Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qs7FgXBT-fW9COB6sG66v_KvFlU.cer
File: qs7FgXBT-fW9COB6sG66v_KvFlU.cer (raw, json)
Hash identifier: gj9FpPgtrKIbN+86d3raN/Hg1bTclVbc0y07+t5P4SQ=
Subject key identifier: AA:CE:C5:81:70:53:F9:F5:BD:08:E0:7A:B0:6E:BA:BF:F2:AF:16:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0187BF313511294B51908B5DC5D688F13F97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/14cf39-b479-4802-800c-3deaa5b7ebe3/1/qs7FgXBT-fW9COB6sG66v_KvFlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/14cf39-b479-4802-800c-3deaa5b7ebe3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 26 Apr 2023 20:11:25 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 93.188.88.0/21
IP: 2a01:9b00::/32
Validation: Failed, certificate revoked on Fri 28 Apr 2023 14:32:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bf:31:35:11:29:4b:51:90:8b:5d:c5:d6:88:f1:3f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 26 20:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aacec5817053f9f5bd08e07ab06ebabff2af1655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:b2:5b:20:18:6e:c4:e2:02:b0:55:7a:79:
44:20:7b:1c:55:91:35:95:c3:d1:d1:f7:a6:e1:18:
b0:ee:50:99:d2:bc:56:e8:e9:41:78:f1:42:73:33:
0c:56:eb:78:64:2b:d1:c9:48:5c:d4:2d:45:e0:12:
00:26:27:dc:92:f8:1a:c5:22:df:73:d4:91:be:b3:
71:50:04:ab:ea:20:cb:60:17:19:98:18:53:6d:d0:
55:c0:1a:9f:ac:8a:08:02:c8:17:d6:60:5a:da:e6:
14:18:ee:a9:2b:91:60:0a:a2:96:60:d9:fa:9c:03:
89:fa:0c:c1:f1:16:90:9f:89:d9:df:13:5d:39:1b:
35:3e:f2:28:af:55:08:2b:7f:ca:07:49:04:ea:80:
e3:d4:2f:78:f4:59:a1:60:6e:e8:45:26:1d:0c:65:
72:84:fa:12:12:6a:c4:50:11:45:01:1f:1a:86:88:
fa:ad:ef:45:64:f1:2f:69:a0:bb:40:f7:04:84:9a:
41:99:91:96:41:be:10:42:f1:2c:99:07:fc:98:56:
c7:1c:99:f5:c9:73:a9:d1:8f:49:64:d7:15:a9:8e:
62:65:37:1d:fd:57:09:7d:0b:ea:83:05:0c:27:c3:
d8:a5:b4:d7:78:bc:fc:b4:8d:43:de:5b:33:73:00:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:C5:81:70:53:F9:F5:BD:08:E0:7A:B0:6E:BA:BF:F2:AF:16:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/14cf39-b479-4802-800c-3deaa5b7ebe3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/14cf39-b479-4802-800c-3deaa5b7ebe3/1/qs7FgXBT-fW9COB6sG66v_KvFlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.88.0/21
IPv6:
2a01:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
66:20:39:51:48:f3:e8:3d:15:e2:a8:b8:78:11:45:2f:17:4a:
bd:1f:37:d1:38:e3:f2:70:b7:a9:dd:2c:bd:43:21:ae:24:a2:
6a:93:11:e2:a1:cd:be:12:d4:3c:2c:fc:3d:1c:77:35:22:90:
0e:d2:7c:a2:14:dd:e0:37:46:cd:31:74:ca:0c:56:46:a1:c3:
b4:57:ee:80:8b:d5:ef:56:76:c5:78:3d:e8:c9:57:fe:08:1e:
23:49:ee:a9:d5:2b:cd:66:93:29:36:43:5d:d7:23:14:32:f4:
df:ec:25:e0:8c:ea:1f:da:79:0a:83:1f:e0:02:d8:7d:eb:4c:
63:86:81:3b:b7:05:cc:d7:b2:c8:36:a7:35:3e:da:5e:9e:d2:
c3:e2:1d:eb:35:81:5a:59:e7:9d:65:c7:02:1f:7f:78:17:86:
8b:cf:1b:b8:f4:71:35:0e:0e:96:c3:0c:aa:35:09:88:37:bc:
48:b0:e1:86:3c:e2:62:a4:bb:ed:61:b0:58:a7:0d:50:6f:14:
b5:8d:97:41:e7:d6:fd:79:29:2f:7f:88:3b:cf:42:e6:59:74:
de:81:33:b2:90:fa:04:08:08:7b:15:50:7e:ae:28:5e:50:6b:
14:8d:76:36:b9:6c:08:c0:a4:b1:e9:ed:c5:ff:cc:b6:a7:a6:
fd:75:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:58 2024 by rpki-client on console-fra.rpki-client.org