6a:a6:ee:78:5d:a0:d5:8e:63:c1:95:5c:ac:d4:ac:e1:
b7:95:4a:2f:38:31:57:7b:1a:6f:8e:16:f1:ab:49:2b:c2:49:
2e:44:17:1e:67:26:c3:5b:14:a4:6d:93:64:0b:0f:03:3d:72:
30:89:0b:8e:aa:cf:1a:98:10:9f:22:26:22:d2:36:c4:d6:bb:
25:79:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:09 2024 by rpki-client on console-ams.rpki-client.org