Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
File: qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer (raw, json)
Hash identifier: qeiHfCnFLzBdNeoBnfeCgp1yDkGhHru3rmSGFzFgVd8=
Subject key identifier: A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571678CB07A30C65BDEB4794768572478
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 07:34:49 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.100.44.0/24
IP: 2a11:c680::/29
Validation: Failed, certificate revoked on Mon 04 Sep 2023 06:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:67:8c:b0:7a:30:c6:5b:de:b4:79:47:68:57:24:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:b6:42:db:44:58:c1:9d:b4:bc:8f:29:85:
02:22:18:94:bc:83:64:76:b4:69:fa:58:71:98:9c:
a3:16:f8:89:a8:24:64:8a:3a:2b:5a:7e:0f:a8:40:
8f:2a:02:47:f4:db:8c:d9:c7:f3:72:0e:dc:ce:ff:
3b:05:5d:9c:22:79:55:06:e1:87:31:66:cd:11:a5:
ba:4d:c4:fe:9a:a8:82:3f:82:e5:66:3f:0b:b8:88:
f6:61:b9:06:05:09:04:1c:09:77:7a:86:1a:be:81:
1f:c2:bd:7c:7e:59:6e:8e:38:84:af:20:ca:14:c7:
da:05:b5:b3:78:cb:38:cd:e8:bc:c5:66:d8:9e:e7:
da:41:f8:bc:88:7c:7f:df:37:fb:52:0b:45:d9:a7:
9f:22:e5:e2:e5:a6:c7:fe:98:28:c4:fa:cc:1e:14:
38:ae:8a:97:90:ac:d5:40:b1:2a:ea:40:1b:53:dc:
75:2e:31:5e:ee:7d:a9:16:b3:3d:fb:18:c4:dd:ed:
51:ec:3f:5d:08:ab:3a:30:36:7d:02:00:e3:2a:9d:
c0:8f:1f:be:f0:8f:3e:cf:4d:67:e3:d5:62:3b:fa:
71:cc:56:a5:36:7b:1c:35:cf:ab:dc:03:36:63:df:
3e:c1:b7:d0:3b:0a:56:53:36:0e:de:ea:d4:a8:0d:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.44.0/24
IPv6:
2a11:c680::/29
Signature Algorithm: sha256WithRSAEncryption
0e:07:2a:55:df:73:58:a4:d5:77:9a:3f:5c:14:2f:27:8e:03:
81:68:98:d7:f4:7f:e4:61:16:dd:a5:7b:b0:1d:96:9a:cc:4a:
fd:ea:7d:81:7a:04:be:72:07:f5:59:fa:fc:c9:9c:30:2b:16:
e3:36:c6:fa:8d:7b:41:a6:24:5f:d7:f9:05:b8:d0:94:3b:fd:
d9:53:06:98:5d:78:c4:7f:1e:17:b3:29:09:32:f0:0f:ab:36:
37:53:42:f3:97:da:26:3a:51:21:a2:42:2e:db:4c:9e:65:f7:
84:ee:5c:97:b3:73:6a:1b:12:f2:ca:c4:22:ea:f7:f1:6e:b2:
ed:cb:5a:5b:17:dc:22:42:37:3f:f8:15:9f:d2:4a:a1:0d:33:
ec:b2:4f:d7:f7:ea:c5:94:e4:85:3d:be:f7:3c:d1:04:8f:4b:
c3:38:f5:26:d5:bc:17:d9:e1:50:7b:bd:64:37:5f:58:3e:97:
b4:00:52:0d:58:26:d2:9d:b7:b9:74:27:ae:68:b7:0b:03:12:
58:20:89:f4:7b:4e:57:4c:62:ea:52:98:31:2b:6c:b3:82:eb:
fa:97:87:a5:76:f8:dd:99:65:cf:aa:f0:48:3c:d3:5d:31:cf:
3f:9f:ef:6a:f5:8e:3c:67:c8:a0:70:0e:45:f4:1b:6b:6d:cf:
2e:15:61:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:54 2024 by rpki-client on console-fra.rpki-client.org