Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MpRFWGK2CEStqBBArQc8yurVE1s.cer
File: MpRFWGK2CEStqBBArQc8yurVE1s.cer (raw, json)
Hash identifier: oSiOheAZYQ93TXqJOccsJGG0BupSPh1fbW3usMUqMaw=
Subject key identifier: 32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF52F4206A9BAAA3FA2C58DA133FB54
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:32:11 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 62.204.34.0/24
IP: 2a11:9140::/29
Validation: Failed, certificate revoked on Mon 16 Oct 2023 14:35:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f5:2f:42:06:a9:ba:aa:3f:a2:c5:8d:a1:33:fb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3294455862b60844ada81040ad073ccaead5135b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:24:43:ec:dc:1f:8d:9b:ee:a2:e6:56:d1:
f8:82:01:0b:92:36:a2:1a:76:44:9d:99:eb:42:23:
53:02:c5:a0:fd:9f:89:71:2f:de:97:af:be:04:e4:
8a:8e:0a:1e:46:2b:77:b2:d3:ac:e5:a2:df:07:c0:
e5:30:ff:a4:bf:5e:b6:ff:02:17:43:b4:5a:7b:73:
1a:c4:3e:94:f9:67:c1:9f:55:47:0a:21:74:d3:fd:
ab:67:a0:68:1a:85:4a:39:0a:a3:11:52:b1:6d:bd:
22:8b:86:f7:83:fa:ee:b3:eb:d3:f7:ef:89:9a:69:
80:31:04:ed:78:0f:84:b8:8c:63:75:b3:1f:24:96:
5c:a5:7a:d5:23:2d:6b:4a:60:7e:f3:02:60:54:6d:
f8:8a:a0:c7:d2:96:44:6f:c1:1c:6d:ff:07:06:bc:
8b:23:0d:e1:05:bd:d7:8d:df:14:aa:e3:b8:1d:4e:
84:8a:23:3c:c6:2f:bd:4d:89:8e:6a:ce:b8:e6:4c:
34:ec:5e:d1:78:08:f6:e9:f0:1e:20:30:cd:cf:68:
54:b9:48:fd:e7:13:68:e9:48:11:cb:af:06:bc:ee:
3d:b2:5f:21:eb:f3:e1:1e:32:65:a5:0c:c4:e0:3c:
c0:a9:12:9b:67:41:ba:ed:90:84:99:d0:7a:e6:fc:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:45:58:62:B6:08:44:AD:A8:10:40:AD:07:3C:CA:EA:D5:13:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d0aabb-6f20-477f-a91a-013d10838863/1/MpRFWGK2CEStqBBArQc8yurVE1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.34.0/24
IPv6:
2a11:9140::/29
Signature Algorithm: sha256WithRSAEncryption
69:b9:ad:3b:13:16:6f:15:34:75:47:44:6b:68:35:40:c7:3b:
e5:9c:72:b0:b4:eb:09:87:7b:bb:64:92:98:90:bf:9b:12:5e:
f7:1d:0b:6d:bf:49:19:7b:f6:d0:49:0f:03:a8:13:17:21:e6:
c5:b0:b3:a6:c2:de:05:72:f3:cd:20:ec:41:ac:0f:d4:9c:22:
8d:65:f8:b7:a5:25:a6:d3:0c:6b:02:c0:57:b2:de:c4:27:37:
c1:c3:c0:8e:86:a7:1a:e5:90:cd:ad:e5:d6:79:33:fa:d4:a0:
b9:3d:0f:ed:2d:cb:85:71:7a:06:f3:47:65:b0:46:1e:18:ef:
19:ac:39:e2:70:66:9c:42:43:d8:36:42:60:02:96:01:bc:49:
33:55:54:b2:17:8e:dc:00:64:8f:ae:27:eb:69:61:4f:9a:2e:
bb:fe:e7:ad:d2:ce:d2:11:50:fb:b2:7d:a4:67:77:6d:9d:3d:
71:af:7a:4c:05:32:e2:76:47:75:b0:c2:7b:82:2c:8a:ef:b6:
76:0d:24:08:f6:3b:c7:ab:77:96:28:67:b6:08:c7:0e:91:d3:
9f:9e:a2:8f:cf:41:a4:28:35:e1:2c:09:51:93:da:5c:80:a1:
fe:92:19:81:2f:1d:6f:73:db:50:6e:c4:d6:58:09:3c:db:24:
65:05:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-fra.rpki-client.org