Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
File: qbX_0k0utdXB4c_niwA8S6taLxM.cer (raw, json)
Hash identifier: n6h7qSYKUSzNWrCXAj1u/BgEPFukQ1K6qUPKQ4jhl4E=
Subject key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C10A0F7030AD8B543A59E96401A8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50414
AS: 50907
IP: 212.46.55.0/24
IP: 2a12:bc0::/29
Validation: Failed, certificate revoked on Mon 20 Jan 2025 11:04:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:10:a0:f7:03:0a:d8:b5:43:a5:9e:96:40:1a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:7b:44:7e:ad:a9:12:a3:cf:e6:03:b8:fc:
92:78:f8:e2:70:6f:26:3b:14:c1:c7:6b:5b:9b:c2:
b6:9f:25:10:e5:69:fd:6e:ef:d8:9c:4e:68:56:5d:
79:e2:54:87:b2:0f:da:42:ec:69:57:61:32:1e:b8:
0a:45:20:48:ea:34:91:14:fe:5c:6e:cc:bb:97:0b:
ba:21:34:bb:e9:bc:e1:40:12:76:5a:64:1a:90:b0:
16:5c:75:58:d2:ff:af:b7:6b:96:f6:e1:39:0f:d3:
e7:f3:66:19:f1:78:aa:23:e5:49:c5:ab:7b:3d:f3:
a5:47:2f:b4:ea:fb:e8:70:23:bc:76:42:34:f4:54:
e9:2c:cf:45:ae:96:ea:e4:1c:a6:a6:4c:ab:94:a7:
48:25:bb:13:00:b2:2b:46:7a:4e:60:34:26:ba:bf:
8f:3c:e7:8b:86:ee:3f:2e:05:d5:02:ff:8d:41:a0:
fa:02:40:bb:74:4d:77:ae:05:da:43:bf:99:fa:79:
d5:a2:86:e4:ef:db:4e:71:16:32:6d:75:28:1a:2f:
5a:67:1a:0d:75:15:f5:c1:e6:60:3f:11:8e:40:43:
32:9e:60:c6:2a:96:96:30:08:a8:13:11:e0:b8:5f:
07:30:34:52:d2:b6:f5:cb:28:36:3a:be:af:a8:ef:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.55.0/24
IPv6:
2a12:bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50414
50907
Signature Algorithm: sha256WithRSAEncryption
a5:18:bd:3d:b8:6a:ef:55:54:c7:c3:81:89:85:7e:2c:2c:df:
b4:ec:22:64:0a:15:94:fe:31:0e:24:b2:65:1b:41:88:9e:97:
b8:d4:2f:07:c6:92:e1:6a:5a:8c:ad:f2:ec:53:52:cf:4d:85:
3d:ef:39:b7:aa:0a:3c:b8:b6:97:b5:09:ae:b7:a4:fc:5a:52:
b4:c7:a9:e0:46:76:c6:8d:ae:da:59:e5:ec:5d:3d:4b:ea:2b:
80:bd:a6:12:5b:0a:4d:2e:0d:e8:81:10:99:74:e4:39:96:e0:
28:53:5d:35:9e:3d:2c:38:84:c5:2f:d2:c9:0b:56:8c:89:23:
b5:4c:93:43:b7:10:1b:3e:7f:08:10:41:54:02:1a:7f:b2:4c:
03:cb:33:b4:82:f1:c6:a6:60:25:bf:0e:58:d2:94:0b:0a:a9:
4e:28:6d:0c:d4:10:ff:ef:cb:c2:f0:4a:e9:66:69:c1:6b:f1:
13:98:7d:d1:59:80:a3:98:8e:ae:59:e3:87:58:10:80:1d:90:
ad:d8:89:2d:57:41:c5:43:3d:38:a8:c1:c3:19:56:95:37:26:
e0:95:c3:a8:c1:c7:8b:3e:f0:36:5f:11:ed:13:51:fe:cb:eb:
f2:26:55:1a:67:5f:d7:c9:e3:f5:09:97:75:2b:c7:b8:b8:24:
4b:60:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:26:17 2025 by rpki-client