Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M8KCArYUFnCj_zSMrdYP_3uuZBc.cer
File: M8KCArYUFnCj_zSMrdYP_3uuZBc.cer (raw, json)
Hash identifier: a05eYQaRC8Roia5eoTY27OGjHjeGtqCmLEq9e68VGqs=
Subject key identifier: 33:C2:82:02:B6:14:16:70:A3:FF:34:8C:AD:D6:0F:FF:7B:AE:64:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF94D9E8C2BE9A1A939116A97A1447
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/M8KCArYUFnCj_zSMrdYP_3uuZBc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 130.255.169.0/24
IP: 2a11:a080::/29
Validation: Failed, certificate revoked on Thu 14 Sep 2023 13:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:94:d9:e8:c2:be:9a:1a:93:91:16:a9:7a:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33c28202b6141670a3ff348cadd60fff7bae6417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d6:2e:ba:df:6c:3c:8d:d7:f4:ef:35:ae:20:
df:98:7a:b1:74:69:5f:dc:07:fd:c3:c8:78:2a:e6:
7c:19:b8:f2:d1:4c:41:04:08:e8:20:d6:5f:f6:45:
5f:f4:32:4c:e8:26:bd:cc:7a:b0:6f:3a:ca:66:81:
c9:2a:ad:e8:33:50:67:0b:d7:be:30:89:ac:82:8c:
6f:c0:bd:46:70:75:fe:d1:13:1d:75:a7:bc:cc:5a:
52:d7:37:ed:3d:ca:95:11:05:fc:6c:4d:0e:7d:10:
93:1f:2e:82:a1:a1:93:0b:73:4d:db:a9:28:44:74:
dd:c0:dd:cb:c0:a6:4c:71:62:0c:4c:fa:b2:65:26:
c7:e6:cd:9b:8e:b9:ee:56:38:07:42:a9:cf:c4:30:
92:3a:2e:5a:a1:c7:dc:58:b9:db:73:94:30:a1:6c:
a2:d2:02:01:a1:8d:96:ae:c9:f8:55:c3:50:46:7e:
19:a8:7a:fe:6c:df:e9:dc:eb:3f:7d:b2:57:f4:f2:
4f:ce:6c:9b:ee:19:f3:5b:cb:2f:e9:51:07:00:41:
39:4b:d2:9b:f8:48:1b:db:6b:d5:30:08:58:09:90:
3d:77:f9:07:65:a8:0c:a0:f3:91:a9:ed:8c:c0:1e:
3d:43:3c:ec:25:d3:19:b5:7e:a0:de:cc:4a:51:97:
62:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:82:02:B6:14:16:70:A3:FF:34:8C:AD:D6:0F:FF:7B:AE:64:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f7a017-7fdb-4fc9-88cc-782dd0987ffa/1/M8KCArYUFnCj_zSMrdYP_3uuZBc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.169.0/24
IPv6:
2a11:a080::/29
Signature Algorithm: sha256WithRSAEncryption
68:2f:d7:b8:1f:0f:ad:0c:47:b5:bb:5f:3e:79:48:99:b2:f7:
95:eb:4a:24:37:a2:55:e0:b2:12:8d:dc:b8:c6:1e:a5:cc:81:
6f:da:0c:d9:88:a7:f5:69:e9:41:bf:cd:4b:49:9e:5c:d2:1a:
06:b6:47:52:06:fb:9b:7b:46:68:25:27:5f:68:52:32:59:da:
88:06:28:da:1d:88:2c:29:4a:ca:a1:4f:d4:96:7f:b3:11:ff:
0f:1b:50:bc:2b:99:a2:37:44:b3:76:d3:34:49:38:df:fa:58:
ce:8c:7a:8b:b8:4b:43:8e:a9:e9:59:67:75:05:00:36:52:2b:
7d:bd:35:07:4f:be:f5:8a:5a:dd:3e:55:16:5f:2b:06:2a:ab:
ae:2e:75:ff:84:96:f7:e1:69:cd:a8:84:68:89:da:0d:b7:c5:
ce:7c:f4:9c:d5:8a:28:2d:25:d4:28:d9:41:64:b5:9d:bb:65:
29:85:08:e6:e6:d8:c6:90:7c:8b:ed:c5:b7:0c:6d:5f:e3:22:
23:0d:89:e9:b2:a7:83:83:0e:a7:b7:c3:47:28:c2:bb:5a:a4:
f2:cd:78:fa:ab:55:18:20:6c:53:39:55:eb:dc:78:7b:18:91:
28:f6:26:69:08:ec:70:dc:30:a1:c2:9c:bc:cf:ab:e5:50:c4:
09:78:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:51 2024 by rpki-client on console-ams.rpki-client.org