Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer
File: Mlrv_iC2-aRkdBvh8z2vFGXDb6E.cer (raw, json)
Hash identifier: RXVyjPc/N+yz9LcDOVsNBXjrnbyHLWhKyMrvOFcpLgw=
Subject key identifier: 32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1AA35276056B6D3CF1061361EEFF25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:32:20 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.104.133.0/24
IP: 2a11:5d40::/29
Validation: Failed, certificate revoked on Fri 03 Nov 2023 10:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1a:a3:52:76:05:6b:6d:3c:f1:06:13:61:ee:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:32:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=325aeffe20b6f9a464741be1f33daf1465c36fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:f3:c7:10:fb:28:2c:e9:9d:42:0f:d8:41:
d4:b0:1d:7f:9e:3f:1c:79:9c:fe:42:a8:05:c5:8c:
e2:2a:e4:28:d0:e2:7b:8d:04:cd:97:44:00:fd:36:
fa:d0:c2:11:b2:9e:03:79:71:7f:74:c8:19:98:a1:
8c:75:96:ac:fa:a9:0b:51:27:42:b8:2d:91:05:b1:
3e:95:e3:24:1a:80:5a:3f:e2:01:07:f2:26:eb:e4:
bc:55:c5:fe:6f:c7:f5:64:61:96:a8:1b:c4:8d:29:
a9:4d:d5:28:f4:19:24:3d:a4:de:cb:d2:5b:74:bc:
3b:7c:a9:f6:7a:e0:d7:01:b4:07:3d:77:71:df:d0:
7a:80:fb:b0:dc:17:d2:c2:5d:7d:3f:3e:28:dc:63:
98:03:ef:8e:8d:15:a4:02:e6:ee:91:b6:9d:2b:bb:
fd:1e:8f:1e:03:01:d5:18:04:b5:91:b7:67:23:36:
8e:f6:69:a0:4d:63:b8:44:f4:7c:84:e8:e5:b3:bc:
2b:a3:23:e1:87:0d:95:dc:e9:52:5f:bb:91:64:d0:
05:d8:a4:73:58:18:b3:a5:38:63:28:38:f5:c0:0c:
1d:da:bf:34:6b:01:56:01:b5:49:40:3e:92:3e:e2:
5e:5f:ff:a8:79:2c:9c:53:64:2a:c8:c8:33:25:9f:
2e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5A:EF:FE:20:B6:F9:A4:64:74:1B:E1:F3:3D:AF:14:65:C3:6F:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/07d0a8-70a9-4e56-9415-e95f6e834ced/1/Mlrv_iC2-aRkdBvh8z2vFGXDb6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.133.0/24
IPv6:
2a11:5d40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:8c:47:2f:ba:7a:c5:41:2e:11:73:1a:98:20:43:cb:51:6f:
d3:81:61:f3:a1:e1:8c:f1:b7:16:ed:65:bc:d0:01:d8:f7:be:
d4:91:a4:fe:6b:db:8e:f0:54:d7:0d:87:f8:32:77:d3:6b:62:
23:f4:ea:ea:2f:c6:f3:5b:f9:60:b1:cf:df:e3:19:cc:49:25:
d5:e5:18:0d:c4:20:73:27:9f:1f:cc:6a:97:5b:d7:87:f2:ea:
d6:c0:d8:be:a1:03:b6:63:31:2a:1f:53:8d:dc:97:5c:27:28:
55:a2:95:33:86:94:21:e8:bc:60:6c:20:76:22:b7:d2:3f:02:
b5:e9:1d:a2:ad:c3:18:8f:23:a6:0f:45:8d:77:8a:4f:7e:5a:
22:55:ec:96:49:2b:04:3d:6c:db:73:44:89:b2:95:5c:95:c5:
79:5a:11:be:17:5a:20:29:e3:b8:21:6b:ed:04:8f:1a:ce:e1:
6f:84:28:e0:52:ab:7c:96:48:9c:e0:0a:61:11:c9:70:39:10:
05:39:a2:51:f6:e4:c6:47:f9:32:d3:f8:da:06:78:f4:44:97:
85:87:61:4a:0c:bb:f6:2c:f8:8c:17:b0:4a:61:97:76:28:43:
c9:f6:e8:a1:72:e0:63:be:12:54:9f:ae:af:f0:14:01:9d:b3:
84:8f:6c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-fra.rpki-client.org