Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qM-s4RTYzeptxeekmUPzIjRss10.cer
File: qM-s4RTYzeptxeekmUPzIjRss10.cer (raw, json)
Hash identifier: JayMcKzrrkjG1GP1nYcv4HRBsIqwEoNF3e3/gMjNkn4=
Subject key identifier: A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC348A747C0660A5AED134D607455E642
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 04:29:27 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 37.157.60.0/22
IP: 62.244.70.0 -- 62.244.75.255
IP: 62.244.80.0/23
IP: 62.244.90.0 -- 62.244.93.255
IP: 103.73.172.0/22
IP: 185.247.248.0/22
IP: 193.47.139.0/24
IP: 193.222.142.0/23
IP: 193.222.188.0/23
IP: 2a0d:4240::/29
Validation: Failed, certificate revoked on Wed 14 Aug 2024 07:53:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a7:47:c0:66:0a:5a:ed:13:4d:60:74:55:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a8cface114d8cdea6dc5e7a49943f322346cb35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:af:b0:00:aa:15:7b:68:ab:3a:e6:3a:ed:
ad:9b:80:0c:e1:f1:07:5a:fe:da:78:46:2d:bf:d5:
02:dc:f0:46:82:9c:04:0a:76:82:86:9d:6f:05:84:
f1:78:ee:88:89:06:c6:af:98:1b:f9:36:e9:36:23:
9f:24:8b:ad:08:01:19:eb:c0:c4:6a:23:e2:0b:07:
3f:0b:18:62:73:2e:1e:ce:bb:1f:61:15:f6:eb:b6:
81:8c:4f:cc:5e:1f:2d:e8:03:60:10:a8:ab:e3:1f:
3b:c8:92:42:19:86:b6:68:7a:56:11:44:e2:57:42:
7d:39:97:5c:60:ca:e9:4c:8c:0d:0d:d9:1c:f1:67:
f5:b5:48:6c:4e:b4:3c:e1:d2:8e:d4:8d:29:34:5d:
d0:c7:12:8a:26:aa:12:2a:1a:94:22:a1:c5:eb:1c:
c7:30:16:d4:c5:0b:41:75:94:eb:d7:8e:d8:d8:1b:
63:cb:3b:0a:7d:e2:e5:e2:64:ef:09:f8:9e:d8:e3:
3d:39:74:ba:9f:b2:43:24:37:db:fb:31:ac:5d:6f:
00:63:62:e4:9f:b6:a5:f2:83:f3:fc:9a:90:6e:c5:
5c:df:3f:20:5c:11:f4:ad:33:9d:ad:26:03:2a:e9:
e6:e4:ab:86:4d:5d:69:2a:38:20:ba:bc:f6:31:df:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:AC:E1:14:D8:CD:EA:6D:C5:E7:A4:99:43:F3:22:34:6C:B3:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7db802-04ad-4c2d-b11a-64964976f7b3/1/qM-s4RTYzeptxeekmUPzIjRss10.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.60.0/22
62.244.70.0-62.244.75.255
62.244.80.0/23
62.244.90.0-62.244.93.255
103.73.172.0/22
185.247.248.0/22
193.47.139.0/24
193.222.142.0/23
193.222.188.0/23
IPv6:
2a0d:4240::/29
Signature Algorithm: sha256WithRSAEncryption
35:18:85:3a:6a:a2:b0:92:dc:13:ca:83:81:b0:63:ef:3d:e1:
b0:16:2f:02:17:13:20:29:28:4b:00:56:dd:fa:f5:70:ff:86:
0e:82:ff:39:bc:e7:35:60:ae:3b:72:5e:51:1a:90:84:39:b8:
2f:3a:64:0c:1d:99:ba:63:94:e6:d6:b7:02:25:76:5e:fd:ce:
cc:81:a2:87:6e:6f:e5:ab:d5:57:22:e4:b1:ec:ff:db:dc:58:
77:fc:d2:ba:82:eb:84:b4:83:99:5d:bb:85:a0:ea:be:ec:1c:
91:1e:72:16:4f:2a:3f:83:ff:61:04:a2:47:77:ad:ba:c6:da:
04:3e:4d:9f:8c:ba:29:55:4a:8a:a8:57:4e:57:e7:79:5f:e8:
98:46:94:c7:b8:4a:d8:a7:32:2b:20:09:87:6d:a3:0d:34:eb:
82:3f:ef:06:7e:c8:16:66:d4:f6:33:41:17:cc:84:d1:75:fb:
0d:9a:d1:1d:35:9d:4a:99:28:57:de:47:18:43:09:d2:6e:ed:
9e:e0:52:5d:fa:d6:db:f8:df:f5:ba:fe:e0:62:c6:55:c8:94:
97:85:7c:64:07:e3:e5:83:ef:03:06:85:4f:c4:bb:43:cb:77:
2e:2c:41:a1:2d:2f:b4:b8:7b:43:c9:7b:cd:73:17:23:12:23:
ce:4f:17:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 10:43:37 2024 by rpki-client on console-fra.rpki-client.org