Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qksLftqY7ypCHMhIvkfJPoac1Cc.cer
File: qksLftqY7ypCHMhIvkfJPoac1Cc.cer (raw, json)
Hash identifier: 1mVqLIQ8HbvoBbXwa+siCdlv4Le0n+DDVy9Z4pK4WHI=
Subject key identifier: AA:4B:0B:7E:DA:98:EF:2A:42:1C:C8:48:BE:47:C9:3E:86:9C:D4:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D897FC6CE72426614AA6F207986263E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/qksLftqY7ypCHMhIvkfJPoac1Cc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.62.160.0/24
IP: 2a11:6200::/29
Validation: Failed, certificate revoked on Thu 20 Jul 2023 15:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:7f:c6:ce:72:42:66:14:aa:6f:20:79:86:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa4b0b7eda98ef2a421cc848be47c93e869cd427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:d1:71:a0:73:20:6f:b9:d3:a8:97:0e:e1:
c9:56:2f:11:60:0b:71:bf:c2:35:10:9b:c0:55:99:
6a:47:de:52:73:36:8e:2e:cf:7c:17:04:49:02:66:
2c:47:8d:07:e5:74:31:69:e7:ab:f1:79:06:8d:13:
1a:bf:20:25:a2:79:0a:c0:2c:09:03:29:48:d6:86:
e5:7b:33:7f:0b:cb:49:00:e6:68:09:ff:c8:41:c7:
e2:da:69:e0:cd:d1:0e:65:da:88:8d:80:0c:c0:ab:
b9:cd:dd:5d:d5:af:cd:71:08:ef:7f:0b:c5:b0:b9:
cd:16:3c:d1:3a:a2:19:74:85:3a:5a:f6:a0:e6:d2:
b0:7f:1f:45:2e:ed:9f:5f:d1:1f:fc:83:5a:26:98:
61:50:28:53:23:c7:21:fa:87:5d:9a:2b:86:d4:74:
9d:d3:e5:f0:4e:c5:d7:b6:ae:4c:8a:97:53:d1:f5:
f0:aa:ca:57:1b:d8:0e:a8:99:5e:6d:f8:eb:45:e4:
30:9a:25:c9:93:ee:98:7c:c4:06:34:b0:0a:37:4d:
7f:e0:bf:85:c1:15:4e:16:cd:26:d2:1b:c4:13:b8:
c1:a7:c8:c7:94:62:de:15:ec:43:e1:68:a3:e1:4b:
b5:e4:b9:d5:82:08:00:47:26:f3:26:0d:f6:9f:e2:
bb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:0B:7E:DA:98:EF:2A:42:1C:C8:48:BE:47:C9:3E:86:9C:D4:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c20e8e-562a-4969-a6c6-64d2710a3ca6/1/qksLftqY7ypCHMhIvkfJPoac1Cc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.160.0/24
IPv6:
2a11:6200::/29
Signature Algorithm: sha256WithRSAEncryption
7e:92:57:47:50:af:db:a8:4d:25:5b:10:fe:86:12:a4:22:7f:
d9:56:9d:47:4c:97:77:14:b3:7d:24:12:8b:e8:29:e6:5d:2a:
41:ca:91:67:b8:ed:91:ef:a0:f2:6f:04:b9:90:c3:0a:a5:14:
5b:a9:7c:6b:8e:3e:d0:d0:65:9a:aa:7a:ba:6c:a8:a7:88:cb:
7a:04:9a:63:d0:ca:c0:89:2d:62:13:1d:13:ef:37:81:12:4c:
10:77:70:74:ca:9b:be:e2:43:dd:30:ef:56:86:16:3e:84:0a:
1d:2f:15:a8:01:e6:54:d9:d8:7d:7a:cc:38:58:78:36:44:bc:
2e:ec:03:0c:fc:de:c6:0b:49:9c:89:79:80:a5:97:fa:30:66:
95:bc:4a:9b:d8:54:6e:c9:2d:7d:ce:ed:15:aa:d6:fc:f2:68:
06:a0:b6:26:24:72:b7:59:96:42:59:8f:64:d9:f9:dd:47:57:
16:39:49:14:01:de:55:50:7f:40:df:be:19:bb:4b:a7:e0:09:
73:99:49:64:3c:c0:04:02:46:7d:49:be:f2:64:67:0b:09:8d:
50:11:18:13:bb:b0:9a:df:87:e7:96:52:d5:24:4a:6b:fa:9d:
ae:cc:36:fc:70:34:76:48:4c:37:49:16:c7:f3:36:9a:a3:6a:
c0:c7:ec:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:29 2024 by rpki-client on console-ams.rpki-client.org