Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer
File: qpMY7Gir9_6jvJlyvKO96KFMvVQ.cer (raw, json)
Hash identifier: QA6cp/rBL9hOLMXz/7zP5mfH3QhMa1j1YO2BItJKnVc=
Subject key identifier: AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018570FAE65369F0C53778D71340F3F13AA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/qpMY7Gir9_6jvJlyvKO96KFMvVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 05:36:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.163.207.0/24
IP: 2a12:33c0::/29
Validation: Failed, certificate revoked on Thu 16 Nov 2023 11:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fa:e6:53:69:f0:c5:37:78:d7:13:40:f3:f1:3a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa9318ec68abf7fea3bc9972bca3bde8a14cbd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:60:ba:ef:79:88:81:1d:8d:3e:bc:a8:71:dc:
e2:0f:69:ba:b9:2d:c9:93:85:e1:39:03:0b:c1:d0:
7a:14:97:74:de:88:cf:6b:db:ce:40:19:30:a3:ac:
04:7c:05:ce:7f:ab:27:bd:ce:7d:fd:09:cc:45:07:
95:1a:d7:e0:3f:db:20:4c:be:35:a2:3a:8e:67:e7:
e2:05:40:22:e4:ff:03:07:9e:89:ac:a2:1c:01:6b:
89:7f:31:cd:38:02:58:b7:46:79:a4:a8:1e:f1:32:
22:7a:6c:24:32:da:24:b9:5e:77:c9:96:4c:ca:b4:
eb:b2:a3:f6:21:ed:c5:61:47:f2:d7:8d:05:1e:44:
39:bf:a5:b5:52:db:15:eb:c9:6a:57:2c:b9:18:d7:
38:cd:dd:5c:d9:93:21:90:6a:b9:a9:de:ba:1a:06:
85:32:67:48:60:8b:30:5e:95:6d:02:b9:60:df:55:
e0:5d:f3:58:a8:23:c6:34:17:a1:41:b4:63:18:0a:
26:4e:dc:66:80:36:79:10:4b:c7:a8:8c:59:5a:f5:
6b:e0:d3:e1:f4:96:15:6d:5f:ca:99:cb:64:4d:a2:
10:55:50:ba:7a:b7:e1:e9:50:8e:f4:50:68:26:99:
fa:3b:d4:c3:02:bd:ad:8e:ea:15:bc:86:cc:1a:1c:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:93:18:EC:68:AB:F7:FE:A3:BC:99:72:BC:A3:BD:E8:A1:4C:BD:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/11b1a0-22f2-40e7-a45f-cb95a286990d/1/qpMY7Gir9_6jvJlyvKO96KFMvVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.207.0/24
IPv6:
2a12:33c0::/29
Signature Algorithm: sha256WithRSAEncryption
5e:07:2f:f2:d0:03:77:2e:16:61:79:d0:f9:fc:0f:73:bf:6d:
1f:cb:7e:bb:5c:e6:c7:35:37:66:6e:27:c6:83:37:1b:b4:3b:
a8:6a:7d:8c:c5:23:32:01:dc:73:93:f2:d2:ef:38:d7:6a:9f:
51:42:36:6f:7b:5f:5c:c7:92:4d:40:21:af:c5:08:28:68:ff:
df:f3:22:7f:72:28:c6:ad:02:fa:4b:19:08:9d:59:d9:60:45:
fa:9a:ba:63:1d:fe:13:e5:ec:1f:9f:a4:3f:2f:bb:c0:70:ee:
52:62:64:fb:78:a2:cd:97:4b:90:95:0b:1e:57:3c:37:f7:5e:
1f:ef:c2:90:a7:bc:55:c3:a2:3a:f5:2d:76:52:25:5e:ee:37:
4c:ac:4b:72:b9:49:37:13:51:6e:54:7f:b3:75:17:12:c3:ef:
78:92:7e:da:3f:d1:40:80:0c:95:fa:ab:04:34:b4:b6:65:37:
54:85:b7:6d:3f:59:a3:b1:d3:27:e2:d9:7a:47:dc:87:14:53:
0d:ff:fb:12:9d:b9:ab:c7:f8:d1:11:41:f7:e0:09:a6:6e:60:
03:ff:54:df:a0:d6:4d:8d:46:28:b1:6c:a3:23:0e:ed:36:66:
76:af:f3:2e:18:e5:89:29:93:38:58:d8:0e:ad:93:bf:17:bc:
ab:41:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:57:30 2024 by rpki-client on console-ams.rpki-client.org