Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
File: qucxIVFwhtk6xw5y48P1oLXnO4k.cer (raw, json)
Hash identifier: CASXC9L4MkHgBNor6DWEcxjwcHnSXUM1b6AuM6ijHDg=
Subject key identifier: AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018AFF61D0E5184331B824EA22EA26AC7AF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 Oct 2023 10:28:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a0c:d740::/32
Validation: Failed, certificate revoked on Fri 06 Oct 2023 10:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:61:d0:e5:18:43:31:b8:24:ea:22:ea:26:ac:7a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 5 10:28:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:a2:8a:a4:91:14:8c:78:fc:5e:21:2c:70:
a1:e9:52:5f:8f:03:a6:84:e3:1c:c3:a6:e9:d7:c5:
9c:5e:d7:3f:2c:3b:6c:34:ca:69:08:a5:6b:80:97:
f3:39:29:25:de:10:37:8d:23:4c:77:08:21:2d:cd:
6d:49:df:4f:9a:a0:8c:9d:0a:27:08:40:0b:2b:3d:
75:6b:6e:c2:93:91:44:dd:bf:b2:a0:db:3f:06:43:
2f:7a:c2:94:b3:69:b0:ca:b6:58:35:d7:6d:39:f6:
3a:7e:52:85:a9:c6:ec:5e:b6:3a:36:e3:b7:ec:ec:
78:7d:c5:e5:ad:ea:38:c0:f6:c1:a9:7e:a8:cc:d5:
39:a4:e4:4b:9f:8c:90:eb:37:34:87:ba:bf:6e:f6:
74:6f:a3:c6:01:45:85:b3:d2:6a:9b:37:db:bf:b6:
37:be:f0:c8:8d:48:56:59:a3:3c:7b:15:c9:37:f1:
09:52:fd:40:a4:8b:ef:f2:d3:76:19:12:2e:13:27:
91:c1:0c:0f:84:1d:e7:ac:31:2a:94:16:c4:9d:75:
62:ef:1f:e1:b5:da:f4:5b:bc:74:1c:b1:f5:9c:16:
8b:14:0b:47:d1:13:6f:c3:46:54:25:9e:82:b8:f3:
74:52:dd:06:13:0f:9d:1b:0f:a9:3a:24:f9:7e:a7:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d740::/32
Signature Algorithm: sha256WithRSAEncryption
af:18:ea:29:94:93:f8:1b:f1:61:2d:88:d6:d4:6e:ea:bd:8b:
8c:d2:39:14:73:f0:f0:6f:6d:5c:fd:ea:2d:ba:c0:94:51:72:
45:3d:8d:9d:90:b6:04:5e:1b:dd:33:6d:10:14:34:b0:b5:6c:
36:bf:6a:6d:bd:e1:8f:dd:8a:9f:ec:33:b4:31:4b:ba:33:0a:
e8:89:54:52:15:10:db:af:dc:ee:e8:c8:b0:d7:9b:de:3f:e1:
55:c8:05:f4:63:05:1c:ef:9b:44:e5:88:70:6a:5d:42:ae:1e:
bc:01:a7:0b:d7:39:89:ee:45:93:1f:cc:fb:fc:be:b5:48:ed:
76:34:9a:f3:c2:38:1d:6f:84:a4:10:91:31:58:e4:2f:6c:85:
f3:20:07:83:60:39:b1:03:26:58:57:6a:0b:84:af:eb:fb:52:
10:95:fd:b3:27:6a:6c:ea:90:63:47:9d:e9:9a:26:13:1d:8b:
95:fd:d6:f9:ea:c8:47:0c:73:73:de:39:c1:6d:bf:40:85:83:
ca:3f:03:96:67:61:3b:e7:c2:f0:5e:5b:d6:22:9a:08:7e:c4:
2d:b8:cb:81:97:a6:dd:5d:7d:d5:3a:90:c4:cd:80:10:92:33:
34:c4:a6:2b:6f:1a:ed:de:1b:56:70:98:d7:a1:b9:37:51:55:
18:00:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:02:59 2024 by rpki-client on console-fra.rpki-client.org