Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MXG_prPTLf46DuLfd8--WFwn9ds.cer
File: MXG_prPTLf46DuLfd8--WFwn9ds.cer (raw, json)
Hash identifier: OvZ6LDgdvbl65a+M9/jY3jFTAkOOtdH3oKlNbrzlcIA=
Subject key identifier: 31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856CAD5024A9267945FE8BA33CF7F2BFDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 09:32:55 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 34704
IP: 37.208.48.0/21
IP: 93.174.32.0/21
IP: 213.232.80.0/22
IP: 2a07:5e40::/29
Validation: Failed, certificate revoked on Tue 12 Dec 2023 07:54:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ad:50:24:a9:26:79:45:fe:8b:a3:3c:f7:f2:bf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3171bfa6b3d32dfe3a0ee2df77cfbe585c27f5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:c7:a1:ea:38:50:8a:76:4f:29:67:6b:f9:
4b:9a:39:9f:2f:3c:82:6e:be:45:69:a7:05:3f:e6:
69:74:a4:16:89:6a:05:a9:21:66:2e:ba:d2:9e:0e:
43:64:18:da:20:01:f4:b5:55:44:95:aa:00:cc:e9:
a7:1d:08:57:52:24:9d:31:f1:70:af:6f:74:bb:04:
5d:34:e7:9b:bb:ea:f2:6f:bd:b8:7d:2a:32:6f:73:
d0:79:51:ea:1f:d4:4e:e7:90:ff:1b:aa:db:8e:6e:
6a:c3:41:7b:d3:85:3c:14:56:27:46:ca:21:cc:15:
71:36:fe:8d:d5:b4:d7:e7:7a:39:97:26:bc:9a:fb:
5b:57:cb:ba:ba:78:fb:03:75:46:c8:03:3d:f7:8d:
20:c2:d4:05:f5:f4:75:56:66:bc:ae:89:7b:29:3b:
d2:74:20:0d:03:e8:b2:65:1e:e1:36:af:93:b7:f0:
98:00:55:34:31:e6:d8:f3:43:b7:d3:eb:c5:a5:f7:
8f:df:61:97:5e:66:c9:9b:78:c1:75:22:78:ab:bf:
a8:b1:b9:ca:8c:6a:df:a0:ef:dd:c6:f5:1c:81:ba:
2a:3b:e5:70:67:08:59:ac:59:80:4c:05:b6:6f:76:
83:fd:54:cd:47:8c:1a:1d:5e:fe:b6:66:fc:46:f3:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:BF:A6:B3:D3:2D:FE:3A:0E:E2:DF:77:CF:BE:58:5C:27:F5:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/f08585-68b1-490d-a7fa-a51926601f4e/1/MXG_prPTLf46DuLfd8--WFwn9ds.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.48.0/21
93.174.32.0/21
213.232.80.0/22
IPv6:
2a07:5e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34704
Signature Algorithm: sha256WithRSAEncryption
34:87:08:9d:ec:64:bf:6c:a7:02:57:85:72:09:95:02:4c:c4:
db:b1:2b:a5:81:1f:b8:6b:2d:7e:73:94:d9:c1:65:03:d1:bf:
29:52:82:3a:cc:50:9b:a9:d4:54:74:83:ff:4a:98:e8:fe:c8:
f6:ed:a4:55:16:61:9b:48:c7:b6:4d:85:8a:c1:33:92:fc:32:
ae:e4:78:99:98:8c:2e:91:8f:d4:7e:99:b9:2a:d6:62:1f:d5:
f5:e7:e3:53:8b:70:f6:cd:5e:f5:11:49:de:9a:ac:d4:29:3d:
4a:00:86:88:e4:5e:58:40:81:e7:a2:14:e0:0e:48:8c:5c:9c:
07:f3:40:89:97:d0:ec:f5:4e:eb:c2:a1:2c:13:42:3d:63:20:
d4:a2:7a:03:a8:c7:22:aa:2d:fe:55:5a:3f:94:49:5c:46:e5:
b3:ec:81:54:cf:d5:db:44:f9:65:5a:9c:a2:db:61:af:4a:d4:
f8:ce:b1:57:ae:0d:18:0a:92:21:9f:fe:2a:48:4e:89:75:35:
6b:34:bc:d6:91:a0:64:49:24:80:6c:ac:4c:3d:56:0b:35:2f:
e4:96:67:e7:12:fa:e0:d0:a7:12:28:ea:2f:c3:c6:ac:66:9c:
72:9e:45:f4:27:87:99:cc:fe:46:80:8b:4f:15:db:07:f9:cd:
f2:3b:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:58 2024 by rpki-client on console-ams.rpki-client.org