Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MWHHvsHXHTSZITs7BVL-biUToyY.cer
File: MWHHvsHXHTSZITs7BVL-biUToyY.cer (raw, json)
Hash identifier: aqLvY/7euIGZeFZMq695qdMgLh0OlVJcB0OsUrOwTK4=
Subject key identifier: 31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B4F93847686AFDCAEEFAF146E9C02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:04 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.93.120.0/22
Validation: Failed, certificate revoked on Fri 22 Dec 2023 09:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:4f:93:84:76:86:af:dc:ae:ef:af:14:6e:9c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3161c7bec1d71d3499213b3b0552fe6e2513a326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:7e:54:13:87:52:ef:30:60:2c:da:78:c6:
80:0e:5e:3d:78:e8:6d:f1:ed:62:ab:f2:3b:7d:b1:
7c:12:3d:8d:03:91:11:96:9a:e7:dd:a5:00:a4:12:
ed:6b:8d:95:2a:70:bd:6a:67:b5:d4:5d:c3:56:8a:
a9:25:f1:fa:7c:3f:e3:83:f5:86:b7:d4:27:9a:a7:
47:ba:7b:61:8a:8e:62:53:89:8e:6d:ae:43:35:17:
aa:68:e8:7b:c8:58:e9:f4:43:0f:97:f0:af:50:6b:
a8:27:35:04:7a:77:bc:7b:ac:26:36:08:f0:3f:5d:
d2:88:77:62:1a:ad:64:76:ce:60:04:f5:f9:71:eb:
7e:36:80:aa:b1:75:e3:1c:62:d5:a9:b3:8c:f1:b3:
e2:c1:80:77:8f:54:98:d1:5c:4b:60:39:81:a3:1a:
7d:2c:9e:da:65:4a:fb:b7:b5:14:1b:dc:ac:e6:bd:
1c:f0:0f:f6:15:f7:da:b4:20:d9:0a:38:f8:91:6e:
76:27:92:34:52:0b:d7:5f:1d:71:44:47:b4:4d:17:
50:ff:d0:43:0f:4f:9f:04:f0:89:3c:7c:00:eb:b4:
a7:dc:a9:ca:3a:7b:97:1f:c5:98:8c:37:cc:f8:85:
3c:b2:2a:95:42:31:88:bf:72:44:41:c2:f5:f3:d2:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:C7:BE:C1:D7:1D:34:99:21:3B:3B:05:52:FE:6E:25:13:A3:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec1b37-9533-43f9-938d-82b9fb9a2f50/1/MWHHvsHXHTSZITs7BVL-biUToyY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.120.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b4:f7:60:39:54:7e:52:8b:91:86:f9:33:36:d4:1f:92:5a:
9c:35:f8:09:67:69:d5:07:dc:48:c7:2a:07:f6:9e:48:90:c1:
bf:2a:5a:af:13:1e:ef:ed:8e:4a:d3:fa:b8:0a:37:91:b3:fd:
7f:02:bf:e3:c0:19:52:59:ab:94:29:b2:f5:8e:be:75:14:38:
e0:d0:83:84:2b:25:bf:79:76:ef:73:e4:85:f5:c5:bc:14:cd:
f1:8d:fa:9e:b1:bf:89:55:c1:05:9e:a0:29:3b:ee:26:f6:be:
00:d8:17:5e:4c:ce:02:1f:c3:a7:a8:87:f5:f3:12:8e:a1:d2:
84:c9:c7:4b:37:84:dc:9f:4c:f2:a3:74:d7:0a:b4:5e:05:62:
49:bc:97:6f:2d:fb:70:7c:b1:6d:d9:21:7a:ba:be:01:8b:34:
01:fa:f1:60:59:08:8c:ce:a5:b5:de:63:8b:e8:14:67:fe:70:
87:05:4c:d5:40:b8:92:82:76:b2:24:e8:a5:91:76:da:27:9b:
e5:3f:10:04:f4:3c:fa:41:50:e0:d4:b5:aa:48:fc:89:c4:df:
25:5b:71:5d:49:12:3d:33:72:23:1f:f3:5e:f8:b3:c6:4d:d0:
98:49:12:98:51:3a:ae:8d:48:a4:7c:19:65:71:3d:c2:b4:32:
7d:0b:f3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:58 2024 by rpki-client on console-ams.rpki-client.org