Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qn-h2HbWyc9XWERWsglNqsXz9Rk.cer
File: qn-h2HbWyc9XWERWsglNqsXz9Rk.cer (raw, json)
Hash identifier: +Txws6cl8A33slAa+snNNXe5YPUWSHhWQQGJbU5bvS0=
Subject key identifier: AA:7F:A1:D8:76:D6:C9:CF:57:58:44:56:B2:09:4D:AA:C5:F3:F5:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0189498064C7C983CAF931ACDB1D34F6B498
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/qn-h2HbWyc9XWERWsglNqsXz9Rk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Jul 2023 09:48:18 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 37.99.200.0/21
IP: 109.75.96.0/20
IP: 185.8.84.0/22
IP: 185.65.196.0/22
IP: 2a03:1da0::/29
IP: 2a03:3940::/29
Validation: Failed, certificate revoked on Fri 14 Jul 2023 09:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:80:64:c7:c9:83:ca:f9:31:ac:db:1d:34:f6:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 12 09:48:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa7fa1d876d6c9cf57584456b2094daac5f3f519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:44:3e:64:75:f8:eb:c8:df:6f:e9:d3:93:
43:b1:a0:1a:19:76:ed:f1:15:f5:84:8c:c7:4e:ff:
37:67:79:a0:ed:3d:db:79:45:93:23:f7:af:16:5b:
bc:6c:89:e5:22:0b:1b:25:d1:2b:8d:4f:89:9b:0f:
89:18:82:38:ea:8f:87:61:28:45:3e:94:93:c6:0f:
05:85:d5:05:46:f2:31:d3:29:3e:d0:fa:44:e7:50:
f0:ae:1d:87:6b:e7:c7:0b:75:08:77:86:28:bd:8a:
c0:f1:4e:00:36:f2:45:53:92:6c:61:8c:d0:39:69:
12:e6:55:3b:a0:e4:53:78:12:02:32:00:c4:c0:3a:
76:52:29:df:74:d5:1c:4d:b4:16:bb:46:ba:c8:f9:
cb:de:0f:e3:0a:fe:fc:76:2c:5f:93:39:98:3d:b7:
2f:72:72:37:c1:ae:16:40:7a:fb:9d:33:3b:c3:66:
ec:5c:98:fb:5a:c7:0c:b6:11:c8:9d:30:d8:2d:6e:
83:02:15:e4:d8:59:45:c6:7d:c7:58:0b:9d:50:ba:
25:b4:ab:d4:0e:01:0e:eb:38:a6:83:88:81:03:87:
5e:b7:08:93:59:0b:24:73:f7:bf:36:df:bf:79:f4:
e6:12:c4:e7:16:ef:42:53:a8:52:17:26:19:28:d8:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7F:A1:D8:76:D6:C9:CF:57:58:44:56:B2:09:4D:AA:C5:F3:F5:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/1df8e5-705b-4425-8b47-f553000227bd/1/qn-h2HbWyc9XWERWsglNqsXz9Rk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.200.0/21
109.75.96.0/20
185.8.84.0/22
185.65.196.0/22
IPv6:
2a03:1da0::/29
2a03:3940::/29
Signature Algorithm: sha256WithRSAEncryption
5d:8e:ad:99:36:a4:f8:91:64:ba:0b:39:4a:db:53:c1:1c:53:
08:89:8d:21:40:20:51:22:77:ea:4a:40:39:1f:f3:47:99:48:
cb:15:5f:31:64:09:88:02:ca:d3:60:65:c9:85:2c:85:47:4c:
6b:19:f3:9f:3e:3b:2d:7b:48:2f:ba:fa:38:ab:fd:42:eb:76:
b5:5e:af:13:13:af:59:4f:2a:6b:5e:e7:c9:aa:39:16:1c:5e:
c2:0b:ff:a3:2e:09:9e:1d:90:23:67:9b:3e:f5:45:b0:78:d5:
03:34:67:d1:e3:29:e3:1e:84:45:4e:be:1e:c5:cf:49:66:de:
52:1e:3d:5b:5d:e0:ef:fb:e2:2e:9d:00:f6:b9:1a:82:35:d9:
1a:26:da:49:8a:d9:c1:7e:3f:20:70:15:d2:14:1d:1e:58:a4:
2e:73:9e:1d:13:e8:6c:0f:1f:e2:29:89:f9:0f:8c:c4:52:ec:
b9:2e:4f:ed:a3:9e:cf:df:10:69:af:6b:34:c2:d7:a0:5c:f8:
c9:e8:87:d5:26:40:32:f6:f8:42:b2:f1:bf:72:f4:fb:7e:ba:
f4:7f:06:3d:d2:61:5e:ec:31:b2:d3:34:0d:02:68:0f:a9:28:
5c:97:e9:b4:bc:07:da:83:5f:59:cb:6e:e6:a5:49:40:45:be:
e5:2a:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:30 2024 by rpki-client on console-ams.rpki-client.org