Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MpWUfagzbN3s5pwYshktLNjUGmo.cer
File: MpWUfagzbN3s5pwYshktLNjUGmo.cer (raw, json)
Hash identifier: /WQqTPbFVlQcDXNVAyAD1aB2RmfPSIKDiSaECXLcB/0=
Subject key identifier: 32:95:94:7D:A8:33:6C:DD:EC:E6:9C:18:B2:19:2D:2C:D8:D4:1A:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018572F62015F7B62C7B49FFD6C5915842E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/e8ea05-ebfb-4bab-a237-8da6e6a8f937/1/MpWUfagzbN3s5pwYshktLNjUGmo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/e8ea05-ebfb-4bab-a237-8da6e6a8f937/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 14:50:10 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 77.87.123.0/24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 10:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f6:20:15:f7:b6:2c:7b:49:ff:d6:c5:91:58:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 14:50:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3295947da8336cddece69c18b2192d2cd8d41a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:41:71:17:cb:f7:30:77:90:a8:9c:f0:33:
7a:d7:66:ae:28:08:57:71:b3:ed:9c:43:d4:cd:b5:
7b:e2:c9:c1:f0:f5:84:c6:1d:3f:d0:75:0b:4a:74:
cc:8a:b0:ce:9b:75:e9:32:a1:fa:e6:0a:2c:4e:32:
51:64:17:07:fb:a1:d2:34:fb:fa:e3:3a:df:19:c1:
75:ef:ce:ff:ae:c1:83:31:88:9d:7d:8b:d2:9c:8b:
a7:67:b2:69:01:31:dc:17:54:1d:09:94:d4:73:14:
4a:77:ed:cf:f0:f9:41:f9:79:7b:73:b3:79:06:ab:
5d:16:aa:3e:b7:2a:a3:04:c6:a6:39:1d:a3:07:d0:
84:ab:0b:e0:17:c1:dd:97:d8:d4:45:7d:c8:47:e2:
4a:66:c7:23:fc:e7:48:3c:d1:b1:c3:9b:97:f0:2e:
a6:8c:40:3d:2f:2b:7c:10:65:75:6f:be:66:1b:a6:
c8:f3:8d:65:f2:4f:f1:34:81:e4:db:2b:51:d3:78:
d6:40:e0:83:b8:7d:3c:fc:75:03:f0:cb:5b:68:9d:
51:c1:ea:07:f3:43:e9:a3:2a:41:72:51:e6:51:36:
24:21:7f:44:5a:87:54:ae:4c:88:71:ed:89:77:4a:
46:4c:a7:ab:7b:d6:a3:84:d9:74:88:2a:49:15:51:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:95:94:7D:A8:33:6C:DD:EC:E6:9C:18:B2:19:2D:2C:D8:D4:1A:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e8ea05-ebfb-4bab-a237-8da6e6a8f937/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e8ea05-ebfb-4bab-a237-8da6e6a8f937/1/MpWUfagzbN3s5pwYshktLNjUGmo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e1:70:f4:de:a6:9c:47:d4:19:56:39:b8:ba:39:11:27:82:
77:9b:27:12:24:ff:54:d4:d4:4a:37:b0:a2:18:a2:5e:cb:63:
ed:ee:47:00:a5:ec:80:9e:af:d0:e8:c7:3f:14:55:62:2e:31:
a1:75:87:1f:23:f5:c2:e1:5e:cf:a1:d7:b5:93:24:9b:64:8d:
3d:c5:dd:c1:21:ed:f9:9e:1c:d1:1c:34:c7:13:34:70:1c:b7:
b2:58:2f:7e:28:01:9e:eb:90:d0:a6:c6:21:22:bc:46:a5:b5:
45:af:df:96:e8:90:1e:7d:9c:78:bd:ba:13:d3:61:ee:3a:1f:
f2:26:ed:cf:c1:3d:9a:d2:50:dd:4a:df:13:43:b1:91:c3:79:
9b:7e:19:fc:5c:a1:73:99:89:2c:61:5d:65:4c:86:d7:35:59:
8f:f4:5f:7b:74:af:f9:53:2f:d3:1f:e0:d0:30:6f:08:1f:66:
84:eb:aa:a5:29:90:58:c1:86:29:b4:c5:ff:51:f3:3f:11:0c:
27:f1:0e:2d:ee:ab:53:3b:17:c6:05:37:c5:95:e1:0f:42:bb:
09:72:c5:b3:f7:ed:79:11:5f:88:b5:73:a3:9e:89:f5:85:4f:
5f:c5:6b:2d:4f:be:b5:ae:97:6a:c6:85:15:dc:8b:05:07:da:
4a:b4:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:31:04 2024 by rpki-client on console-ams.rpki-client.org