Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
File: ka_MBd8C8nRw34OBFAuVquwfNb0.cer (raw, json)
Hash identifier: EKKC+KGUYnJxRn8IQ36tnaXd1R7kDY2Og2P3M3IcP9E=
Subject key identifier: 91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFAEF5715DE1AF1BA24919C3F7DE8B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.188.0/24
IP: 2a12:e900::/29
Validation: Failed, certificate revoked on Mon 20 Nov 2023 10:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:ef:57:15:de:1a:f1:ba:24:91:9c:3f:7d:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91afcc05df02f27470df8381140b95aaec1f35bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:f7:7d:8c:8b:c5:34:2e:4c:ab:8c:8e:9c:
a5:4d:26:2e:d5:b6:6e:cb:bd:50:0d:39:24:ff:34:
c1:f7:4c:00:7a:86:1a:4d:54:b3:bc:d9:f6:45:ca:
92:fa:00:b2:cf:96:ed:46:36:53:ec:22:aa:00:b0:
79:ee:6b:b3:46:a4:dd:ae:25:62:6f:e2:51:a6:73:
78:52:0d:76:e1:9b:a6:9c:dd:ee:2e:f6:95:d5:f5:
9b:5f:32:43:47:ea:3c:a5:c2:c6:55:03:00:f6:27:
ff:ac:ac:90:fc:f8:55:a2:32:f8:40:44:f4:3a:2f:
06:6f:2f:58:de:a4:75:71:25:0d:e8:b7:7d:1b:6e:
fd:09:6b:3c:5d:94:76:33:62:60:1a:10:e0:bf:35:
cb:46:05:75:47:79:3d:20:cc:e4:13:33:a1:a6:9b:
ca:55:5d:29:de:aa:6d:50:43:2e:aa:82:7b:de:65:
45:21:c0:c7:6b:c2:c7:b2:9c:0a:43:b7:02:ba:0a:
23:d8:eb:a0:4a:32:c9:92:73:82:e9:51:4f:61:f0:
6a:e7:e4:ac:68:3d:2c:c9:de:2f:27:1c:03:9a:99:
75:44:06:a0:07:27:bb:5a:ec:ac:1c:9a:a4:06:9c:
0b:fb:7e:6e:f0:a4:c6:b6:08:37:2b:b0:f2:6f:29:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.188.0/24
IPv6:
2a12:e900::/29
Signature Algorithm: sha256WithRSAEncryption
00:12:15:c5:6b:26:28:f4:37:34:29:85:e1:2f:7d:70:ac:e2:
c1:b0:db:95:c7:e7:54:7a:ae:6e:ed:0d:24:4b:d0:a2:c4:58:
01:45:4c:20:45:9b:07:d3:c6:05:a4:10:23:31:e4:b4:fd:1d:
b9:15:04:30:96:d9:53:18:ba:fc:3a:e9:30:c3:bf:28:9a:15:
c8:b6:b1:92:5a:54:28:71:02:57:5f:0f:fa:ca:c0:77:24:e7:
13:f9:96:e0:8c:a8:f6:82:d7:33:e0:b0:4d:85:83:48:e9:64:
65:30:60:c8:2e:01:ce:36:7b:2f:8f:8f:3f:fe:30:bc:44:3c:
d2:8b:38:06:ac:88:21:c4:b4:28:3c:66:49:31:17:c1:56:27:
85:1b:16:c7:7c:2f:a7:fe:d7:e3:a2:e2:27:13:7b:02:c0:22:
69:29:e9:21:01:90:45:9c:97:a3:fb:4d:49:5d:0c:01:04:e5:
b3:eb:6b:96:fb:a0:ad:e1:ce:69:17:6e:c1:96:22:e1:69:ad:
20:47:ad:5d:50:ac:e8:3b:53:91:05:31:42:b7:c1:cb:91:94:
73:36:e9:3e:dd:69:28:cc:ca:d6:b9:87:68:78:6c:32:42:55:
27:5a:82:09:85:3d:ba:a9:ed:9e:c8:cf:96:b9:85:ec:be:0f:
0d:1a:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:55:52 2024 by rpki-client on console-ams.rpki-client.org