Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/McGhiSNyp1o0y_4UUwrOcZVWHRo.cer
File: McGhiSNyp1o0y_4UUwrOcZVWHRo.cer (raw, json)
Hash identifier: rak6dafTQWl2D7q5+Rgi9dRdZUbecweK8EjzxvDDwP4=
Subject key identifier: 31:C1:A1:89:23:72:A7:5A:34:CB:FE:14:53:0A:CE:71:95:56:1D:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC50026B365BC209D98E12994E405C0B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/d55ab0-b7ac-4a5e-bb33-330a737b5d5a/1/McGhiSNyp1o0y_4UUwrOcZVWHRo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/d55ab0-b7ac-4a5e-bb33-330a737b5d5a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 12:29:30 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 5.42.210.0/24
IP: 2a12:2040::/29
Validation: Failed, certificate revoked on Tue 09 Apr 2024 13:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:26:b3:65:bc:20:9d:98:e1:29:94:e4:05:c0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31c1a1892372a75a34cbfe14530ace7195561d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5b:31:27:1a:38:69:fa:bd:ee:7f:da:12:41:
c7:66:36:43:08:fa:aa:30:4d:93:4d:d5:9a:d0:37:
7d:06:73:a0:4e:aa:b3:6a:61:14:95:de:4b:5e:e6:
6e:a3:17:91:de:4c:2c:cf:18:52:3a:ce:20:9a:4a:
39:bc:e5:3f:07:5e:5c:be:fd:a1:60:66:41:94:39:
de:8d:c0:b4:27:4f:45:92:7a:fb:25:bd:94:63:8d:
de:95:4d:8a:83:20:78:e8:af:90:f5:36:32:0b:12:
5b:e5:19:93:14:2b:eb:0b:85:a0:dd:5a:32:61:c6:
7c:54:f8:65:8d:b6:ec:b3:14:75:99:85:f5:66:13:
72:97:41:69:9e:ef:34:eb:07:83:9d:50:af:37:da:
bd:dc:2e:0e:4e:a5:6d:d7:aa:00:67:46:5c:2a:f0:
70:84:d7:b4:7c:4e:25:3e:a3:c7:ea:e4:d0:c9:c4:
87:31:75:2d:e0:98:19:08:d2:50:ce:1c:22:71:3e:
a4:c5:a7:ed:4a:88:48:1f:1b:49:2b:ad:22:8d:b3:
c8:a6:51:63:92:ae:e8:35:bc:22:04:93:bc:a6:0a:
0b:55:ac:d4:2f:e0:59:dd:18:83:f8:db:d3:3f:fd:
6f:ea:1e:f2:67:b7:00:ec:67:4c:42:0c:2c:37:de:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C1:A1:89:23:72:A7:5A:34:CB:FE:14:53:0A:CE:71:95:56:1D:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d55ab0-b7ac-4a5e-bb33-330a737b5d5a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d55ab0-b7ac-4a5e-bb33-330a737b5d5a/1/McGhiSNyp1o0y_4UUwrOcZVWHRo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.210.0/24
IPv6:
2a12:2040::/29
Signature Algorithm: sha256WithRSAEncryption
97:be:09:cb:c7:d5:00:74:64:1d:c7:24:b3:61:ff:a3:28:87:
9a:9d:83:29:e0:5b:3b:5a:3d:2c:08:d6:80:f5:44:e6:9e:54:
57:3b:95:6b:17:a8:e4:b5:26:2d:93:cc:c7:b2:7b:ce:6f:37:
2b:10:59:fb:9c:1b:fb:94:a2:0b:5d:27:cf:f7:83:d9:6d:62:
2d:ea:62:04:9e:d6:df:93:d2:2c:95:40:81:39:24:ab:42:af:
2a:f3:5e:e6:1a:9e:ba:4f:77:65:b8:fa:f7:ca:5c:84:2c:c3:
3f:0d:49:6d:28:26:c8:ff:e2:57:74:6a:92:6d:76:21:f1:9f:
8a:b2:a2:74:99:27:67:db:ee:ff:38:63:a6:28:41:d3:0d:7a:
b4:55:25:4c:cc:5b:bb:31:08:5c:b6:8e:27:3a:fa:ff:dc:b0:
27:6b:16:c4:34:81:4e:64:ed:96:38:76:90:a6:fb:b3:5c:89:
81:e8:2b:08:81:7a:9a:d7:44:5c:84:e8:41:c1:92:e7:6b:6c:
4f:ef:ca:44:81:a2:02:27:54:57:b0:d7:63:8e:2a:4c:ea:01:
0a:08:e3:d2:1c:88:1f:89:3a:b7:28:b6:18:c1:66:37:38:3d:
8e:69:42:76:ad:42:a4:bd:ff:e8:b6:c2:88:ae:b8:be:30:25:
92:59:74:75
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYzFACazZbwgnZjhKZTkBcCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWMxYTE4OTIzNzJhNzVhMzRjYmZlMTQ1MzBhY2U3MTk1NTYxZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1sxJxo4afq97n/aEkHHZjZDCPqq
ME2TTdWa0Dd9BnOgTqqzamEUld5LXuZuoxeR3kwszxhSOs4gmko5vOU/B15cvv2h
YGZBlDnejcC0J09Fknr7Jb2UY43elU2KgyB46K+Q9TYyCxJb5RmTFCvrC4Wg3Voy
YcZ8VPhljbbssxR1mYX1ZhNyl0Fpnu806weDnVCvN9q93C4OTqVt16oAZ0ZcKvBw
hNe0fE4lPqPH6uTQycSHMXUt4JgZCNJQzhwicT6kxaftSohIHxtJK60ijbPIplFj
kq7oNbwiBJO8pgoLVazUL+BZ3RiD+NvTP/1v6h7yZ7cA7GdMQgwsN95BGQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDHBoYkjcqdaNMv+FFMKznGVVh0aMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2Q1NWFi
MC1iN2FjLTRhNWUtYmIzMy0zMzBhNzM3YjVkNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvZDU1YWIw
LWI3YWMtNGE1ZS1iYjMzLTMzMGE3MzdiNWQ1YS8xL01jR2hpU055cDFvMHlfNFVV
d3JPY1pWV0hSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQABSrSMA0EAgACMAcDBQMqEiBAMA0GCSqGSIb3
DQEBCwUAA4IBAQCXvgnLx9UAdGQdxySzYf+jKIeanYMp4Fs7Wj0sCNaA9UTmnlRX
O5VrF6jktSYtk8zHsnvObzcrEFn7nBv7lKILXSfP94PZbWIt6mIEntbfk9IslUCB
OSSrQq8q817mGp66T3dluPr3ylyELMM/DUltKCbI/+JXdGqSbXYh8Z+KsqJ0mSdn
2+7/OGOmKEHTDXq0VSVMzFu7MQhcto4nOvr/3LAnaxbENIFOZO2WOHaQpvuzXImB
6CsIgXqa10RchOhBwZLna2xP78pEgaICJ1RXsNdjjipM6gEKCOPSHIgfiTq3KLYY
wWY3OD2OaUJ2rUKkvf/otsKIrri+MCWSWXR1
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:55:16 2025 by rpki-client