Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qqW27Jbny2JIjtUS2vxUfj4zNGE.cer
File: qqW27Jbny2JIjtUS2vxUfj4zNGE.cer (raw, json)
Hash identifier: yW18KPrQt/1vkkkBemVU9mnHez1SIOUPZ4+ZBPKSai0=
Subject key identifier: AA:A5:B6:EC:96:E7:CB:62:48:8E:D5:12:DA:FC:54:7E:3E:33:34:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B6332BDCA377CE924BE34204341F068
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:21 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 48083
IP: 94.127.96.0/21
IP: 193.53.99.0 -- 193.53.100.255
IP: 2a03:2ac0::/32
Validation: Failed, certificate revoked on Mon 25 Sep 2023 14:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:32:bd:ca:37:7c:e9:24:be:34:20:43:41:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaa5b6ec96e7cb62488ed512dafc547e3e333461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:02:f7:de:d5:ec:a7:6c:63:79:da:f4:79:
83:d1:c6:e5:e6:39:71:9b:7b:c9:cd:b9:8b:83:de:
4d:b6:55:e1:fd:dd:dc:4e:57:cd:df:b4:52:5b:2e:
19:5b:da:20:09:1f:bb:80:de:e3:44:49:fc:49:9d:
71:6d:49:f3:ba:b2:eb:d8:28:1d:1a:2a:33:c1:32:
27:b9:09:52:75:5d:b1:93:a6:81:1f:5c:34:7c:56:
0c:ac:b7:a6:c6:92:01:92:1f:b6:6e:52:a0:62:d7:
fb:1f:a9:8f:8e:83:c3:5e:b5:cc:25:4c:bd:2b:e8:
0e:5a:77:d9:4d:0b:5a:63:1c:28:f4:c9:2a:47:cc:
69:c2:d1:40:3f:02:18:44:1d:6b:96:3e:04:f5:1a:
e5:05:eb:9e:f1:e0:c9:3e:e4:5f:85:ef:c2:86:89:
db:4a:86:e2:f4:92:c0:61:f5:53:86:c2:45:53:51:
cb:1d:01:b1:c2:86:34:b3:a1:de:3a:eb:c8:ab:33:
e8:2c:0a:25:92:2e:df:48:c6:f1:8b:b7:66:3d:dc:
ec:e1:4b:05:ab:25:4d:7e:8e:d1:0c:50:ae:70:17:
fe:27:55:d8:d4:46:93:af:96:cf:5c:1c:fd:2f:ea:
e6:8a:78:12:42:47:f6:11:57:d9:da:cd:c0:aa:7e:
3d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:B6:EC:96:E7:CB:62:48:8E:D5:12:DA:FC:54:7E:3E:33:34:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.96.0/21
193.53.99.0-193.53.100.255
IPv6:
2a03:2ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48083
Signature Algorithm: sha256WithRSAEncryption
26:34:f1:39:73:de:6a:9e:e2:db:e6:e6:69:fd:af:71:8b:ae:
bd:91:44:33:b5:7b:db:eb:a8:51:ea:bd:67:f6:f4:10:db:42:
d5:9e:36:5f:b0:67:30:85:17:55:4c:dd:7b:4c:90:bd:db:fb:
c9:3b:5e:e8:1f:00:61:fe:04:7c:26:90:c3:41:80:b8:fe:b2:
51:73:7f:0d:dc:12:33:83:39:bf:bf:89:ad:2f:3a:a7:f4:78:
b0:0f:a3:15:f2:18:14:8b:0b:e9:c6:c5:e7:cd:3f:7a:87:fb:
c4:95:24:b2:4e:f9:5f:0b:d5:36:49:88:e8:c1:61:6f:fc:70:
92:1c:07:b5:b4:e9:63:32:36:37:5a:d0:b2:cf:68:ab:b7:ba:
fe:e5:34:cf:28:51:57:84:f6:49:11:eb:79:f9:7c:1c:6c:33:
52:41:e4:5f:72:e6:9a:f0:d6:46:29:6f:5b:d3:9e:da:8f:2f:
7c:d7:c1:63:6a:45:9c:d2:4f:7b:1b:55:dd:93:90:58:11:b2:
33:b1:c3:6b:7f:d8:44:26:73:dd:53:d6:94:2e:25:5c:28:28:
de:7d:ab:37:d7:3c:95:18:c3:bc:1d:71:2b:a2:15:2c:b7:e0:
b1:32:9b:83:b6:76:1e:ab:66:57:f2:53:81:b0:71:d8:85:4e:
53:6b:2b:64
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgISAYVrYzK9yjd86SS+NCBDQfBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAxMDMzMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWE1YjZlYzk2ZTdjYjYyNDg4ZWQ1MTJkYWZjNTQ3ZTNlMzMzNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS0C997V7KdsY3na9HmD0cbl5jlx
m3vJzbmLg95NtlXh/d3cTlfN37RSWy4ZW9ogCR+7gN7jREn8SZ1xbUnzurLr2Cgd
GiozwTInuQlSdV2xk6aBH1w0fFYMrLemxpIBkh+2blKgYtf7H6mPjoPDXrXMJUy9
K+gOWnfZTQtaYxwo9MkqR8xpwtFAPwIYRB1rlj4E9RrlBeue8eDJPuRfhe/Chonb
Sobi9JLAYfVThsJFU1HLHQGxwoY0s6HeOuvIqzPoLAolki7fSMbxi7dmPdzs4UsF
qyVNfo7RDFCucBf+J1XY1EaTr5bPXBz9L+rmingSQkf2EVfZ2s3Aqn49tQIDAQAB
o4ICvTCCArkwHQYDVR0OBBYEFKqltuyW58tiSI7VEtr8VH4+MzRhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzdkMDBk
MS1hYTMwLTQ2YzQtYWY1Ny0zOWJmODkxYzE5YmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvN2QwMGQx
LWFhMzAtNDZjNC1hZjU3LTM5YmY4OTFjMTliZS8xL3FxVzI3SmJueTJKSWp0VVMy
dnhVZmo0ek5HRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF
BwEHAQH/BC0wKzAaBAIAATAUAwQDXn9gMAwDBADBNWMDBADBNWQwDQQCAAIwBwMF
ACoDKsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALvTMA0GCSqGSIb3DQEBCwUA
A4IBAQAmNPE5c95qnuLb5uZp/a9xi669kUQztXvb66hR6r1n9vQQ20LVnjZfsGcw
hRdVTN17TJC92/vJO17oHwBh/gR8JpDDQYC4/rJRc38N3BIzgzm/v4mtLzqn9Hiw
D6MV8hgUiwvpxsXnzT96h/vElSSyTvlfC9U2SYjowWFv/HCSHAe1tOljMjY3WtCy
z2irt7r+5TTPKFFXhPZJEet5+XwcbDNSQeRfcuaa8NZGKW9b057ajy9818FjakWc
0k97G1Xdk5BYEbIzscNrf9hEJnPdU9aULiVcKCjefas31zyVGMO8HXErohUst+Cx
MpuDtnYeq2ZX8lOBsHHYhU5Taytk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:58 2024 by rpki-client on console-fra.rpki-client.org