Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
File: qlY_UgCkkzAk57R9d4YZRYVorbA.cer (raw, json)
Hash identifier: YxG8Wh06wNHBvMyjUQ3Vmy2bUx5JkMEESARC/lkP1HA=
Subject key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01863B7129E34267B06D9EE971C491B1FDBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Feb 2023 13:08:37 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.26.223.0/24
IP: 2a13:b700::/29
Validation: Failed, certificate revoked on Mon 30 Oct 2023 08:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:71:29:e3:42:67:b0:6d:9e:e9:71:c4:91:b1:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 10 13:08:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa563f5200a4933024e7b47d778619458568adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:25:af:f2:92:a6:da:ab:7d:97:84:c2:7d:
dc:73:ff:78:db:b2:6e:35:f3:1e:f6:6c:e9:d6:9f:
85:59:75:a6:43:1f:dd:02:9f:91:21:8c:cc:21:1f:
f8:df:32:5d:98:67:b5:cf:1b:da:80:51:41:31:86:
37:46:0b:74:a6:80:ad:80:b4:56:72:ca:27:f1:6e:
55:9c:98:f4:60:dd:ae:12:71:5b:cc:3b:78:5d:5d:
dd:5b:ef:23:a5:a2:29:ef:ab:dc:e2:42:0d:98:13:
22:a6:83:a1:8b:56:31:e7:76:58:b6:c7:c2:cb:87:
31:58:ca:d3:6e:ae:0a:57:dd:a8:11:78:18:81:18:
4f:3c:5e:c0:8b:da:dc:7e:86:08:95:a2:12:ed:6d:
34:09:c8:ac:0a:8c:e7:3d:bf:5c:b3:62:e7:d5:a6:
60:23:62:9c:1d:2b:64:3f:00:fc:a7:3c:8e:02:71:
69:8d:57:ab:dd:41:cf:4a:08:3e:b3:99:61:c1:a2:
58:11:2d:d1:05:6a:d3:8d:5e:6d:4a:15:5a:16:26:
69:bc:14:e4:af:32:c7:89:ad:51:b5:fd:65:86:5f:
38:b8:3c:64:f0:50:b3:31:a8:8b:5f:bd:9b:ae:70:
86:69:71:33:cc:b8:26:a2:62:c1:d7:f8:9f:05:29:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.223.0/24
IPv6:
2a13:b700::/29
Signature Algorithm: sha256WithRSAEncryption
7d:d0:fd:33:ac:37:6c:b3:cc:d2:f7:97:94:5a:8d:1a:0a:4d:
25:66:d9:f5:49:9e:aa:90:a7:2e:c6:20:62:ad:6b:44:b9:f6:
3e:31:8c:0a:d9:f3:85:9e:06:3d:5a:20:5f:69:d4:3d:23:af:
8f:5a:bf:d9:84:6a:06:23:f9:1e:ec:f4:dd:e2:1d:d9:d9:76:
d8:7c:5b:f7:d7:4f:be:22:03:52:3d:d0:b7:d1:07:e1:c2:12:
2d:b4:5a:ce:65:73:89:c4:f4:21:c8:77:08:db:5e:11:a3:24:
67:e9:f0:25:0f:75:1f:57:e7:a4:fc:73:cf:99:99:0e:43:6c:
9e:9e:ab:a7:89:5d:1d:6c:a5:58:b9:9a:27:b6:85:ad:68:42:
a4:5c:07:3f:fd:ed:be:92:28:2c:9f:c7:ba:cb:96:89:c1:82:
a2:0b:5f:80:41:3b:5a:4d:90:4c:f2:85:83:d8:29:6b:bc:ae:
06:18:c1:16:79:bc:05:d2:3b:5f:15:b5:c5:59:4e:27:b9:4f:
5e:4e:d9:20:17:28:e3:21:1f:33:48:e9:5f:64:2c:0c:30:b3:
38:17:7d:f0:01:7f:01:af:f0:63:2f:a1:2c:08:9f:b7:47:32:
06:83:75:19:89:fe:1b:a9:a7:36:80:69:dc:9a:2e:89:64:80:
fc:22:0c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:57 2024 by rpki-client on console-fra.rpki-client.org