Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
File: qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer (raw, json)
Hash identifier: +XJXEEKlPJx2b+sdc2h+HSPClug5abK2AKVR6GfwUZA=
Subject key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018A457F5CCCD2CD226DFE6195CDEA2E8566
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Aug 2023 08:11:29 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 2121
IP: 193.0.24.0/21
IP: 2001:67c:64::/48
Validation: Failed, certificate revoked on Tue 19 Sep 2023 11:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:7f:5c:cc:d2:cd:22:6d:fe:61:95:cd:ea:2e:85:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 30 08:11:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:43:2b:93:19:76:54:8a:be:3a:68:0b:1f:
e1:81:6f:0d:e3:f6:77:3b:25:8f:ac:96:b1:36:da:
59:42:d5:d8:fb:3b:5e:71:08:d1:b6:7b:b9:c6:2e:
c2:48:97:bf:93:67:4c:a1:dd:3e:eb:98:19:7b:34:
10:d2:f7:13:c0:d0:f6:fd:22:46:68:7f:ff:d8:9a:
15:9b:c6:1f:ac:16:77:89:71:d8:1b:02:cd:89:c7:
ae:19:70:2d:f3:b9:ad:2a:ec:4a:97:76:b7:dc:14:
28:e7:77:91:a0:0c:17:69:06:fd:0a:f6:2e:96:3e:
8c:07:35:46:53:c9:39:99:81:ae:5b:f2:4a:43:60:
c0:ad:75:59:5a:ee:3b:80:38:eb:14:15:50:35:bf:
cf:5c:b9:9b:f8:50:b0:5a:ec:42:44:d7:c3:f3:5a:
b5:e0:cd:ba:06:11:c6:a0:43:b4:ae:f0:d3:af:dc:
e8:f8:53:5b:de:c0:81:1a:c4:2b:d3:2b:1d:d4:03:
0a:f2:7f:0e:45:76:22:24:57:b0:0e:e9:69:b7:9b:
f9:7a:eb:85:af:f6:c3:97:ee:6f:64:c8:79:9f:6a:
9f:eb:c3:f0:aa:26:99:24:9c:0b:24:b1:24:b5:b1:
aa:41:17:a6:83:0f:a9:fd:dc:ae:db:ae:4e:cd:34:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2121
Signature Algorithm: sha256WithRSAEncryption
25:fd:16:fb:84:4a:2b:a2:a3:81:05:47:1b:d9:40:33:06:5f:
fe:04:1f:23:44:89:cd:2f:af:25:9d:84:47:bb:52:e1:d0:1a:
79:d7:d2:19:6c:8b:ee:10:73:74:c7:48:28:c5:c5:49:b0:3c:
10:7b:f8:7e:03:2e:3b:fa:8c:2f:0f:41:4e:a4:bf:b3:cb:64:
97:f7:c2:b6:a7:a5:44:d3:d5:13:90:c2:ee:03:4f:89:46:65:
44:f4:07:91:60:49:7c:43:ac:74:62:c5:f9:1f:ef:a6:ed:9a:
7c:b9:90:f0:cf:32:d0:36:68:23:39:5d:71:1d:93:ea:d3:85:
0f:e3:df:13:c6:f3:33:e5:bf:43:f1:de:23:36:af:7a:63:98:
dc:ea:76:2e:f7:4a:58:7f:e5:89:4c:bd:10:26:7b:19:66:b3:
ab:1e:bc:0c:68:48:8a:18:ed:66:65:17:1f:9a:ee:d6:72:48:
d9:b0:e3:7b:ed:41:fb:ab:d9:bf:0e:b3:3b:47:99:ea:a6:8a:
85:17:6c:15:be:29:41:52:5e:d1:65:50:1c:ee:7b:d0:ac:64:
4c:dc:0a:ae:64:93:e2:48:db:bb:f6:3c:6d:19:f8:bc:53:09:
7f:24:15:62:b6:45:6a:69:cd:23:4d:04:f8:b6:93:ca:9d:7e:
22:7d:88:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:57 2024 by rpki-client on console-fra.rpki-client.org