Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
File: qkJKdjqHmx5dQY0kzfs2cNuclwI.cer (raw, json)
Hash identifier: lpiZ0vR/ox6FaV++rUqkhf4Sm92+iUcv+1uRJ8fcQTs=
Subject key identifier: AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185708C1E51F4A154A27F7B93F20B6B3EAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 03:35:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 176.97.196.0/24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:1e:51:f4:a1:54:a2:7f:7b:93:f2:0b:6b:3e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ad:40:c3:c9:af:7d:26:05:40:e5:60:64:ac:
32:b6:4e:f5:77:0b:38:2c:74:3c:10:18:52:92:4c:
b9:74:1b:c8:4b:f0:c0:9c:72:0a:61:60:93:25:57:
49:4a:de:5b:d9:86:25:92:12:1e:4f:cc:75:da:8e:
0c:12:8c:85:33:c6:2a:34:5f:3f:71:ce:ec:08:bc:
ab:c8:1d:9e:fd:06:2e:91:6f:5e:b9:e6:f1:e0:15:
db:64:a2:2b:ab:4e:33:86:b0:76:cc:86:9a:18:36:
62:dc:7f:48:d9:9f:0d:52:9f:0b:2f:0b:c7:6e:53:
4f:45:7b:86:94:32:05:15:fe:c2:11:5f:0f:2d:94:
12:db:b7:a5:de:8e:3d:22:d6:b3:b6:7d:79:55:9c:
89:de:50:0e:31:9d:b8:44:ce:97:d4:86:be:32:f0:
52:b3:fa:ac:e6:e7:5e:6c:41:c5:69:df:bf:27:4e:
68:da:32:90:9c:38:07:ef:0b:2f:dc:14:cc:1d:66:
3b:5f:68:49:58:df:4f:04:99:3a:56:d4:9c:1b:dc:
7b:90:d7:fe:24:bf:24:37:d7:88:00:9e:06:3f:47:
41:6a:f8:2d:df:55:3d:2e:f0:13:a1:63:97:78:b6:
34:7c:49:e2:4f:1e:8f:80:cf:63:a4:3d:44:3b:3e:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.196.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:99:6f:4a:42:62:54:52:98:c7:f5:be:20:1d:fd:1c:8e:c3:
be:94:eb:d5:d3:4e:d6:62:fb:80:56:10:86:35:e0:e6:c6:8a:
06:b4:0f:fb:2d:fd:bb:e5:1c:f1:ff:10:09:40:bf:60:2e:11:
8a:d4:c5:88:93:27:70:d7:3a:74:69:5e:9e:b7:9e:85:a7:8f:
d0:b4:0e:4c:5f:8d:fe:7b:27:cd:08:2d:73:b1:83:a3:a7:19:
80:44:de:00:f8:4d:4b:8b:ea:e3:d5:b3:96:57:66:8b:6f:35:
78:1b:bb:e1:8b:42:00:97:de:ce:dc:1b:e2:38:43:3f:c3:69:
e8:9d:62:b0:c0:94:fe:40:93:08:10:c7:b8:7a:a1:a2:3c:ac:
26:bd:b9:11:51:bf:22:81:7c:06:d9:09:80:ac:b1:a3:5c:17:
89:68:92:3e:ab:35:02:86:63:4f:bb:ea:03:25:35:61:2c:fa:
a0:0e:c1:20:3c:34:b1:4b:47:b5:cd:5e:bf:60:79:71:8c:7d:
a6:57:d2:fb:d0:ac:e5:43:40:b2:7a:1e:e1:3b:f8:c0:3b:e9:
b0:18:bc:74:1e:ec:9e:ff:6c:2a:a3:cb:55:f1:ec:fc:32:d7:
65:93:c9:69:5b:7e:d4:ba:79:1e:0c:4a:15:5c:07:1a:56:61:
c8:03:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:29 2024 by rpki-client on console-ams.rpki-client.org