Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer
File: MYvRHaD6nJSeLkqHfF2U4U_9fbw.cer (raw, json)
Hash identifier: fjw4K4hl1+z8VllF0G0Vjw+uX5oGsTgGmgb0IivQcc0=
Subject key identifier: 31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFE0EBE2C4F32342354F13A4361B4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:35 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 44016
IP: 91.235.168.0/24
IP: 193.23.60.0/24
IP: 193.23.118.0/24
IP: 212.115.104.0/22
IP: 2001:67c:2d78::/48
IP: 2a09:8400::/29
IP: 2a0f:75c0::/29
Validation: Failed, certificate revoked on Wed 13 Dec 2023 13:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:e0:eb:e2:c4:f3:23:42:35:4f:13:a4:36:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318bd11da0fa9c949e2e4a877c5d94e14ffd7dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:b0:00:55:bf:a9:11:6f:89:6e:44:af:f5:
7d:3a:34:39:c3:08:01:45:ef:b7:90:47:63:38:7a:
3b:2c:18:00:ab:24:f6:cd:e8:2d:84:1b:7e:07:fd:
74:64:68:90:c8:b6:17:a4:6c:bf:1b:f9:29:b3:e8:
10:ac:97:bb:4c:f4:4d:bf:4d:eb:56:bd:e6:a8:1a:
00:cc:fb:c7:15:c1:2d:14:ff:c0:cd:91:92:4d:47:
15:59:4f:a3:86:e2:01:ba:9e:02:2d:5c:13:0b:4e:
31:b1:09:32:a8:f5:13:c6:6c:fb:ad:a5:9c:6d:f7:
17:ec:bb:06:0d:ec:52:11:2f:5f:c2:7d:a4:8c:47:
66:eb:2e:6c:d7:c5:af:71:9c:43:7a:e6:e2:82:8f:
5c:76:e3:c8:c3:3a:eb:52:c5:88:d4:e6:41:36:86:
32:66:af:fc:84:86:d7:07:a2:9a:ca:7c:71:49:51:
49:80:5b:f8:ed:47:b2:8b:6a:b0:cd:ee:64:fc:e7:
2f:f1:82:f0:d7:fc:b9:1a:96:cc:fb:b1:f8:53:f0:
31:8a:80:dd:8f:07:91:71:30:e2:4f:7a:9d:40:1d:
52:27:8d:7b:3e:49:4f:ea:02:b2:08:3c:cb:78:91:
97:9f:55:f7:ec:03:8d:01:2d:12:4c:a1:c4:c2:71:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8B:D1:1D:A0:FA:9C:94:9E:2E:4A:87:7C:5D:94:E1:4F:FD:7D:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d70dad-b80f-41d8-b655-5e1fab7b87cf/1/MYvRHaD6nJSeLkqHfF2U4U_9fbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
193.23.60.0/24
193.23.118.0/24
212.115.104.0/22
IPv6:
2001:67c:2d78::/48
2a09:8400::/29
2a0f:75c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44016
Signature Algorithm: sha256WithRSAEncryption
29:0b:af:ef:1d:cf:6a:93:a9:c2:27:cb:67:a0:1e:58:51:ad:
3d:35:db:fd:55:16:ca:3a:2a:c3:4d:71:93:42:22:d7:57:3a:
92:a2:19:49:7d:35:e7:61:a4:3c:ce:4e:da:48:6f:df:dd:74:
76:e5:fa:e7:d7:8a:66:e8:12:ff:00:60:f4:da:ed:10:de:41:
f1:2b:4a:a8:4c:b6:66:89:57:a5:ac:ce:6b:a5:64:c6:58:8c:
55:70:0f:35:cd:5e:fd:95:eb:65:d9:4f:a8:60:c6:a7:c8:f8:
1e:f7:48:73:57:7b:2e:79:ee:2a:39:29:70:f6:67:b6:2c:06:
5b:80:af:ba:54:83:60:fb:ad:50:3c:c1:b0:24:1b:92:f4:c2:
7a:2a:5f:44:85:11:6d:89:2c:a2:b5:24:6e:6d:55:54:f4:67:
fc:61:46:a1:b8:a8:d4:bb:c6:fd:09:d6:4b:c0:45:65:9c:bd:
fd:60:f4:61:0d:41:03:cf:c8:0d:1c:d7:3c:4e:7a:78:3b:2c:
45:9c:05:0c:9a:0f:15:4c:04:e2:1b:c0:e6:f2:13:cf:bb:f7:
e2:40:e6:56:ea:d6:ac:09:60:79:36:08:76:23:d4:27:d7:21:
d6:eb:80:cc:4c:f6:0e:79:9a:d7:3a:ad:e9:d9:d1:1e:92:5b:
ba:c9:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:17 2024 by rpki-client on console-fra.rpki-client.org