Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qm8-2qZkBOfwW473306dIqOWBAc.cer
File: qm8-2qZkBOfwW473306dIqOWBAc.cer (raw, json)
Hash identifier: B0WUmxMFO5x+lDl5pKxwyFOje83n9Gugds6LOJYs+44=
Subject key identifier: AA:6F:3E:DA:A6:64:04:E7:F0:5B:8E:F7:DF:4E:9D:22:A3:96:04:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CCA29CC78ADBC18ECBB15F4BD52FBB6C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 12:33:06 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.209.0/24
IP: 2a12:1f40::/29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cc:78:ad:bc:18:ec:bb:15:f4:bd:52:fb:b6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa6f3edaa66404e7f05b8ef7df4e9d22a3960407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:7e:45:8d:a2:95:06:ab:0a:31:ba:d0:a5:
14:74:9b:d3:42:7a:33:25:d2:54:cd:db:80:13:b9:
bb:3c:c0:6a:b9:19:c2:93:91:35:76:77:93:fa:6e:
ce:c1:b7:84:43:f8:8f:81:ec:fb:42:a3:f0:2e:bb:
29:d4:7d:e5:d1:e6:ee:35:d9:cd:ee:14:96:ab:75:
d4:11:a5:83:45:9e:ee:4e:50:f4:3b:27:ee:51:c3:
5e:41:52:27:df:4a:4b:fb:68:c1:9a:8e:bd:f6:7d:
09:73:d6:00:98:4e:e6:e3:e9:52:e2:2e:7c:7d:39:
31:4a:bd:fc:21:13:2c:6f:4c:9d:93:78:7a:c7:3e:
85:9b:37:98:6f:cb:88:e5:f8:11:0e:47:e1:20:80:
59:d8:48:5e:71:9c:03:b2:75:ea:49:56:ea:11:01:
36:a6:19:0a:e7:0c:d5:49:22:3c:03:85:65:3a:c3:
1b:63:0b:ce:28:42:10:b2:12:d3:97:2e:4e:4b:c5:
60:33:aa:ec:bb:7c:e8:28:0c:af:7a:bf:3b:1c:58:
b9:ff:e5:3f:2e:65:1d:18:98:c7:33:f2:de:ca:46:
27:0c:50:06:81:dd:d5:b8:07:ea:f2:ed:10:1a:db:
bb:57:b4:ca:80:84:e5:bf:2b:2b:99:6f:64:25:34:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6F:3E:DA:A6:64:04:E7:F0:5B:8E:F7:DF:4E:9D:22:A3:96:04:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.209.0/24
IPv6:
2a12:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:02:ab:68:c7:4f:56:78:5b:b0:a7:3b:97:24:ce:db:18:ff:
cc:80:18:11:2d:16:f0:12:7b:13:19:11:26:5e:f4:bb:cd:ad:
4d:dd:33:7d:d4:1d:8f:d6:8a:04:d7:ea:62:79:1e:6d:d8:4c:
16:ae:7f:6d:bc:b5:44:e0:b2:66:71:58:90:14:2e:ee:b4:a2:
5c:75:a0:0a:dd:26:2f:96:82:2a:ca:37:ee:e3:8d:0e:d7:40:
91:4b:30:36:8d:d9:38:c9:c3:3c:1c:78:dc:98:6a:71:34:ff:
d7:5c:75:f2:9a:90:cb:4a:e8:a1:00:b0:0b:55:fd:fd:51:cd:
11:d8:1d:82:10:20:30:39:69:64:45:21:d2:22:78:7e:dc:4b:
52:ab:d0:35:e4:8c:57:f7:a2:ec:4c:52:14:d4:c7:87:a0:25:
46:4b:81:55:7b:6f:b1:8a:40:8e:99:ab:e0:13:f0:26:0c:51:
80:46:ff:4b:ab:a0:92:2b:37:a9:d2:ba:1a:63:31:47:f3:fc:
c7:9c:e0:cd:9f:22:79:ca:db:c2:58:a4:4f:9c:bc:82:8f:dd:
20:78:65:b3:f6:a2:5c:b9:8a:89:ac:cc:c8:2f:63:f7:9a:c1:
09:76:5d:6a:37:d4:67:d4:11:39:04:f1:20:46:e0:c0:c9:8b:
5e:83:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:58 2024 by rpki-client on console-fra.rpki-client.org