Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
File: 4Mp9Myha23QpUAh_LnZZIv8-384.cer (raw, json)
Hash identifier: ilvdAHCaVSFTuqGm5gqy/esip2tmA2teZarkXV1Dcec=
Subject key identifier: E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B679FC1E8EECA486FE4EBB1E6EB1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.231.36.0/22
IP: 2a0c:3f00::/29
Validation: Failed, certificate revoked on Tue 27 Jun 2023 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:67:9f:c1:e8:ee:ca:48:6f:e4:eb:b1:e6:eb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0ca7d33285adb742950087f2e765922ff3edfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:3b:7d:f9:2f:a9:0b:a8:30:02:d5:8b:19:
7a:3c:2a:4c:7b:89:04:ff:f1:c7:aa:62:3c:54:58:
a9:1c:1d:aa:79:91:cd:a1:60:e8:4a:f7:4a:d5:29:
b4:71:1b:98:ac:f8:95:9d:de:b1:a7:8c:b2:e6:57:
c6:01:81:51:44:e7:98:5f:d5:e3:2e:7f:67:0e:39:
97:52:84:4f:ac:51:e8:54:c3:64:31:17:f1:a2:c6:
32:6f:b3:ba:f9:08:a1:1c:f6:91:2f:55:9f:3e:39:
9a:36:4a:59:cf:58:93:69:0b:26:3d:a1:ca:f1:5a:
2a:e3:2b:97:bd:33:76:53:62:93:9a:b2:1f:17:ea:
15:e1:06:58:4c:68:8f:89:68:b8:af:82:91:17:f6:
ca:79:43:64:10:7a:49:05:c3:ac:3e:eb:30:7d:a8:
e4:dc:45:17:be:f6:da:9b:3f:c2:ce:dc:13:97:3d:
17:ab:72:e1:5c:0a:59:fd:7a:bf:21:8f:17:f5:b4:
33:c0:05:8d:7d:b4:6c:ea:e7:22:b7:d3:6f:0f:b0:
93:d3:f3:45:e1:97:42:d1:74:76:2c:18:a7:d7:e7:
dd:ec:d4:86:58:fe:20:af:0d:60:5a:ea:a1:04:c3:
58:c4:21:ef:75:8e:a2:79:37:4a:a7:54:b3:0a:d1:
73:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.36.0/22
IPv6:
2a0c:3f00::/29
Signature Algorithm: sha256WithRSAEncryption
37:6b:73:ca:9d:6f:c1:b3:3f:d9:70:b1:cd:d9:52:db:fc:bb:
eb:94:64:86:00:ba:cf:eb:db:be:7d:71:57:ce:e3:38:86:1f:
04:35:0d:a9:8c:ce:51:a2:ca:7a:fc:3c:d0:fd:dc:65:68:88:
1d:0b:45:fe:7c:bc:a5:16:67:5c:77:6f:04:12:3b:7d:6c:6b:
3f:81:f8:8b:d3:a8:ed:11:51:64:8b:12:74:7f:03:6b:b8:92:
21:14:40:87:34:53:6f:6b:0a:db:b2:c6:a8:49:76:6d:a4:e0:
2a:19:07:c5:14:ad:c0:18:f6:30:5b:41:6e:55:79:13:e7:aa:
1f:c1:04:31:c0:34:92:5a:fa:dc:e5:90:3d:37:5c:ee:19:c8:
38:02:ef:1e:f7:93:e2:9f:59:57:2d:df:0b:e3:ed:72:0c:b8:
42:f3:da:26:30:2e:2a:a6:94:f8:98:2e:0b:a2:40:fe:bb:1a:
0f:38:17:06:6d:f2:ec:5c:7c:ee:b7:23:af:18:5b:8f:59:e2:
a3:cf:27:d6:92:7f:ea:94:6a:6a:26:a3:5a:f5:d2:22:1f:c5:
98:04:80:1e:24:c7:10:bc:56:be:53:29:53:d8:2c:c5:78:17:
06:aa:78:4f:15:19:33:e5:09:62:67:a9:34:e5:b4:2d:b2:aa:
4c:de:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:07 2024 by rpki-client on console-fra.rpki-client.org