Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MY_Wdu0eLdWPu3WWe9npEYn4qvA.cer
File: MY_Wdu0eLdWPu3WWe9npEYn4qvA.cer (raw, json)
Hash identifier: ch1Y5xZ4HOCASP7FxzI7fxqydk1PzBcX9ctN+SvdYU8=
Subject key identifier: 31:8F:D6:76:ED:1E:2D:D5:8F:BB:75:96:7B:D9:E9:11:89:F8:AA:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D89A0BEA397B4AD4A82E008EB80D114
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.104.139.0/24
IP: 2a11:6040::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 07:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:a0:be:a3:97:b4:ad:4a:82:e0:08:eb:80:d1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318fd676ed1e2dd58fbb75967bd9e91189f8aaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:71:aa:12:b1:51:12:66:31:c0:e0:92:75:b8:
25:e2:8a:f8:70:16:27:2b:71:dd:8e:68:69:0e:54:
f7:7e:68:90:c4:88:8b:ea:fa:80:98:c9:c3:ff:cc:
7b:ed:19:38:82:ff:3c:21:ad:db:a3:62:7d:4f:12:
17:59:b5:3a:f9:27:10:7a:3f:e8:b4:37:1c:85:65:
d1:b9:a3:48:9d:0e:c3:1e:23:61:48:15:92:b2:ae:
2b:1a:78:cf:be:16:68:b0:da:9b:e9:ac:2d:d5:02:
b4:2a:73:1c:c6:7f:3e:ba:6e:bc:41:65:42:96:12:
6e:0f:2c:cd:a9:db:df:39:e4:ab:ae:00:e9:6e:f3:
af:8c:7f:68:19:7d:eb:91:5b:33:07:2b:5f:fd:dc:
5b:67:1d:40:db:d5:e3:17:7e:6d:b3:eb:d6:02:97:
19:0f:17:f9:d4:10:ab:23:08:7f:8f:b1:f7:fb:2a:
5c:c4:58:38:d8:71:f7:2b:27:53:54:09:e6:f8:23:
1f:c1:1e:8e:40:ab:66:2b:3e:ee:08:1f:09:f0:58:
9d:90:3b:8b:13:54:6c:63:ac:9b:30:3a:fd:4b:1b:
41:d5:2a:a0:73:59:79:95:85:2d:61:7e:d6:84:90:
82:26:c1:e9:61:35:41:b5:55:3f:8c:63:d8:44:50:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:D6:76:ED:1E:2D:D5:8F:BB:75:96:7B:D9:E9:11:89:F8:AA:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6c72d-5aee-4128-adab-3fceceaa10c8/1/MY_Wdu0eLdWPu3WWe9npEYn4qvA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.139.0/24
IPv6:
2a11:6040::/29
Signature Algorithm: sha256WithRSAEncryption
5f:be:c3:7c:4e:c2:95:d5:cf:e1:f9:25:23:9d:60:fb:9c:54:
81:65:1a:ac:f6:67:95:1f:79:f7:04:6d:89:91:20:21:8f:b1:
02:d1:51:73:a6:e0:28:5f:e5:1d:1b:da:bd:5d:77:40:0b:a7:
4c:35:76:30:0d:53:ea:c7:c6:32:9c:bc:9b:aa:2a:e2:ed:72:
dd:89:56:e6:e0:e9:81:41:45:73:92:5c:11:d3:e0:bb:45:de:
6e:c8:bb:74:ba:da:56:5a:5b:5f:95:59:5e:0b:25:b4:3c:32:
37:5d:bc:13:0c:58:aa:8f:c1:a5:67:cc:25:75:22:b5:3b:f6:
e8:8a:6c:06:76:2c:7b:93:06:95:d7:d5:53:d2:69:84:c2:39:
73:2a:42:0f:9b:bb:cd:e9:81:9b:52:53:30:bc:31:1c:50:e0:
8b:01:80:a1:49:45:94:43:80:0e:e4:e3:06:d7:e8:e2:4c:e5:
7a:49:35:dc:84:c2:ad:26:29:5e:54:7b:9c:61:fc:c6:80:d2:
63:7d:e2:98:d8:c0:1b:5f:1b:b6:58:ba:10:7d:42:4a:1c:bd:
49:b0:a5:6c:87:a0:4d:57:1f:b1:da:96:67:8e:0d:d8:e6:42:
c5:83:8d:ab:00:63:b8:78:66:4a:db:30:6c:de:ac:46:ad:6b:
48:10:4c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:30:59 2024 by rpki-client on console-ams.rpki-client.org