Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MGLdrE8uKHNbKyH3PKGfQqGOHn4.cer
File: MGLdrE8uKHNbKyH3PKGfQqGOHn4.cer (raw, json)
Hash identifier: ldCr1+mdEITgs1qpucxBA03DC/ChlYO4fP7Bk5I77Ao=
Subject key identifier: 30:62:DD:AC:4F:2E:28:73:5B:2B:21:F7:3C:A1:9F:42:A1:8E:1E:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0185724538FD78F00FCF65E5E1865686C658
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/MGLdrE8uKHNbKyH3PKGfQqGOHn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 11:36:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.204.32.0/24
IP: 2a11:9040::/29
Validation: Failed, certificate revoked on Thu 26 Oct 2023 07:22:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:45:38:fd:78:f0:0f:cf:65:e5:e1:86:56:86:c6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3062ddac4f2e28735b2b21f73ca19f42a18e1e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:c5:4d:ad:8f:b0:37:de:3a:53:94:c0:15:
49:5f:b0:72:51:87:3b:19:7c:9a:e7:55:be:91:c8:
0a:3b:7e:9b:86:89:42:35:3e:5f:58:74:a1:92:9d:
69:a0:fc:94:c0:28:cf:2d:78:0e:39:8b:50:f4:d6:
c9:49:85:71:91:af:cc:e3:56:5c:b6:a6:24:9d:fe:
db:c5:de:ed:57:68:a5:f9:77:e8:2a:bd:93:1f:d7:
95:7c:5f:66:1b:90:0f:fe:35:99:3a:e2:52:38:90:
a2:33:50:d7:6d:ce:7e:b8:4e:2f:99:a4:f7:d5:c2:
08:ce:c4:b9:75:84:00:c4:69:1a:e7:28:ca:01:84:
a8:9d:3d:3e:ea:fe:19:79:bb:9d:b1:21:09:23:c4:
85:e2:a2:c9:20:64:3f:61:b2:f8:3d:a8:a0:6e:0d:
40:77:f4:45:0d:1f:1e:48:d6:85:aa:e0:a1:d3:78:
6e:05:09:6b:3a:8b:a4:6a:ff:0e:b5:65:42:53:17:
2a:73:cc:5c:8e:3b:c7:e1:79:f1:26:83:3b:b3:67:
93:8f:35:5d:b6:89:77:f4:84:89:0b:ec:b4:9d:db:
4b:64:cd:83:48:b1:eb:a4:30:03:80:ad:55:94:82:
fc:7c:72:7f:09:b8:2a:a0:38:c8:7e:37:36:d3:19:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:62:DD:AC:4F:2E:28:73:5B:2B:21:F7:3C:A1:9F:42:A1:8E:1E:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d4bbdc-c00f-4b41-9945-753c39afc2cc/1/MGLdrE8uKHNbKyH3PKGfQqGOHn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.32.0/24
IPv6:
2a11:9040::/29
Signature Algorithm: sha256WithRSAEncryption
a8:d5:56:ea:34:89:05:86:26:2c:3e:9b:4d:55:bb:d6:de:b6:
29:cf:e9:72:0e:d0:dd:af:ba:30:f5:64:f3:fe:7b:6d:42:f5:
25:98:33:12:f1:64:eb:5d:ec:16:22:2f:c9:ab:72:20:4b:f8:
e5:f4:bf:08:9a:5d:77:6f:21:98:aa:15:37:34:63:b2:e4:1e:
9c:63:92:dd:d6:d2:23:85:7e:c0:2d:f9:34:6c:a2:5e:98:fe:
6e:30:15:ea:8d:82:69:1c:37:17:64:d4:c7:87:b9:f9:21:35:
c8:56:c1:20:dd:0c:e5:b6:08:b7:9e:ed:d6:4b:33:67:1d:96:
77:2a:7f:b6:42:c3:d6:c0:dc:ea:5c:cc:b1:f2:c1:8d:a3:06:
04:8b:39:55:da:b3:50:72:b3:6a:79:41:99:c8:15:1e:f0:94:
94:cb:da:30:be:ae:83:e0:2a:d6:f8:ee:bd:2f:21:06:7e:09:
d1:84:a7:46:bd:ef:3f:09:56:81:21:78:dc:24:be:ad:1e:70:
fa:a6:ac:4a:1f:49:0f:7b:c1:f5:ce:e6:68:68:98:88:bf:ca:
cf:e1:f0:a7:e3:26:2a:c0:9c:05:31:72:d3:e2:b8:0f:3f:fc:
1a:61:6e:72:14:9c:27:e9:69:7e:34:8e:72:69:07:24:b4:6c:
b9:d8:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:54 2024 by rpki-client on console-ams.rpki-client.org